FortiOS TFTP Code Execution

The vulnerability of the client library for TFTP in FortiOS operating systems, the network interface for web applications FortiWeb, and the proxy server FortiProxy are related to buffer overflow attacks. Exploiting this vulnerability allows an attacker to execute arbitrary code using specially...

CVE-2022-26413

A command injection vulnerability in the CGI program of Zyxel VMG3312-T20A firmware version 5.30ABFX.5C0 could allow a local authenticated attacker to execute arbitrary OS commands on a vulnerable device via a LAN interface...

VMware 多款产品代码注入漏洞

Vmware Workspace One Access is a U.S.-based Vmware company that combines user identity with device and network information, among other factors, to make intelligent, conditional access decisions for Workspace One-delivered applications. vmware Workspace ONE Access and Identity Manager has a remot...

NETGEAR Wi-Fi router Buffer Overflow

The vulnerability of NETGEAR Wi-Fi router software models D6220, D7000, D7000v2, R6400v2, R6700v3, R7000, R7100LG, and XR300 lies in buffer overflow attacks on the network interface layer. Exploiting this vulnerability can allow attackers to execute arbitrary code...

QEMU 代码问题漏洞

QEMU is a suite of emulation processor software from the personal developer Fabrice Bellard of France. The software is fast and cross-platform, and a denial-of-service vulnerability exists in QEMU, which stems from the incorrect handling of certain values by the QEMU NIC emulator. An attacker...

CVE-2022-25375

An issue was discovered in drivers/usb/gadget/function/rndis.c in the Linux kernel before 5.16.10. The RNDIS USB gadget lacks validation of the size of the RNDISMSGSET command. Attackers can obtain sensitive information from kernel memory...

AlmaLinux 8 : dnsmasq (ALSA-2021:4153)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2021:4153 advisory. - A flaw was found in dnsmasq in versions before 2.85. When configured to use a specific server for a given network interface, dnsmasq uses a fixed port while...

PT-2021-27009

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.6 Description The issue is related to the reconfiguration of the network interface, specifically with the stmmac driver. When reconfiguring the interface, Tx queues are not properly disabled, which may lead...

CVE-2021-32600

An exposure of sensitive information to an unauthorized actor vulnerability in FortiOS CLI 7.0.0, 6.4.0 through 6.4.6, 6.2.0 through 6.2.9, 6.0.x and 5.6.x may allow a local and authenticated user assigned to a specific VDOM to retrieve other VDOMs information such as the admin account list and t...

Design/Logic Flaw

An exposure of sensitive information to an unauthorized actor vulnerability in FortiOS CLI 7.0.0, 6.4.0 through 6.4.6, 6.2.0 through 6.2.9, 6.0.x and 5.6.x may allow a local and authenticated user assigned to a specific VDOM to retrieve other VDOMs information such as the admin account list and t...

UserGate UTM Corporate Network Interface Data Compromise

The vulnerability of the UserGate UTM corporate network interface of UserGate D500 exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to influence the confidentiality and integrity of the protected information...

Cisco Firepower Threat Defense Ethernet Industrial Protocol Access Control Bypass

The vulnerability of the Industrial Ethernet Protocol ENIP implementation of Cisco Firepower Threat Defense’s micro-programmed network interface controllers is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to bypass the configured access contr...

Packet-Sniffer - A pure-Python Network Packet Sniffing Tool

A simple pure-Python network packet sniffer. Packets are disassembled as they arrive at a given network interface controller and their information is displayed on the screen. This application maintains no dependencies on third-party modules and can be run by any Python 3.x interpreter. Installati...

EulerOS 2.0 SP8 : dnsmasq (EulerOS-SA-2021-2458)

According to the versions of the dnsmasq packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in dnsmasq in versions before 2.85. When configured to use a specific server for a given network interface, dnsmasq uses a fix...

CVE-2021-37912

The HGiga OAKlouds mobile portal does not filter special characters of the Ethernet number parameter of the network interface card setting page. Remote attackers can use this vulnerability to perform command injection and execute arbitrary commands in the system without logging in...

Command injection

The HGiga OAKlouds mobile portal does not filter special characters of the IPv6 Gateway parameter of the network interface card setting page. Remote attackers can use this vulnerability to perform command injection and execute arbitrary commands in the system without logging in...

Command injection

The HGiga OAKlouds mobile portal does not filter special characters of the Ethernet number parameter of the network interface card setting page. Remote attackers can use this vulnerability to perform command injection and execute arbitrary commands in the system without logging in...

CVE-2021-37913 HGiga OAKlouds - Command Injection-2

The HGiga OAKlouds mobile portal does not filter special characters of the IPv6 Gateway parameter of the network interface card setting page. Remote attackers can use this vulnerability to perform command injection and execute arbitrary commands in the system without logging in...

CVE-2021-37912

The CVE-2021-37912 issue affects the HGiga OAKlouds mobile portal. An input validation flaw in the Ethernet number parameter on the network interface card settings page allows remote command injection. Root cause: unfiltered/special-character input enables arbitrary command execution on the syste...

CVE-2021-37912 HGiga OAKlouds - Command Injection-1

The HGiga OAKlouds mobile portal does not filter special characters of the Ethernet number parameter of the network interface card setting page. Remote attackers can use this vulnerability to perform command injection and execute arbitrary commands in the system without logging in...