17 matches found
EUVD-2026-55872
SAP NetWeaver and ABAP Platform Change and Transport System - Customer Transport Integration Wizard allows a low-privileged user to modify configuration tables that control access to data objects during specific operations. These unauthorized modifications could result in processing delays and...
New NatJack Attacks Hijack TCP Sessions and Spoof DNS by Manipulating NAT Tables
Security researcher Malcolm Stagg has disclosed a new attack class called NatJack that manipulates network address translation NAT connection state to hijack active TCP sessions, spoof DNS responses, expose mapped ports, and exhaust NAT tables. Presented at Black Hat USA 2026, the research found...
CVE-2023-50136
CVE-2023-50136 affects JFinalcms 5.0.0. The vulnerability is a Cross-Site Scripting (XSS) in the name field used when creating a new custom table, stemming from insufficient input filtering/escaping. Reported across multiple feeds (NVD/Red Hat/CNVD/CNNVD/etc.). Potential impact is execution of ar...
CVE-2021-26036 [20210702] - Core - DoS through usergroup table manipulation
An issue was discovered in Joomla! 2.5.0 through 3.9.27. Missing validation of input could lead to a broken usergroups table...
Doyo 建站 Sql 注入#3
简要描述: 直接做了table. 详细说明: 在source/ajax.php中 function fieldscontingency $molds=$this-syArgs'molds',1; $word=$this-syArgs'word',1; $fields=$this-syArgs'fields',1; if$word&&$molds&&$fields $w.=" where "; $str = explode' ',$word; foreach$str as $s if$s$w.=" title like '%".$s."%' or"; $w=rtrim$w,'or'." "...
Cisco IOS / ASA / FWSM / NX-OS / StarOS OSPF protocol vulnerability
LSA packet routing table manipulation...
CVE-2013-1918
Certain page table manipulation operations in Xen 4.1.x, 4.2.x, and earlier are not preemptible, which allows local PV kernels to cause a denial of service via vectors related to "deep page table traversal."...
CVE-2013-1918
Certain page table manipulation operations in Xen 4.1.x, 4.2.x, and earlier are not preemptible, which allows local PV kernels to cause a denial of service via vectors related to "deep page table traversal."...
Design/Logic Flaw
Certain page table manipulation operations in Xen 4.1.x, 4.2.x, and earlier are not preemptible, which allows local PV kernels to cause a denial of service via vectors related to "deep page table traversal."...
CVE-2013-1918
Certain page table manipulation operations in Xen 4.1.x, 4.2.x, and earlier are not preemptible, which allows local PV kernels to cause a denial of service via vectors related to "deep page table traversal."...
CVE-2013-1918
CVE-2013-1918 affects Xen hypervisor (4.1.x, 4.2.x and earlier). The vulnerability arises from certain page table manipulation operations that are not preemptible, allowing a local privileged VM (PV kernel) to cause a denial of service via vectors related to deep page table traversal. Impact is d...
Several long latency operations are not preemptible
ISSUE DESCRIPTION Page table manipulation operations for PV guests can take significant amounts of time, as they require all present branches to have their type and thus contents verified. While the most frequently used operations had been made preemptible in the past, some code paths involving...
Billwerx RC 3.1 XSS / SQL Injection
Billwerx RC v3.1 Multiple Vulnerabilities Found By: mrme Download: http://www.billwerx.com/download.php Tested On: Windows Vista Note: For educational purposes only XSS POC: A regular employee can embed javascript code that could be executed within the context of the admin's browser. If the user...
Group classes(ARP spoofing and sniffing)-exploit warning-the black bar safety net
Article author:╰★og the spirit の porridge Information source: og the spirit clanEvil-Soul Security Team on http://bbs.x-xox-x.com) ARP spoofing is the principle of manipulation of the two hosts in the ARP cache table, in order to change between them in the normal communication direction, such a...
AZL-6513 CVE-2008-4609 affecting package kernel for versions less than 5.10.78.1-1
The TCP implementation in 1 Linux, 2 platforms based on BSD Unix, 3 Microsoft Windows, 4 Cisco products, and probably other operating systems allows remote attackers to cause a denial of service connection queue exhaustion via multiple vectors that manipulate information in the TCP state table, a...
Ascom COLTSOHO / Brocade Fabric OS / MatchBox / Win98/NT4 / Solaris / Xyplex - SNMP World Writeable Community
Ascom COLTSOHO 2.0.21,Brocade Fabric OS 2.1.2,Cisco IOS 11.2,Cray MatchBox Router 2.0.1,Windows 98,Windows NT 4.0,Solaris 2.6,Xyplex Router 6.1.1 SNMP World Writeable Community Vulnerability source: https://www.securityfocus.com/bid/986/info In a number of network devices/operating systems, some...
Ascom COLTSOHO Brocade Fabric OS MatchBox Win98NT4 Solaris Xyplex - SNMP World Writeable Community
Ascom COLTSOHO Brocade Fabric OS MatchBox Win98NT4 Solaris Xyplex - SNMP World Writeable Community Ascom COLTSOHO 2.0.21,Brocade Fabric OS 2.1.2,Cisco IOS 11.2,Cray MatchBox Router 2.0.1,Windows 98,Windows NT 4.0,Solaris 2.6,Xyplex Router 6.1.1 SNMP World Writeable Community Vulnerability source:...