PT-2023-13925 · Siretta · Siretta Quartz-Gold

Name of the Vulnerable Software and Affected Versions: Siretta QUARTZ-GOLD version G5.0.1.5-210720-141020 Description: The issue is related to stack-based buffer overflow vulnerabilities in the DetranCLI command parsing functionality. A specially-crafted network packet can lead to arbitrary comma...

CVE-2022-23103

A stack-based buffer overflow vulnerability exists in the confsrv confctlsetapplanguage functionality of TCL LinkHub Mesh Wi-Fi MS1G0001.0014. A specially-crafted network packet can lead to stack-based buffer overflow. An attacker can send a malicious packet to trigger this vulnerability...

Robustel R1510 操作系统命令注入漏洞

The Robustel R1510 is an industrial VPN router from Robustel China.The Robustel R1510 is vulnerable to an operating system command injection vulnerability, which stems from the fact that specially crafted network packets can be subject to a command injection vulnerability in the...

PT-2022-18342 · Inhand Networks · Inrouter 900

Name of the Vulnerable Software and Affected Versions: InHand Networks InRouter 900 Industrial 4G Router versions prior to v1.0.0.r11700 Description: A remote code execution issue was discovered in the config ovpn component. This issue can be triggered by a crafted packet, allowing for potential...

CVE-2022-25132

A command injection vulnerability in the function meshSlaveDlfw of TOTOLINK Technology router T6 V3Firmware T6V3V4.1.5cu.748B20211015 allows attackers to execute arbitrary commands via a crafted MQTT packet...

Cisco IOS XE Denial of Service Vulnerability (CNVD-2021-22450)

Cisco IOS XE is a set of modular operating system based on Linux kernel developed by Cisco for its network equipment. A denial of service vulnerability exists in the web UI of Cisco IOS XE. The vulnerability stems from insufficient error handling in the web UI. An attacker can exploit this...

The vulnerability of the DHCP server service in the Windows operating system allows a hacker to execute arbitrary code on the DHCP server.

The vulnerability of the DHCP server service in the Windows operating system arises from an operation that goes beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the DHCP server by sending a specially crafted packet to the DHCP server...

Denial of Service Vulnerability in Multiple F5 Products (CNVD-2018-01165)

BIG-IP LTM is a product of F5 Corporation of the U.S. F5 BIG-IP LTM is a local traffic manager; BIG-IP AAM is an application acceleration manager. A denial of service vulnerability exists in multiple F5 products. An attacker can exploit this vulnerability by sending packets to cause a denial of...

The vulnerability of the Oracle MySQL database management system allows a hacker to gain privileged access and cause service interruptions.

The vulnerability of the MySQL Server component of the Oracle MySQL database management system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to gain privileged access and cause the system to become unstable or crash using network packets...

The vulnerability of the Zyxel ZLD operating system, which allows a malicious individual to trigger a service failure.

The Zyxel ZyWALL USG 300 network firewall/routing system contains a vulnerability that, if exploited by a malicious actor, can cause malfunctions in the network adapter. This vulnerability allows a remote attacker to trigger malfunctions by sending a specially crafted ARP packet...

The vulnerability of the MySQL database management system allows a hacker to cause a service failure.

The vulnerability of the Server: Optimizer component of the MySQL database management system is related to errors in the code. Exploiting this vulnerability can allow a malicious actor to cause the system to become unresponsive or, in rare cases, to crash through network packets...

The vulnerability of the MySQL database management system allows a hacker to cause a service failure.

The vulnerability of the Server sub-component in the MySQL database management system is related to errors in the code. Exploiting this vulnerability can allow an attacker, operating remotely, to cause the operating system to become unresponsive, or in rare cases, to cause an emergency shutdown...

The vulnerability of the MySQL database management system allows a hacker to cause a service failure.

The vulnerability of the Server sub-component in the MySQL database management system is related to errors in the code. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a crash or, in rare cases, cause an emergency shutdown through network packets...

CVE-2015-3809

The dissectlbmrpser function in epan/dissectors/packet-lbmr.c in the LBMR dissector in Wireshark 1.12.x before 1.12.5 does not properly track the current offset, which allows remote attackers to cause a denial of service infinite loop via a crafted packet...

Oracle Internet Directory 10.1.4 - Remote Preauth DoS Exploit

No description provided by source. !/usr/bin/python Oracle Internet Directory 10.1.4 preauthentication Denial Of Service NOTES: Under 32 bits platforms it crashes immediately. Under 64 bits it may take even hours. Sometimes you need 2 shoots to crash OID completely. The server commonly tolerates...

Players disconnection in Simbin racing games

Luigi Auriemma Applications: games developed by SimBin Development Team http://www.simbin.se Versions: GTR - FIA GT Racing Game = 1.5.0.0 http://www.gtr-game.com GT Legends = 1.1.0.0 http://www.gt-legends.com GTR 2 = 1.1 http://www.gtr-game.com RACE - The WTCC Game = 1.0 0.6.3.0?...

RLA ("Remote LanD Attack")

Below is a copy of my RLA exploit submission in ASCII. Attached is a MSWord .doc version with rich formatting, created with ease of view in mind. Regards... ---------- RLA "Remote LanD Attack" 2005 As discovered by: Justin M. Wray [email protected] Devices/Vendors Vulnerable: - Microsoft Window...

MS Windows Malformed IP Options DoS Exploit (MS05-019)

Exploit for unknown platform in category dos / poc ====================================================== MS Windows Malformed IP Options DoS Exploit MS05-019 ====================================================== / ecl-winipdos.c - 16/04/05 Yuri Gushin Alex Behar This one was actually interestin...

CVE-2004-1636

Heap-based buffer overflow in the WvTFTPServer::newconnection function in wvtftpserver.cc for WvTftp 0.9 allows remote attackers to execute arbitrary code via a long option string in a TFTP packet...

CVE-2004-1395

The Lithtech engine, as used in 1 Contract Jack 1.1 and earlier, 2 No one lives forever 2 1.3 and earlier, 3 Tron 2.0 1.042 and earlier, 4 F.E.A.R. First Encounter Assault and Recon, and possibly other games, allows remote attackers to cause a denial of service connection refused via a UDP packet...