Scan Now UPnP

Posté dans 25 novembre 2014 2:50 pm par

Version
Télécharger 1055
Taille du fichier 5.91 MB
Nombre de fichiers 1
Date de création 25 novembre 2014
Dernière mise à jour 9 février 2022

ScanNowUPnP

Description

Scan NOW UPnP

CVE-2023-51631 2 mai 2024

Medium Severity Description D-Link DIR-X3260 prog.cgi SetUsersSettings Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd webserver listening […]

CVE-2021-36593 1 mai 2024

Critical Severity Description Oxwall 1.8.7 (11111) is vulnerable to Incorrect Access Control. Unauthenticated file upload allows an attacker to upload image files. Read more at https://www.tenable.com/cve/CVE-2021-36593

CVE-2021-36594 1 mai 2024

Critical Severity Description SSRF in Oxwall 1.8.7 (11111) allows an attacker to execute arbitrary commands via Phar deserialization or internal API server or ... (via url parameter) Read more at https://www.tenable.com/cve/CVE-2021-36594

CVE-2024-4142 1 mai 2024

Critical Severity Description An Improper input validation vulnerability that could potentially lead to privilege escalation was discovered in JFrog Artifactory. Due to this vulnerability, users with low privileges may gain administrative access to the system. This issue can also be exploited in Artifactory platforms with anonymous access enabled. Read more at https://www.tenable.com/cve/CVE-2024-4142

CVE-2023-46294 1 mai 2024

Critical Severity Description An issue was discovered in Teledyne FLIR M300 2.00-19. User account passwords are encrypted locally, and can be decrypted to cleartext passwords using the utility umSetup. This utility requires root permissions to execute. Read more at https://www.tenable.com/cve/CVE-2023-46294

Microsoft PlayReady white-box cryptography weakness 1 mai 2024

Posted by Security Explorations on May 01Hello All, There is yet another attack possible against Protected Media Path process beyond the one involving two global XOR keys [1]. The new attack may also result in the extraction of a plaintext content key value. The attack has its origin in a white-box crypto [2] implementation. More […]

Defense in depth -- the Microsoft way (part 87): shipping more rotten software to billions of unsuspecting customers 24 avril 2024

Posted by Stefan Kanthak on Apr 24Hi @ll, this post is a continuation of and With the release of .NET Framework 4.8 in April 2019, Microsoft updated the following paragraph of the MSDN article "What's new in .NET Framework" | Starting with .NET Framework 4.5, the clrcompression.dll assembly...

Response to CVE-2023-26756 - Revive Adserver 24 avril 2024

Posted by Matteo Beccati on Apr 24CVE-2023-26756 has been recently filed against the Revive Adserver project. The action was taken without first contacting us, and it did not follow the security process that is thoroughly documented on our website. The project team has been given no notice before or after the disclosure. Our team has […]

BACKDOOR.WIN32.DUMADOR.C / Remote Stack Buffer Overflow (SEH) 19 avril 2024

Posted by malvuln on Apr 19Discovery / credits: Malvuln (John Page aka hyp3rlinx) (c) 2024 Original source: https://malvuln.com/advisory/6cc630843cabf23621375830df474bc5.txt Contact: malvuln13 () gmail com Media: twitter.com/malvuln Threat: Backdoor.Win32.Dumador.c Vulnerability: Remote Stack Buffer Overflow (SEH) Description: The malware runs an FTP server on TCP port 10000. Third-party adversaries who can reach the server can send a specially […]

SEC Consult SA-20240418-0 :: Broken authorization in Dreamehome app 19 avril 2024

Posted by SEC Consult Vulnerability Lab via Fulldisclosure on Apr 19SEC Consult Vulnerability Lab Security Advisory < 20240418-0 > ======================================================================= title: Broken authorization product: Dreamehome app vulnerable version:

Scan Now UPnP

Related Posts

Comment se protéger contre Windows 10

Comment créer un point d’accès fictif pour capturer la clé WPA/WPA2 d’un routeur.