CVE-2024-26882 net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()

In the Linux kernel, the following vulnerability has been resolved: net: iptunnel: make sure to pull inner header in iptunnelrcv Apply the same fix than ones found in : 8d975c15c0cd "ip6tunnel: make sure to pull inner header in ip6tnlrcv" 1ca1ba465e55 "geneve: make sure to pull inner header in...

PT-2024-2948 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS SRX 5000 Series versions prior to 21.2R3-S7 Juniper Networks Junos OS SRX 5000 Series version 21.4 versions prior to 21.4R3-S6 Juniper Networks Junos OS SRX 5000 Series version 22.1 versions prior to 22.1R3-S5 Junipe...

Microsoft Windows DHCP Server 安全漏洞

Microsoft Windows is a set of operating systems used by Microsoft Corporation USA for personal devices. A security vulnerability exists in Microsoft Windows DHCP Server. An attacker has exploited the vulnerability to cause a denial of service on the system. The following products and editions are...

NVIDIA nvJPEG2000 安全漏洞

NVIDIA nvJPEG2000 is a library from NVIDIA, Inc. for decoding and encoding JPEG2000 images on NVIDIA GPUs. A security vulnerability exists in NVIDIA nvJPEG2000 that originates from incorrect input validation, resulting in a denial of service on the system...

PT-2024-14131 · Dji · Dji Vtwo Sdk +9

Name of the Vulnerable Software and Affected Versions: DJI Mavic 3 Pro versions prior to v01.01.0300 DJI Mavic 3 versions prior to v01.00.1200 DJI Mavic 3 Classic versions prior to v01.00.0500 DJI Mavic 3 Enterprise versions prior to v07.01.10.03 DJI Matrice 300 versions prior to v57.00.01.00 DJI...

CVE-2023-31634

In TeslaMate before 1.27.2, there is unauthorized access to port 4000 for remote viewing and operation of user data. After accessing the IP address for the TeslaMate instance, an attacker can switch the port to 3000 to enter Grafana for remote operations. At that time, the default username and...

CVE-2012-0469

creationtimestamp| type| source ---|---|--- 2024-03-25 11:49:23+00:00| seen| https://t.me/ETHICALHACKERSCOMMUNITY2/3889 2024-03-25 14:38:09+00:00| seen| Telegram/HKj6TR4hMohrGsEUcNFDijNGdim3MCZhggfzha3EYtXw 2024-03-25 14:38:09+00:00| seen| https://t.me/tengkorakcybercrewz/4400 2024-03-25...

PT-2024-2233 · Broadcom +2 · Broadcom +2

Name of the Vulnerable Software and Affected Versions: Webmin/Virtualmin versions affected versions not specified Broadcom affected versions not specified Microsoft affected versions not specified MikroTik affected versions not specified Description: The issue is related to implementations of UDP...

PT-2024-11204 · Unknown · Net::Ipaddress::Util

Name of the Vulnerable Software and Affected Versions: Net::IPAddress::Util versions prior to 5.000 Description: The issue arises from the Net::IPAddress::Util module not properly handling extraneous zero characters in IP address strings. This can lead to attackers bypassing access control based ...

CVE-2023-7009

creationtimestamp| type| source ---|---|--- 2024-03-15 18:27:02+00:00| seen| https://t.me/ctinow/209010...

CVE-2024-2438

creationtimestamp| type| source ---|---|--- 2024-03-14 10:27:00+00:00| seen| https://t.me/ctinow/207603 2024-03-14 10:27:12+00:00| seen| https://t.me/ctinow/207610...

Cisco IOS XR Security Vulnerability

Cisco IOS XR is a set of operating systems developed by Cisco for its network devices. A security vulnerability exists in Cisco IOS XR that stems from insufficient validation of parameters contained in SSH client CLI commands, which could allow an authenticated, local attacker to elevate root...

The vulnerability of the access control list mechanism in the Cisco NX-OS operating system for Cisco Nexus 3000 and Nexus 9000 switches allows a perpetrator to gain access to network resources.

The vulnerability of the access control list mechanism in the Cisco NX-OS operating system for Cisco Nexus 3000 and Nexus 9000 switches is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to network resources remotely...

CVE-2024-23488

creationtimestamp| type| source ---|---|--- 2024-02-29 09:26:54+00:00| seen| https://t.me/ctinow/196386 2024-02-29 09:31:45+00:00| seen| https://t.me/ctinow/196410...

RHSA-2024:0269

creationtimestamp| type| source ---|---|--- 2024-02-28 02:16:42+00:00| seen| https://t.me/ctinow/195036...

PT-2024-1909 · Cisco · Cisco Nexus 3000 Series Switches +2

Name of the Vulnerable Software and Affected Versions: Cisco Nexus 3000 and 9000 Series Switches affected versions not specified Description: A vulnerability in the access control list ACL programming for port channel subinterfaces could allow an unauthenticated, remote attacker to send traffic...

The vulnerability of the web-based service for microprogramming software controlling switches of the EDS-4000/G4000 series allows a hacker to send requests to a vulnerable device and act on its behalf for other network devices.

The vulnerability of the web-based service for microprogrammed software-controlled switches of the EDS-4000/G4000 series lies in the ability to bypass access control mechanisms. Exploiting this vulnerability allows a malicious actor to send requests to the vulnerable device and act on its behalf...

CVE-2024-0387

The EDS-4000/G4000 Series prior to version 3.2 includes IP forwarding capabilities that users cannot deactivate. An attacker may be able to send requests to the product and have it forwarded to the target. An attacker can bypass access controls or hide the source of malicious requests...

CVE-2012-2238

creationtimestamp| type| source ---|---|--- 2024-02-26 08:41:39+00:00| seen| https://t.me/ctinow/193152...

MOXA EDS-4000/G4000 Series 安全漏洞

MOXA EDS-4000/G4000 Series is a series of industrial managed Ethernet switches from MOXA, China. A security bypass vulnerability exists in MOXA EDS-4000/G4000 Series prior to version 3.2, which originates from a user-deactivatable IP forwarding feature, and can be exploited by an attacker to bypa...