PT-2022-33272

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.19.7 Description The issue concerns a NULL pointer dereference in the steam recv report and steam send report functions. This problem was introduced in version v4.18 and is fixed in version v5.19.7. The actual...

SAMSUNG Mobile devices 资源管理错误漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from Samsung South Korea. A resource management error vulnerability exists in the SMR Sep-2022 Release 1 version of SAMSUNG Mobile devices, which stems from a post-release reuse vulnerability in the...

Sql injection

Tabit - arbitrary SMS send on Tabits behalf. The resend OTP API of tabit allows an adversary to send messages on tabits behalf to anyone registered on the system - the API receives the parameters: phone number, and CustomMessage, We can use that API to craft malicious messages to any user of the...

CVE-2022-34771

CVE-2022-34771 concerns Tabit’s resend OTP API, which accepts parameters including a phone number and a CustomMessage. The connected sources describe an adversary being able to send messages on Tabit’s behalf to any registered user, potentially enabling template injection (e.g., using {{OTP}} in ...

CVE-2022-34771 Tabit - arbitrary SMS send on Tabits behalf

Tabit - arbitrary SMS send on Tabits behalf. The resend OTP API of tabit allows an adversary to send messages on tabits behalf to anyone registered on the system - the API receives the parameters: phone number, and CustomMessage, We can use that API to craft malicious messages to any user of the...

CVE-2022-34771: Undefined Security Weakness

Tabit - arbitrary SMS send on Tabits behalf. The resend OTP API of tabit allows an adversary to send messages on tabits behalf to anyone registered on the system - the API receives the parameters: phone number, and CustomMessage, We can use that API to craft malicious messages to any user of the...

FusionPBX 命令注入漏洞

FusionPBX is a scalable, multi-threaded communications platform. The platform can be used as a call center server, fax server, VOIP server, voicemail server, conference server and voice application server. A security vulnerability exists in FusionPBX version 5.0.1, which originates from a command...

PT-2022-22603 · Fusionpbx · Fusionpbx

Name of the Vulnerable Software and Affected Versions: FusionPBX version 5.0.1 Description: A command injection issue was found in FusionPBX via the /fax/fax send.php endpoint. This allows for potential command execution. Recommendations: For FusionPBX version 5.0.1, update to a version that...

Fedora: Security Advisory for rust-ffsend (FEDORA-2022-dfa24fa7d4)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 35 Update: rust-ffsend-0.2.71-3.fc35

Easily and securely share files from the command line. A fully featured Firef ox Send client...

[SECURITY] Fedora 36 Update: rust-ffsend-0.2.76-2.fc36

Easily and securely share files from the command line. A fully featured Send client...

PT-2022-37871

Уязвимость функций mptcp sendmsg frag и mptcp subflow get send модуля net/mptcp/protocol.c реализации протокола MPTCP ядра операционной системы Linux связана с недостаточной блокировкой ресурса. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на конфиденциальность,...

VulnCheck KEV: CVE-2022-29303

SolarView Compact contains a command injection vulnerability due to improper validation of input values on the send test mail console of the product's web server...

PT-2022-33050

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.254 Description The issue is related to the ax88179 178a driver in the Linux Kernel, which requires the FLAG SEND ZLP flag. The actual impact and attack plausibility have not yet been proven. Recommendation...

PT-2022-32626

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.58 Description The issue is related to the ax88179 178a driver in the Linux Kernel, which requires the FLAG SEND ZLP flag. The actual impact and attack plausibility have not yet been proven. Recommendations...

PT-2022-32809

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.134 Description The issue is related to the ax88179 178a driver in the Linux Kernel, which requires the FLAG SEND ZLP flag. The actual impact and attack plausibility have not yet been proven. Recommendation...

PT-2022-32405

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.15 Description The issue is related to the ax88179 178a driver in the Linux Kernel, which requires the FLAG SEND ZLP flag. The actual impact and attack plausibility have not yet been proven. Recommendations...

PT-2022-32950

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.208 Description The issue is related to the ax88179 178a driver in the Linux Kernel, which requires the FLAG SEND ZLP flag. The actual impact and attack plausibility have not yet been proven. Recommendations...

PT-2022-33118

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.290 Description The issue is related to the ax88179 178a driver in the Linux Kernel, which requires the FLAG SEND ZLP flag. The actual impact and attack plausibility have not yet been proven. Recommendation...

PT-2022-33173

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.325 Description The issue is related to the ax88179 178a driver in the Linux Kernel, which requires the FLAG SEND ZLP flag. The actual impact and attack plausibility have not yet been proven. Recommendations...