Ability to enumerate the Oracle LDAP attributes for the current user by modifying the query used by the applicationRead More ...
Continue Reading
January 27, 2023
Userâs supplied input (usually a CRLF sequence) can be used to split a returning response into two responses.Read More ...
Continue Reading
January 27, 2023
Baicells Nova 227, Nova 233, and Nova 243 LTE TDD eNodeB devices with firmware through RTS/RTD 3.7.11.3 have hardcoded credentials that are easily discovered and can be used by remote attackers to aut ...
Continue Reading
January 27, 2023
Baicells Nova 227, Nova 233, and Nova 243 LTE TDD eNodeB devices with firmware through RTS/RTD 3.6.6 are vulnerable to remote shell code exploitation via HTTP command injections. Commands are executed ...
Continue Reading
January 27, 2023
A path traversal vulnerability was identified in ReFirm Labs binwalk from version 2.1.2b through 2.3.2 included. By crafting a malicious PFS filesystem file, an attacker can get binwalk's PFS extracto ...
Continue Reading
January 27, 2023
A flaw was found in github.com/openshift/apiserver-library-go, used in OpenShift 4.12 and 4.11, that contains an issue that can allow low-privileged users to set the seccomp profile for pods they cont ...
Continue Reading
January 27, 2023
Excessive loops in multiple dissectors in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture fileRead More ...
Continue Reading
January 27, 2023
iSCSI dissector crash in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture fileRead More ...
Continue Reading
January 27, 2023
Back to Main
