CVE-2021-37192: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.0 SP2. The affected software has an information disclosure vulnerability that could allow an attacker to retrieve a list of network devices a known user can manage...

rConfig SQL Injection Vulnerability (CNVD-2021-61756)

rConfig is an open source network device configuration management utility. rConfig version 3.9.5 is vulnerable to a SQL injection vulnerability that stems from an unvalidated dbName parameter in ajaxDbInstall.php, which can be exploited by attackers to access sensitive database information...

Unspecified Vulnerability in D-Link DAP-1330

D-Link DAP-1330 is a network device a WIFI device from AUO D-Link, Taiwan, China. A security vulnerability exists in the D-Link DAP-1330 1.13B01 BETA, which stems from a lack of proper validation of the length of user-supplied data before copying it to a stack-based fixed-length buffer. An attack...

Unspecified Vulnerability in D-Link DAP-1330 (CNVD-2021-51473)

D-Link DAP-1330 is a network device a WIFI device from AUO D-Link, Taiwan, China. A security vulnerability exists in the D-Link DAP-1330 1.13B01 BETA, which originates from a failure to properly validate the length of user-supplied data before copying it into a fixed-length buffer. An attacker...

D-Link DAP-1330 安全漏洞

D-Link DAP-1330 is a network device a WIFI device from AUO D-Link, Taiwan, China. A security vulnerability exists in the D-Link DAP-1330 1.13B01 BETA, which originates from a failure to properly validate the length of user-supplied data before copying it into a fixed-length buffer. An attacker...

PT-2024-11307 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a Use After Free UAF bug in the fza probe function. The fp variable, which is netdev private data, cannot be used after the free netdev call. Using fp after fre...

NetworkManager bug fix and enhancement update

An update is available for NetworkManager. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list NetworkManager is a system network service that manages network device...

Huawei eCNS280_TD 竞争条件问题漏洞

Huawei eCNS280TD is a core network device for the wireless broadband trunking system from Huawei China. Huawei eCNS280TD is vulnerable to a competitive condition that could be exploited by an attacker to cause anomalies in affected devices...

QEMU: reachable assertion failure in net_tx_pkt_add_raw_fragment() in hw/net/net_tx_pkt.c

An assertion failure flaw was found in QEMU in the network packet processing component. This issue affects the "e1000e" and "vmxnet3" network devices. This flaw allows a malicious guest user or process to abort the QEMU process on the host, resulting in a denial of service...

CVE-2020-27184

The NPort IA5000A Series devices use Telnet as one of the network device management services. Telnet does not support the encryption of client-server communications, making it vulnerable to Man-in-the-Middle attacks...

CVE-2020-27184

CVE-2020-27184 affects NPort IA5000A Series network device servers. Root cause: Telnet-based management communications lack encryption, enabling potential Man‑in‑the‑Middle interference. Practical impact: exposure of sensitive information via unencrypted traffic as described in vendor/NVD entries...

KYOCERA Printer d-COPIA253MF 路径遍历漏洞

The KYOCERA Printer d-COPIA253MF is a network device from the Turkish company KYOCERA. It provides a printing function. A path traversal vulnerability exists in Kyocera Printer d-COPIA253MF plus. An attacker could retrieve or view arbitrary files from an affected server...

USN-4904-1: Linux kernel vulnerabilities

Ben Harris discovered that the Linux kernel would strip extended privilege attributes of files when performing a failed unprivileged system call. A local attacker could use this to cause a denial of service. CVE-2015-1350 Andrey Konovalov discovered that the video4linux driver for Hauppauge HD PV...

MDR Vendor Must-Haves, Part 2: Ingestion of Network Device Data

This blog post is part of an ongoing series about evaluating Managed Detection and Response MDR providers. For more insights, check out our guide, “10 Things Your MDR Service Must Do.” There are many factors to consider when assessing which Managed Detection and Response MDR vendor is the right f...

lxc:fuzz-lxc-config-read: Crash in lxc_free_netdev

Project: https://github.com/lxc/lxc.git Detailed Report: https://oss-fuzz.com/testcase?key=5791654037553152 Project: lxc Fuzzing Engine: libFuzzer Fuzz Target: fuzz-lxc-config-read Job Type: libfuzzerubsanlxc Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffffffffff7 Crash Stat...

lxc:fuzz-lxc-config-read: Use-of-uninitialized-value in lxc_get_netdev_by_idx

Detailed Report: https://oss-fuzz.com/testcase?key=5076762997424128 Project: lxc Fuzzing Engine: libFuzzer Fuzz Target: fuzz-lxc-config-read Job Type: libfuzzermsanlxc Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: lxcgetnetdevbyidx setconfignetnic parseline...

lxc:fuzz-lxc-config-read: Use-of-uninitialized-value in lxc_free_netdev

Detailed Report: https://oss-fuzz.com/testcase?key=4983746395766784 Project: lxc Fuzzing Engine: libFuzzer Fuzz Target: fuzz-lxc-config-read Job Type: libfuzzermsanlxc Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: lxcfreenetdev lxcfreenetworks lxcconffree...

rConfig 3.9.6 Local File Inclusion

Exploit Title: rConfig 3.9.6 - 'path' Local File Inclusion Authenticated Date: 2021-03-12 Exploit Author: 5a65726f Vendor Homepage: https://www.rconfig.com Software Link: https://www.rconfig.com/downloads/rconfig-3.9.6.zip Version: rConfig v3.9.6 Install scripts :...

rConfig 3.9.6 - (path) Local File Inclusion (Authenticated) Vulnerability

Exploit Title: rConfig 3.9.6 - 'path' Local File Inclusion Authenticated Exploit Author: 5a65726f Vendor Homepage: https://www.rconfig.com Software Link: https://www.rconfig.com/downloads/rconfig-3.9.6.zip Version: rConfig v3.9.6 Install scripts :...

QEMU: infinite loop in e1000e_write_packet_to_guest() in hw/net/e1000e_core.c

An infinite loop flaw was found in the e1000e NIC emulation code of QEMU. This issue occurs in the e1000ewritepackettoguest routine while processing bogus RX descriptor data transmitted by the guest. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a...