US Cyber Trust Mark logo for smart devices is coming

The White House announced the launch of the US Cyber Trust Mark which aims to help buyers make an informed choice about the purchase of wireless internet-connected devices, such as baby monitors, doorbells, thermostats, and more. The cybersecurity labeling program for wireless consumer Internet o...

CVE-2024-54007 Authenticated Remote Command Injection Vulnerability in the Web Interface of a 501 Wireless Client Bridge

Multiple command injection vulnerabilities exist in the web interface of the 501 Wireless Client Bridge which could lead to authenticated remote command execution. Successful exploitation of these vulnerabilities result in the ability of an attacker to execute arbitrary commands as a privileged...

CVE-2024-54006 Authenticated Remote Command Injection Vulnerability in the Web Interface of a 501 Wireless Client Bridge

Multiple command injection vulnerabilities exist in the web interface of the 501 Wireless Client Bridge which could lead to authenticated remote command execution. Successful exploitation of these vulnerabilities result in the ability of an attacker to execute arbitrary commands as a privileged...

CVE-2024-54006

CVE-2024-54006 affects the Hewlett Packard Enterprise 501 Wireless Client Bridge web interface. Multiple command-injection vulnerabilities allow authenticated remote command execution, enabling an attacker with administrative credentials to run arbitrary commands as a privileged OS user. The CVSS...

CVE-2024-56284

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in sslplugins SSL Wireless SMS Notification ssl-wireless-sms-notification allows SQL Injection.This issue affects SSL Wireless SMS Notification: from n/a through = 3.5.0...

CVE-2024-56284 WordPress SSL Wireless SMS Notification Plugin <= 3.5.0 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in sslplugins SSL Wireless SMS Notification ssl-wireless-sms-notification allows SQL Injection.This issue affects SSL Wireless SMS Notification: from n/a through = 3.5.0...

CVE-2024-56284

CVE-2024-56284 affects the WordPress plugin SSL Wireless SMS Notification. The issue is an SQL Injection caused by improper neutralization of input in SQL commands. Affected version range: from n/a up to 3.5.0. CVSS v3.1 base score 9.3 (CRITICAL), vector: AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L. Root...

CVE-2024-56284 WordPress SSL Wireless SMS Notification Plugin <= 3.5.0 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in SSL Wireless SSL Wireless SMS Notification allows SQL Injection.This issue affects SSL Wireless SMS Notification: from n/a through 3.5.0...

PT-2025-3247

Name of the Vulnerable Software and Affected Versions SSL Wireless SMS Notification versions n/a through 3.5.0 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection, potentially...

Hewlett Packard Enterprise 501 Wireless Client Bridge command injection vulnerability

The Hewlett Packard Enterprise 501 Wireless Client Bridge HPE 501 Wireless Client Bridge is a wireless client bridge from Hewlett Packard Enterprise, USA. A security vulnerability exists in the Hewlett Packard Enterprise 501 Wireless Client Bridge that stems from multiple command injection...

CVE-2024-54006: Improper Neutralization of Special Elements used in a Command

Multiple command injection vulnerabilities exist in the web interface of the 501 Wireless Client Bridge which could lead to authenticated remote command execution. Successful exploitation of these vulnerabilities result in the ability of an attacker to execute arbitrary commands as a privileged...

PT-2025-1004 · Unknown · 501 Wireless Client Bridge

Name of the Vulnerable Software and Affected Versions: 501 Wireless Client Bridge affected versions not specified Description: The issue concerns multiple command injection vulnerabilities in the web interface of the 501 Wireless Client Bridge. These vulnerabilities could lead to authenticated...

Hewlett Packard Enterprise 501 Wireless Client Bridge command injection vulnerability

The Hewlett Packard Enterprise 501 Wireless Client Bridge HPE 501 Wireless Client Bridge is a wireless client bridge from Hewlett Packard Enterprise, USA. A security vulnerability exists in the Hewlett Packard Enterprise 501 Wireless Client Bridge that stems from multiple command injection...

PT-2025-1018

Name of the Vulnerable Software and Affected Versions HPE Aruba Networking 501 Wireless Client Bridge affected versions not specified Description The issue is related to command injection vulnerabilities in the web interface of the HPE Aruba Networking 501 Wireless Client Bridge. These...

CVE-2024-54007: Improper Neutralization of Special Elements used in a Command

Multiple command injection vulnerabilities exist in the web interface of the 501 Wireless Client Bridge which could lead to authenticated remote command execution. Successful exploitation of these vulnerabilities result in the ability of an attacker to execute arbitrary commands as a privileged...

HPESBNW04763 rev.1 - HPE Aruba Networking 501 Wireless Client Bridge Authenticated Remote Command Injection Vulnerabilities

Potential Security Impact: Remote: Arbitrary Code Execution, Arbitrary Command Execution, Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba 501 Client Bridge - Please refer to the "Vulnerability Summary" for version details. HP 501 Wireless Client Bridge - Pleas...

CVE-2024-56284: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in sslplugins SSL Wireless SMS Notification ssl-wireless-sms-notification allows SQL Injection.This issue affects SSL Wireless SMS Notification: from n/a through = 3.5.0...

USN-7184-1 linux-aws, linux-kvm vulnerabilities

Ziming Zhang discovered that the VMware Virtual GPU DRM driver in the Linux kernel contained an integer overflow vulnerability. A local attacker could use this to cause a denial of service system crash. CVE-2022-36402 Zheng Wang discovered a use-after-free in the Renesas Ethernet AVB driver in th...

CVE-2024-20153

In wlan STA, there is a possible way to trick a client to connect to an AP with spoofed SSID. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08990446 / ALPS09057442; Issue ID: MSV-1598...

CVE-2024-20146

In wlan STA driver, there is a possible out of bounds write due to improper input validation. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00389496 / ALPS09137491; Issue I...