KubeOperator allows unauthorized access to system API

Summary Unauthorized access refers to the ability to bypass the system's preset permission settings to access some API interfaces. The attack exploits a flaw in how online applications handle routing permissions. Affected Version = v3.16.3 Patches The vulnerability has been fixed in v3.16.3...

PT-2023-18530 · Kubepi · Kubepi

Name of the Vulnerable Software and Affected Versions: KubePi versions prior to 1.6.4 Description: The issue allows unauthorized access to system API interfaces, potentially leaking sensitive information. This is due to a flaw in how online applications handle routing permissions. There are no...

PT-2023-18532 · Unknown · Kubeoperator

Name of the Vulnerable Software and Affected Versions: KubeOperator versions 3.16.3 and below Description: The issue allows unauthorized access to API interfaces, potentially leaking sensitive information and allowing takeover of the cluster under certain conditions. This is due to a flaw in...

GHSA-4348-X292-H437 Duplicate Advisory: GoBase Race Condition vulnerability

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-h2x7-2ff6-v32p. This link is maintained to preserve external references. Original Description A race condition can cause incorrect HTTP request routing...

Race condition

A race condition can cause incorrect HTTP request routing...

CVE-2022-2583 Race condition in github.com/ntbosscher/gobase

A race condition can cause incorrect HTTP request routing...

CVE-2022-2583 Race condition in github.com/ntbosscher/gobase

A race condition can cause incorrect HTTP request routing...

CVE-2022-2583 Race condition in github.com/ntbosscher/gobase

A race condition can cause incorrect HTTP request routing...

CVE-2022-2583

CVE-2022-2583 describes a race condition in the GoBase library (github.com/ntbosscher/gobase) that can lead to incorrect HTTP request routing. The core issue is a concurrency/problem in GoBase that affects request routing logic, with a base CVSS v3.1 score of 3.7 (LOW) from NVD/Security CVSS data...

CVE-2022-22184 Junos OS and Junos OS Evolved: A BGP session will flap upon receipt of a specific, optional transitive attribute in version 22.3R1

An Improper Input Validation vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker to cause a Denial of Service DoS. If a BGP update message is received over an established BGP session, and that message...

CVE-2022-22184

An Improper Input Validation vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker to cause a Denial of Service DoS. If a BGP update message is received over an established BGP session, and that message...

Input validation

An Improper Input Validation vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker to cause a Denial of Service DoS. If a BGP update message is received over an established BGP session, and that message...

USN-5775-1 vim vulnerabilities

It was discovered that Vim uses freed memory in recurisve substitution of specially crafted patterns. An attacker could possbly use this to crash Vim and cause denial of service. CVE-2022-2345 It was discovered that Vim makes illegal memory calls when patterns start with an illegal byte. An...

Exploit for Authentication Bypass by Spoofing in Apache Apisix

POCs Collected POCs CVE-2022-24112 To create a test...

CVE-2020-23587

A vulnerability found in the OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OPV3.3.1-191028 allows an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack to men in the middle attack by adding New Routes in RoutingConfiguration on " /routing.asp "...

Elevation of Privilege Vulnerability in FRRouting

FRRouting is FRRouting Project open source a network routing software suite running on a Unix-like platform . FRRouting security vulnerabilities , an attacker can exploit the vulnerability by creating a configuration to bypass its restrictions on the way to elevation of privilege...

Optilink Network OP-XT71000N 跨站请求伪造漏洞

The Optilink Network OP-XT71000N is a wireless router from Optilink Network India. A cross-site request forgery vulnerability exists in the Optilink Network OP-XT71000N version V2.2, which originates from a vulnerability that could allow an unauthenticated, remote attacker to implement cross-site...

CVE-2020-23587

A vulnerability found in the OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OPV3.3.1-191028 allows an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack to men in the middle attack by adding New Routes in RoutingConfiguration on " /routing.asp "...

PT-2022-8680 · Optilink · Optilink Op-Xt71000N

Name of the Vulnerable Software and Affected Versions: OPTILINK OP-XT71000N Hardware Version: V2.2, Firmware Version: OP V3.3.1-191028 Description: A vulnerability allows an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack, enabling a man-in-the-middle attack b...

frr security, bug fix, and enhancement update

Tue Jun 14 2022 Michal Ruprich - 8.2.2-4 - Resolves: 2095404 - frr use systemd-sysusers 8.2.2-3 - Resolves: 2081304 - Enhanced TMT testing for centos-stream 8.2.2-2 - Resolves: 2069571 - the dynamic routing setup does not work any more 8.2.2-1 - Resolves: 2069563 - Rebase frr to version 8.2.2...