Aruba Networks Access Points 安全漏洞

Aruba Networks Access Points is a wireless network from Aruba Networks, Inc. It provides Internet access. A security vulnerability exists in Aruba Networks Access Points. An attacker could exploit the vulnerability to cause a denial of service on the system...

Aruba Networks Access Points 安全漏洞

Aruba Networks Access Points is a wireless network from Aruba Networks, Inc. It provides Internet access. A security vulnerability exists in Aruba Networks Access Points. An attacker could exploit the vulnerability to cause a denial of service on the system...

Aruba Networks Access Points 安全漏洞

Aruba Networks Access Points is a wireless network from Aruba Networks, Inc. It provides Internet access. A security vulnerability exists in Aruba Networks Access Points. An attacker who exploited the vulnerability could cause the system to be compromised by executing arbitrary commands...

Aruba Networks Access Points 安全漏洞

Aruba Networks Access Points is a wireless network from Aruba Networks, Inc. It provides Internet access. A security vulnerability exists in Aruba Networks Access Points. An attacker who exploited the vulnerability could cause the system to be compromised by executing arbitrary commands...

Aruba Networks Access Points 安全漏洞

Aruba Networks Access Points is a wireless network from Aruba Networks, Inc. It provides Internet access. A security vulnerability exists in Aruba Networks Access Points. An attacker who exploited the vulnerability could cause the system to be compromised by executing arbitrary commands...

Aruba Networks Access Points 安全漏洞

Aruba Networks Access Points is a wireless network from Aruba Networks, Inc. It provides Internet access. A security vulnerability exists in Aruba Networks Access Points. An attacker could exploit the vulnerability to cause a denial of service on the system...

CVE-2024-33897

A compromised HMS Networks Cosy+ device could be used to request a Certificate Signing Request from Talk2m for another device, resulting in an availability issue. The issue was patched on the Talk2m production server on April 18, 2024...

PT-2024-25534 · Hms Networks · Hms Networks Cosy+

Name of the Vulnerable Software and Affected Versions: HMS Networks Cosy+ affected versions not specified Description: The issue concerns improper authentication, allowing a compromised device to request a Certificate Signing Request for another device, potentially leading to an availability issu...

APT28 Targets Diplomats with HeadLace Malware via Car Sale Phishing Lure

A Russia-linked threat actor has been linked to a new campaign that employed a car for sale as a phishing lure to deliver a modular Windows backdoor called HeadLace. "The campaign likely targeted diplomats and began as early as March 2024," Palo Alto Networks Unit 42 said in a report published...

TOTOLINK LR1200 Hardcoded Password Vulnerability

The TOTOLINK LR1200 is a wireless router designed for 4G LTE networks. The TOTOLINK LR1200 suffers from a hard-coded password vulnerability that originates from the /etc/shadow.sample page containing a use of hard-coded passwords. No details of the vulnerability are provided at this time...

Important: docker

Issue Overview: The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...

Important: docker

Issue Overview: The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...

CVE-2024-6978

Cato Networks Windows SDP Client Local root certificates can be installed by low-privileged users.This issue affects SDP Client: before 5.10.28...

CVE-2024-6978

Cato Networks Windows SDP Client Local root certificates can be installed by low-privileged users.This issue affects SDP Client: before 5.10.28...

CVE-2024-6975

Cato Networks Windows SDP Client Local Privilege Escalation via openssl configuration file. This issue affects SDP Client before 5.10.34...

CVE-2024-6977

A vulnerability in Cato Networks SDP Client on Windows allows the insertion of sensitive information into the log file, which can lead to an account takeover. However, the attack requires bypassing protections on modifying the tunnel token on a the attacker's system.This issue affects SDP Client:...

CVE-2024-6974

Cato Networks Windows SDP Client Local Privilege Escalation via self-upgradeThis issue affects SDP Client: before 5.10.34...

CVE-2024-6975

Cato Networks Windows SDP Client Local Privilege Escalation via openssl configuration file. This issue affects SDP Client before 5.10.34...

CVE-2024-6974

Cato Networks Windows SDP Client Local Privilege Escalation via self-upgradeThis issue affects SDP Client: before 5.10.34...

CVE-2024-6978 Cato Networks Windows SDP Client Local root certificates can be installed by low-privileged users

Cato Networks Windows SDP Client Local root certificates can be installed by low-privileged users.This issue affects SDP Client: before 5.10.28...