Mageia: Security Advisory (MGASA-2022-0460)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2022-0460 Updated netkit-telnet packages fix security vulnerability

2-byte DoS in netkit-telnetd. CVE-2022-39028...

CVE-2022-4390

A network misconfiguration is present in versions prior to 1.0.9.90 of the NETGEAR RAX30 AX2400 series of routers. IPv6 is enabled for the WAN interface by default on these devices. While there are firewall restrictions in place that define access restrictions for IPv4 traffic, these restrictions...

CVE-2022-4390

A network misconfiguration is present in versions prior to 1.0.9.90 of the NETGEAR RAX30 AX2400 series of routers. IPv6 is enabled for the WAN interface by default on these devices. While there are firewall restrictions in place that define access restrictions for IPv4 traffic, these restrictions...

CVE-2022-4390

A network misconfiguration is present in versions prior to 1.0.9.90 of the NETGEAR RAX30 AX2400 series of routers. IPv6 is enabled for the WAN interface by default on these devices. While there are firewall restrictions in place that define access restrictions for IPv4 traffic, these restrictions...

CVE-2022-4390

A network misconfiguration is present in versions prior to 1.0.9.90 of the NETGEAR RAX30 AX2400 series of routers. IPv6 is enabled for the WAN interface by default on these devices. While there are firewall restrictions in place that define access restrictions for IPv4 traffic, these restrictions...

CVE-2022-44932

An access control issue in Tenda A18 v15.13.07.09 allows unauthenticated attackers to access the Telnet service...

CVE-2022-44932

An access control issue in Tenda A18 v15.13.07.09 allows unauthenticated attackers to access the Telnet service...

Design/Logic Flaw

An access control issue in Tenda A18 v15.13.07.09 allows unauthenticated attackers to access the Telnet service...

curl: HTTP proxy double-free

A vulnerability was found in curl. The issue occurs if curl is told to use an HTTP proxy for a transfer with a non-HTTPS URL. It sets up the connection to the remote server by issuing a CONNECT request to the proxy and then tunnels the rest of the protocol through. An HTTP proxy might refuse this...

Update now! NetGear routers’ default configuration allows remote attacks

NetGear has made a hotfix available for its Nighthawk routers after researchers found a network misconfiguration in the firmware allowed unrestricted communication with the internet facing ports of the device listening through IPv6. No auto-update The hotfix is available for the model RAX30, also...

CVE-2022-44932

An access control issue in Tenda A18 v15.13.07.09 allows unauthenticated attackers to access the Telnet service...

CVE-2022-44932

CVE-2022-44932 affects Tenda A18 (firmware v15.13.07.09). The issue is an access control flaw that permits unauthenticated remote attackers to access the Telnet service, exposing integrity (I) to High risk and confidentiality/availability impacts as per CVSS: I=High, others None. The available so...

CVE-2022-44932

An access control issue in Tenda A18 v15.13.07.09 allows unauthenticated attackers to access the Telnet service...

PT-2022-27337 · Tenda · Tenda Ac18

Name of the Vulnerable Software and Affected Versions: Tenda A18 version 15.13.07.09 Description: An access control issue allows unauthenticated attackers to access the Telnet service. Recommendations: For Tenda A18 version 15.13.07.09, consider restricting access to the Telnet service until a...

Tenda A18 安全漏洞

The Tenda A18 is an AC1200 dual-band Wi-Fi repeater from Tenda China. A security vulnerability exists in Tenda A18 version v15.13.07.09, which originates from allowing an unauthorized attacker to access the Telnet service...

CVE-2022-45045

Multiple Xiongmai NVR devices, including MBD6304T V4.02.R11.00000117.10001.131900.00000 and NBD6808T-PL V4.02.R11.C7431119.12001.130000.00000, allow authenticated users to execute arbitrary commands as root, as exploited in the wild starting in approximately 2019. A remote and authenticated...

PT-2022-5775 · NetGear · Netgear Rax30 Ax2400

Name of the Vulnerable Software and Affected Versions: NETGEAR RAX30 AX2400 series of routers versions prior to 1.0.9.90 Description: A network misconfiguration is present in the affected devices, where IPv6 is enabled for the WAN interface by default. However, the firewall restrictions in place...

Debian dla-3205 : inetutils - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3205 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3205-1 [email protected]...

RapperBot Campaign Launches DDoS Attacks on Game Servers

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary The new RapperBot malware version creates a botnet capable of launching Distributed Denial of Service DDoS attacks. The latest version can launch Telnet brute-force strikes, DoS attacks using the Generic...