648 matches found
CVE-2022-31457
RTX TRAP v1.0 allows attackers to perform a directory traversal via a crafted request sent to the endpoint /data/...
CVE-2022-31458
RTX TRAP v1.0 was discovered to be vulnerable to host header poisoning...
CVE-2022-31458
RTX TRAP v1.0 was discovered to be vulnerable to host header poisoning...
CVE-2022-31457
The CVE-2022-31457 entry concerns RTX TRAP v1.0, where a directory traversal is possible via crafted requests to the /data/ endpoint. The vulnerability’s CVSS v3.1 base score is 7.5 (HIGH) with NETWORK attack vector, LOW attack complexity, and no privileges required, and it mainly impacts confide...
PT-2023-13041 · Rtx Trap · Rtx Trap
Name of the Vulnerable Software and Affected Versions: RTX TRAP version 1.0 Description: The issue is related to host header poisoning. Recommendations: For RTX TRAP version 1.0, consider restricting access to vulnerable endpoints to minimize the risk of exploitation. At the moment, there is no...
CVE-2022-31457
RTX TRAP v1.0 allows attackers to perform a directory traversal via a crafted request sent to the endpoint /data/...
CVE-2022-31458
CVE-2022-31458 affects RTX TRAP v1.0, with a host header poisoning vulnerability. Exploitation involves manipulating the HTTP Host header to spoof the server and cause it to process requests under a malicious hostname. Reported data from NVD cites a network attack vector with low-moderate impact ...
HTTP Fetch, Generic x86 Debug Trap
Fetch and execute a x86 payload from an HTTP server. Generate a debug trap in the target process Module Options msf use payload/cmd/linux/http/x86/generic/debugtrap msf payloaddebugtrap show actions ...actions... msf payloaddebugtrap set ACTION msf payloaddebugtrap show options ...show and set...
Information disclosure
An information disclosure vulnerability in the faye endpoint in Proofpoint Threat Response / Threat Response Auto-Pull PTR/TRAP could be used by an attacker on an adjacent network to obtain credentials to integrated services via a man-in-the-middle position or cryptanalysis of the session traffic...
CVE-2023-2820
CVE-2023-2820 affects Proofpoint Threat Response / Threat Response Auto-Pull (PTR/TRAP) via the faye endpoint. The vulnerability may allow an attacker on an adjacent network to obtain credentials to integrated services through MITM or session-traffic cryptanalysis, enabling impersonation of PTR/T...
CVE-2023-29255 IBM DB2 for Linux, UNIX and Windows denial of service
IBM DB2 for Linux, UNIX and Windows includes Db2 Connect Server 10.5, 11.1, and 11.5 is vulnerable to a denial of service as it may trap when compiling a variation of an anonymous block. IBM X-Force ID: 251991...
K17315: SNMP vulnerability CVE-2014-3565
Security Advisory Description snmplib/mib.c in net-snmp 5.7.0 and earlier, when the -OQ option is used, allows remote attackers to cause a denial of service snmptrapd crash via a crafted SNMP trap message, which triggers a conversion to the variable type designated in the MIB file, as demonstrate...
SUSE CVE-2007-3390
Wireshark 0.99.5 and 0.10.x up to 0.10.14, when running on certain systems, allows remote attackers to cause a denial of service crash via crafted iSeries capture files that trigger a SIGTRAP...
SUSE CVE-2013-4220
The badmode function in arch/arm64/kernel/traps.c in the Linux kernel before 3.9.5 on the ARM64 platform allows local users to cause a denial of service system crash via vectors involving an attempted register access that triggers an unexpected value in the Exception Syndrome Register ESR...
SUSE CVE-2014-2285
The perltrapdhandler function in perl/TrapReceiver/TrapReceiver.xs in Net-SNMP 5.7.3.pre3 and earlier, when using certain Perl versions, allows remote attackers to cause a denial of service snmptrapd crash via an empty community string in an SNMP trap, which triggers a NULL pointer dereference...
SUSE CVE-2014-3565
snmplib/mib.c in net-snmp 5.7.0 and earlier, when the -OQ option is used, allows remote attackers to cause a denial of service snmptrapd crash via a crafted SNMP trap message, which triggers a conversion to the variable type designated in the MIB file, as demonstrated by a NULL type in an ifMtu...
SUSE CVE-2016-9311
ntpd in NTP before 4.2.8p9, when the trap service is enabled, allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted packet...
SUSE CVE-2017-7518
A flaw was found in the Linux kernel before version 4.12 in the way the KVM module processed the trap flagTF bit in EFLAGS during emulation of the syscall instruction, which leads to a debug exceptionDB being raised in the guest stack. A user/process inside a guest could use this flaw to...
SUSE CVE-2022-22743
When navigating from inside an iframe while requesting fullscreen access, an attacker-controlled tab could have made the browser unable to leave fullscreen mode. This vulnerability affects Firefox ESR 91.5, Firefox 96, and Thunderbird 91.5...
