Exploit for Improper Access Control in Lexmark B2236_Firmware

PoC for CVE-2023-22960 !Pythonhttps://img.shields.io/badg...

PT-2023-10248 · Unknown · Viakondratiuk Cash-Machine

Name of the Vulnerable Software and Affected Versions: viakondratiuk cash-machine affected versions not specified Description: A critical issue has been found in the viakondratiuk cash-machine, affecting the is card pin at session/update failed attempts function of the machine.py file. This issue...

`tokio::io::ReadHalf<T>::unsplit` is Unsound

tokio::io::ReadHalf::unsplit can violate the Pin contract The soundness issue is described in the tokio/issues5372 Specific set of conditions needed to trigger an issue a !Unpin type in ReadHalf is unusual, combined with the difficulty of making any arbitrary use-after-free exploitable in Rust...

RUSTSEC-2023-0005 `tokio::io::ReadHalf<T>::unsplit` is Unsound

tokio::io::ReadHalf::unsplit can violate the Pin contract The soundness issue is described in the tokio/issues5372 Specific set of conditions needed to trigger an issue a !Unpin type in ReadHalf is unusual, combined with the difficulty of making any arbitrary use-after-free exploitable in Rust...

CVE-2023-22958

The Syracom Secure Login plugin before 3.1.1.0 for Jira may allow spoofing of 2FA PIN validation via the plugins/servlet/twofactor/public/pinvalidation target parameter...

Design/Logic Flaw

The Syracom Secure Login plugin before 3.1.1.0 for Jira may allow spoofing of 2FA PIN validation via the plugins/servlet/twofactor/public/pinvalidation target parameter...

CVE-2023-22958

The Syracom Secure Login plugin before 3.1.1.0 for Jira may allow spoofing of 2FA PIN validation via the plugins/servlet/twofactor/public/pinvalidation target parameter...

CVE-2023-22958

The Syracom Secure Login plugin before 3.1.1.0 for Jira may allow spoofing of 2FA PIN validation via the plugins/servlet/twofactor/public/pinvalidation target parameter...

Syracom 输入验证错误漏洞

Syracom is a solution for individual developers. A security vulnerability exists in Syracom versions prior to 3.1.1.0, which stems from a vulnerability that allows spoofing of 2FA PIN authentication via the plugins/servlet/twofactor/public/pinvalidation target parameter...

CVE-2023-22958

CVE-2023-22958 concerns the Syracom Secure Login plugin for Jira, prior to version 3.1.1.0. The issue allows spoofing of 2FA PIN validation via the plugins/servlet/twofactor/public/pinvalidation target parameter, potentially enabling unauthorized access by bypassing two-factor authentication. Doc...

PT-2023-18799 · Syracom +1 · Syracom Secure Login +1

Name of the Vulnerable Software and Affected Versions: Syracom Secure Login plugin versions prior to 3.1.1.0 for Jira Description: The issue allows spoofing of 2FA PIN validation via the "plugins/servlet/twofactor/public/pinvalidation" target parameter. This may enable unauthorized access by...

Nextcloud: App pin of the Android app can be bypassed via 3rdparty apps generating deep links

Vulnerability description not provided...

TRENDnet TEW-755AP Command Injection Vulnerability (CNVD-2023-18956)

The TRENDnet TEW-755AP is a router from TRENDnet. The TRENDnet TEW-755AP suffers from a command injection vulnerability that stems from the wpsstaenrolleepin parameter in the setstaenrolleepin5g function failing to correctly filter for constructed command special characters, commands, and so on. ...

CVE-2022-46593

TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the wpsstaenrolleepin parameter in the dostaenrolleewifi function...

CVE-2022-46592

TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the wpsstaenrolleepin parameter in the setstaenrolleepin5g function...

CVE-2022-46600

TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the wpsstaenrolleepin parameter in the action setstaenrolleepin24g function...

CVE-2022-46598

TRENDnet TEW755AP 1.13B01 was discovered to contain a command injection vulnerability via the wpsstaenrolleepin parameter in the action setstaenrolleepin5g function...

PT-2022-27927 · Trendnet · Trendnet Tew755Ap

Name of the Vulnerable Software and Affected Versions: TRENDnet TEW755AP version 1.13B01 Description: A stack overflow issue was discovered via the wps sta enrollee pin parameter in the set sta enrollee pin 24g function. This issue can be exploited, potentially allowing unauthorized access or...

TRENDnet TEW-755AP 操作系统命令注入漏洞

The TRENDnet TEW-755AP is a router from TRENDnet. The TRENDnet TEW-755AP suffers from a command injection vulnerability that stems from the wpsstaenrolleepin parameter in the setstaenrolleepin5g function failing to correctly filter for constructed command special characters, commands, and so on. ...

PT-2022-27921 · Trendnet · Trendnet Tew755Ap

Name of the Vulnerable Software and Affected Versions: TRENDnet TEW755AP version 1.13B01 Description: A stack overflow issue was discovered, related to the wps sta enrollee pin parameter in the do sta enrollee wifi function. Recommendations: For TRENDnet TEW755AP version 1.13B01, consider...