gardyn

概要 2025年2月、私はGardyn Home 4.0デバイスに対してセキュリティ調査を実施しました。調査中に、私は複数の脆弱性と不十分なセキュリティ慣行を発見しました。これらの脆弱性を悪用することにより、攻撃者はGardynデバイスへのシステムレベルアクセスを獲得し、それを足がかりとして、接続先のローカルエリアネットワークに対するさらなる攻撃を仕掛ける可能性があります。また、攻撃者はこのアクセスを利用してデバイスの通常動作に影響を及ぼすこともでき、デバイス内で栽培されている植物やデバイス自体に損害を与える可能性があります。...

Vulnerabilities present in Siemens products

Siemens has identified vulnerabilities in various products such as Desigo, Reyrolle, SIMATIC, SCALANCE, SINAMICS, and Siveillance. These vulnerabilities allow malicious actors to carry out attacks that can cause the following types of damage: Denial-of-Service DoS attacks Data manipulation Evasio...

Citrix Workspace app for Windows Security Bulletin CVE-2026-78546 and CVE-2026-78547

Severity - Medium Description of Problem Two vulnerabilities have been discovered that impact the Citrix Workspace app for Windows. Affected Versions The vulnerabilities affect the following supported versions of the Citrix Workspace app for Windows. Current Release CR Citrix Workspace app for...

openclaw_vulnerabilities_and_solutions

OpenClaw — 脆弱性、堅牢化、およびVPSデプロイ VPS上でのOpenClawの安全なデプロイに関するサニタイズ済み公開ドキュメント: アクセスアーキテクチャ、既知の脆弱性、および解決策付きの実践的なインシデント。 実際のOpenClaw運用から得られた公開・サニタイズ済みドキュメント: ゲートウェイを公開せずにVPSへプラットフォームをデプロイする方法、実際に重要となるCVE/問題、そして本番環境で発生した障害（修正策付き）。 現在のバージョン: v1.2 · 変更履歴 · GitHub Releases このリポジトリについて...

CVE-2023-37569

creationtimestamp| type| source ---|---|--- 2026-09-08 10:00:05+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2026-09-07 2026-09-08 11:00:33+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/80d75a83-4aac-4637-aae0-5a1fce957eb8 2026-09-09...

SolarWinds Web Help Desk < 12.8.3 - Insecure Deserialization

SolarWinds Web Help Desk before version 12.8.3 contain a critical Java deserialization vulnerability that enables remote code execution. Attackers can exploit this flaw to execute arbitrary commands on the host machine. Initially reported as unauthenticated, SolarWinds was unable to reproduce...

VMware vCenter Server - Out-of-Bounds Write

vCenter Server contains an out-of-bounds write caused by a vulnerability in the DCERPC protocol implementation. A malicious actor with network access can trigger remote code execution on vCenter Server. id: CVE-2023-34048 info: name: VMware vCenter Server - Out-of-Bounds Write author: ritikchaddh...

Important: Red Hat Security Advisory: Red Hat OpenShift Service Mesh 3.0.15

Red Hat OpenShift Service Mesh 3.0.15 This update has a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section. Red Hat OpenShift Service Mesh...

Updated freerdp packages fix security vulnerabilities

Updated packages bring lot of security fixes. Please see the links for additional information...

CLEANSTART-2026-SU61748 Netty is an asynchronous, event-driven network application framework

Multiple security vulnerabilities affect the solr package. Netty is an asynchronous, event-driven network application framework. See references for individual vulnerability details...

CVE-2026-79573

L-ONE v1.0.0 was discovered to contain multiple SQL injection vulnerabilities in the /attachment/getBusinessUploadList component via the busid, id, and taskid parameters. This vulnerability allows attackers to access sensitive database information via a crafted SQL statement...

KLA91264 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Security vulnerability can be...

RHEL 8 : redhat-ds:11 (RHSA-2026:64793)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:64793 advisory. Red Hat Directory Server is an LDAPv3-compliant directory server. The suite of packages includes the Lightweight Directory Access Protocol...

PT-2026-88448

A inclusion of sensitive information in source code vulnerability in Fortinet FortiMonitorOnSight 7.2.4 through 7.2.7, FortiMonitorOnSight 7.2.0 through 7.2.2 may allow attacker to improper access control via...

Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities

Summary IBM Guardium Data Protection has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2026-31613 DESCRIPTION: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix OOB reads parsing symlink error response When a CREATE returns...

Security Bulletin: IBM Cloud Pak for Data System (CPDS 1.0) is affected by multiple vulnerabilities in various components

Summary IBM Cloud Pak for Data System 1.0 includes several open source and third-party components as part of its software stack. Multiple security vulnerabilities have been identified across various components including PLY, Apache HttpComponents, pyasn1, pip, and Eclipse Jetty. These...

CVE-2026-73778

creationtimestamp| type| source ---|---|--- 2026-09-07 04:46:05+00:00| seen| https://www.hkcert.org/security-bulletin/aruba-products-multiple-vulnerabilities20260907...

CVE-2026-73763

creationtimestamp| type| source ---|---|--- 2026-09-07 04:45:34+00:00| seen| https://www.hkcert.org/security-bulletin/aruba-products-multiple-vulnerabilities20260907...

[slackware-security] libpcap

New libpcap packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/libpcap-1.10.7-i586-1slack15.0.txz: Upgraded. This libpcap release fixes a number of vulnerabilities. For more information, see:...

Slackware Linux 15.0 / current libpcap Multiple Vulnerabilities (SSA:2026-249-01)

The version of libpcap installed on the remote host is prior to 1.10.7. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2026-249-01 advisory. New libpcap packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the...