12787 matches found
AZL-31117 CVE-2023-4911 affecting package glibc for versions less than 2.35-5
A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBCTUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBCTUNABLES environment variables when launching binaries with SUID permission to execute code...
Important: kernel
Issue Overview: An issue was discovered in the USB subsystem in the Linux kernel through 6.4.2. There is an out-of-bounds and crash in readdescriptors in drivers/usb/core/sysfs.c. CVE-2023-37453 nftables out-of-bounds read in nfosfmatchone CVE-2023-39189 A flaw was found in the Netfilter subsyste...
PT-2023-5727 · D Link · D-Link Dir-823G
Name of the Vulnerable Software and Affected Versions: D-Link DIR-823G version A1V1.0.2B05 Description: The issue is related to a buffer overflow in the SetDeviceSettings function when handling the AdminPassword parameter. This allows attackers to cause a Denial of Service DoS via a crafted input...
PT-2023-5733 · D Link · D-Link Dir-823G
Name of the Vulnerable Software and Affected Versions: D-Link DIR-823G version A1V1.0.2B05 Description: The issue is related to a buffer overflow in the SetParentsControlInfo function when handling the EndTime parameter. This allows attackers to cause a Denial of Service DoS via a crafted input...
Store XSS when Edit label set
Description Store XSS when Edit label set. I noticed, you have filtered the input when creating the label set. But, perhaps you forgot to filter when editing the label set. Proof of Concept 1 .Create a label set 2 .Edit label set with payload : haidoalertdocument.domain 3 .Click Export multiple...
Linux kernel ipset Hash Netportnet Buffer Overflow DoS
The vulnerability in the net/netfilter/ipset/ipsethashnetportnet.c module of the Linux operating system is related to the incorrect definition of CIDRPOS used in the functions mtypeaddcidr and mtypedelcidr. Exploiting this vulnerability can allow an attacker to compromise the confidentiality,...
Tenda A18 Router fromSetWirelessRepeat DoS
The vulnerability of the fromSetWirelessRepeat function in Tenda A18 router microprogramming software is related to the possibility of writing data outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...
DEBIAN-CVE-2023-42756
A flaw was found in the Netfilter subsystem of the Linux kernel. A race condition between IPSETCMDADD and IPSETCMDSWAP can lead to a kernel panic due to the invocation of ipsetput on a wrong set. This issue may allow a local user to crash the system...
UBUNTU-CVE-2023-42756
A flaw was found in the Netfilter subsystem of the Linux kernel. A race condition between IPSETCMDADD and IPSETCMDSWAP can lead to a kernel panic due to the invocation of ipsetput on a wrong set. This issue may allow a local user to crash the system...
D-Link DIR-619 buffer error vulnerability
The D-Link DIR-619L B1 is a series of routers from the Chinese company AUO D-Link. The D-Link DIR-619L B1 suffers from a buffer overflow vulnerability that stems from a buffer overflow issue in the formSetWanPPPoE method. No detailed vulnerability details are provided at this time...
D-Link DAP-1325 Wireless Signal Booster Code Execution
The vulnerability of the SetHostIPv6StaticSettings function in the D-Link DAP-1325 wireless signal booster software relates to the lack of measures taken to neutralize special elements during the processing of request parameters. Exploiting this vulnerability could allow a remote attacker to...
D-Link DIR-619 buffer error vulnerability
The D-Link DIR-619L B1 is a series of routers from the Chinese company AUO D-Link. The D-Link DIR-619L B1 suffers from a buffer overflow vulnerability, which stems from a buffer overflow issue in the formSetWanPPTP method. No detailed vulnerability details are available at this time...
Tenda AC10U setSchedWifi function stack buffer overflow vulnerability
Tenda AC10U is a dual-band Gigabit wireless router from Tenda Technology, designed for 200 megabit and above fiber optic homes, supporting 802.11ac dual-band technology 2.4GHz and 5GHz, with a theoretical WiFi rate of up to 867Mbps. The Tenda AC10U suffers from a stack buffer overflow...
PT-2023-6555
Name of the Vulnerable Software and Affected Versions KVM affected versions not specified Description A flaw was found in KVM, related to an improper check in the svm set x2apic msr interception function. This may allow direct access to host x2apic msrs when the guest resets its apic, potentially...
CVE-2023-44015
Tenda AC10U v1.0 USAC10UV1.0RTLV15.03.06.49multiTDE01 was discovered to contain a stack overflow via the schedEndTime parameter in the setSchedWifi function...
PT-2023-29074
Name of the Vulnerable Software and Affected Versions Tenda AC10U version 1.0 US AC10UV1.0RTL V15.03.06.49 multi TDE01 Description A stack overflow issue was discovered via the ssid parameter in the form fast setting wifi set function. This issue can be exploited, potentially leading to...
Tenda AC10 buffer error vulnerability
Tenda AC10U is a dual-band Gigabit wireless router from Tenda Technology, designed for 200 megabit and above fiber optic homes, supporting 802.11ac dual-band technology 2.4GHz and 5GHz, with a theoretical WiFi rate of up to 867Mbps. The Tenda AC10U suffers from a stack buffer overflow vulnerabili...
D-Link DIR-823G Router SetWLanRadioSecurity Buffer Overflow
The vulnerability of the SetWLanRadioSecurity function in the D-Link DIR-823G router’s microprogramming software is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility ...
D-Link DAP-1325 Wireless Signal Booster Code Execution
The vulnerability of the SetHostIPv6StaticSettings function in the microprogramming software of the D-Link DAP-1325 wireless signal booster relates to the lack of measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
D-Link DIR-823G Router SetWifiDownSettings Buffer Overflow
The vulnerability of the SetWifiDownSettings function in the D-Link DIR-823G router’s microprogramming system is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...