5751 matches found
PT-2022-31981
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.198 Description The issue is related to the ip gre module, where it tests csum start instead of the transport header. The actual impact and attack plausibility have not yet been proven. Recommendations For...
PT-2022-31202
Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.15 through v5.17.14 Description The issue is related to the ip gre module, where the test checks csum start instead of the transport header. This is an automated ID intended to aid in the discovery of potential securit...
PT-2022-30852
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.4 Description The issue is related to the ip gre module, where the test checks csum start instead of the transport header. This potential security issue was introduced in version v5.15 and is fixed in versi...
PT-2022-31521
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.47 Description The issue is related to the ip gre module, where the test checks csum start instead of the transport header. The actual impact and attack plausibility have not yet been proven. Recommendation...
CVE-2022-24893
ESP-IDF is the official development framework for Espressif SoCs. In Espressif’s Bluetooth Mesh SDK "ESP-BLE-MESH", a memory corruption vulnerability can be triggered during provisioning, because there is no check for the "SegN" field of the Transaction Start PDU. This can result in memory...
CVE-2022-24893 Espressif Bluetooth Mesh Stack Vulnerable to Out-of-bounds Write leading to memory buffer corruption
ESP-IDF is the official development framework for Espressif SoCs. In Espressif’s Bluetooth Mesh SDK ESP-BLE-MESH, a memory corruption vulnerability can be triggered during provisioning, because there is no check for the SegN field of the Transaction Start PDU. This can result in memory corruption...
Espressif ESP-IDF buffer error vulnerability
Espressif ESP-IDF is an IoT development framework from China Lexin Information Technology Espressif.A memory corruption vulnerability exists in Espressif ESP-IDF, which stems from not checking the SegN field of the Transaction Start PDU, and can be exploited by an attacker during configuration to...
CVE-2022-24893: Out-of-bounds Write
ESP-IDF is the official development framework for Espressif SoCs. In Espressif’s Bluetooth Mesh SDK ESP-BLE-MESH, a memory corruption vulnerability can be triggered during provisioning, because there is no check for the SegN field of the Transaction Start PDU. This can result in memory corruption...
com.jfinal:jfinal-undertow (2.6), com.jfinal:jfinal-weixin (>=3.2, <=3.3) +2 more potentially affected by CVE-2022-33113 via com.jfinal:jfinal (4.9.15)
com.jfinal:jfinal MAVEN version 4.9.15 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.jfinal:jfinal-undertow 2.6 - com.jfinal:jfinal-weixin =3.2, =1.0, =1.6.2 - net.dreamlu:mica-weixin 2.1.1 Source cves:...
MAL-2022-4262 Malicious code in launcher-start-page (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c26fefa43c2e6dbcc8f19f621f71b06602f1dee3deb4bfa27a4eaad60561d4dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in launcher-start-page (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c26fefa43c2e6dbcc8f19f621f71b06602f1dee3deb4bfa27a4eaad60561d4dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-7138 Malicious code in whistle-start (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a0c9dd0fea7a98b0162f806f87792c62435fd62609fff1b5d05a70e2cc0a777 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in whistle-start (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a0c9dd0fea7a98b0162f806f87792c62435fd62609fff1b5d05a70e2cc0a777 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
PT-2022-28283
Name of the Vulnerable Software and Affected Versions tss-esapi versions prior to 6.1.2 tss-esapi versions prior to 7.1.0 Description This issue affects applications that start authorization sessions using an explicit initial nonce. When Context::start auth session is called with a nonce argument...
Admin-Panel_Finder - A Burp Suite Extension That Enumerates Infrastructure And Application Admin Interfaces (OTG-CONFIG-005)
A burp suite extension that enumerates infrastructure and application Admin Interfaces. OWASP References: Classification : Web Application Security Testing 02-Configuration and Deployment Management Testing OTG v4 : OWASP OTG-CONFIG-005 WSTG : WSTG-CONF-05 Why should I use this extension?...
CVE-2022-20145
In startLegacyVpnPrivileged of Vpn.java, there is a possible way to retrieve VPN credentials due to a protocol downgrade attack. This could lead to remote escalation of privilege if a malicious Wi-Fi AP is used, with no additional execution privileges needed. User interaction is not needed for...
CLSA-2022-1654804240 Fixed CVEs in vim: CVE-2022-1851, CVE-2022-1898, CVE-2022-1886, CVE-2022-0319
CVE-2022-0319: correct end of Visual area when entering another buffer - CVE-2022-1851: fix invalid cursor position after text formatting - CVE-2022-1886: fix access before start of text with a put command - CVE-2022-1898: fix using freed memory with 'd'...
Ubuntu 16.04 ESM : Vim vulnerabilities (USN-5458-1)
The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5458-1 advisory. It was discovered that Vim was incorrectly handling virtual column position operations, which could result in an out-of-bounds read. An attacker could...
PersistBOF - Tool To Help Automate Common Persistence Mechanisms
A tool to help automate common persistence mechanisms. Currently supports Print Monitor SYSTEM, Time Provider Network Service, Start folder shortcut hijacking User, and Junction Folder User Usage Clone, run make, add .cna to Cobalt Strike client. run: help persist-ice in CS console Syntax:...