🚨 CVE-2023-37711
Tenda AC1206 V15.03.06.23 and AC10 V15.03.06.47 were discovered to contain a stack overflow in the deviceId parameter in the saveParentControlInfo function.
🎖@cveNotify
Tenda AC1206 V15.03.06.23 and AC10 V15.03.06.47 were discovered to contain a stack overflow in the deviceId parameter in the saveParentControlInfo function.
🎖@cveNotify
GitHub
IoT-Vulns/tenda/saveParentControlInfo at main · FirmRec/IoT-Vulns
This repository contain recurring IoT vulnerabilities found by FirmRec. - FirmRec/IoT-Vulns
🚨 CVE-2023-37710
Tenda AC1206 V15.03.06.23 and AC10 V15.03.06.47 were discovered to contain a stack overflow in the wpapsk_crypto parameter in the fromSetWirelessRepeat function.
🎖@cveNotify
Tenda AC1206 V15.03.06.23 and AC10 V15.03.06.47 were discovered to contain a stack overflow in the wpapsk_crypto parameter in the fromSetWirelessRepeat function.
🎖@cveNotify
GitHub
IoT-Vulns/tenda/fromSetWirelessRepeat at main · FirmRec/IoT-Vulns
This repository contain recurring IoT vulnerabilities found by FirmRec. - FirmRec/IoT-Vulns
🚨 CVE-2023-37706
Tenda FH1203 V2.0.1.6 was discovered to contain a stack overflow via the entrys parameter in the fromAddressNat function.
🎖@cveNotify
Tenda FH1203 V2.0.1.6 was discovered to contain a stack overflow via the entrys parameter in the fromAddressNat function.
🎖@cveNotify
GitHub
IoT-Vulns/tenda/6903 at main · FirmRec/IoT-Vulns
This repository contain recurring IoT vulnerabilities found by FirmRec. - FirmRec/IoT-Vulns
🚨 CVE-2023-32040
Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
🎖@cveNotify
Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
🎖@cveNotify
🚨 CVE-2023-32039
Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
🎖@cveNotify
Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
🎖@cveNotify
🚨 CVE-2023-37463
cmark-gfm is an extended version of the C reference implementation of CommonMark, a rationalized version of Markdown syntax with a spec. Three polynomial time complexity issues in cmark-gfm may lead to unbounded resource exhaustion and subsequent denial of service. These vulnerabilities have been patched in 0.29.0.gfm.12.
🎖@cveNotify
cmark-gfm is an extended version of the C reference implementation of CommonMark, a rationalized version of Markdown syntax with a spec. Three polynomial time complexity issues in cmark-gfm may lead to unbounded resource exhaustion and subsequent denial of service. These vulnerabilities have been patched in 0.29.0.gfm.12.
🎖@cveNotify
GitHub
Quadratic complexity bugs may lead to a denial of service
### Impact
Three polynomial time complexity issues in cmark-gfm may lead to unbounded resource exhaustion and subsequent denial of service.
### Proof of concept
Issue 1:
```bash
python...
Three polynomial time complexity issues in cmark-gfm may lead to unbounded resource exhaustion and subsequent denial of service.
### Proof of concept
Issue 1:
```bash
python...
🚨 CVE-2023-30565
An insecure connection between Systems Manager and CQI Reporter application could expose infusion data to an attacker.
🎖@cveNotify
An insecure connection between Systems Manager and CQI Reporter application could expose infusion data to an attacker.
🎖@cveNotify
🚨 CVE-2023-30564
Alaris Systems Manager does not perform input validation during the Device Import Function.
🎖@cveNotify
Alaris Systems Manager does not perform input validation during the Device Import Function.
🎖@cveNotify
🚨 CVE-2023-30563
A malicious file could be uploaded into a System Manager User Import Function resulting in a hijacked session.
🎖@cveNotify
A malicious file could be uploaded into a System Manager User Import Function resulting in a hijacked session.
🎖@cveNotify
🚨 CVE-2023-30562
A GRE dataset file within Systems Manager can be tampered with and distributed to PCUs.
🎖@cveNotify
A GRE dataset file within Systems Manager can be tampered with and distributed to PCUs.
🎖@cveNotify
🚨 CVE-2023-30561
The data flowing between the PCU and its modules is insecure. A threat actor with physical access could potentially read or modify data by attaching a specially crafted device while an infusion is running.
🎖@cveNotify
The data flowing between the PCU and its modules is insecure. A threat actor with physical access could potentially read or modify data by attaching a specially crafted device while an infusion is running.
🎖@cveNotify