140 matches found
CVE-2024-52548 Lorex 2K Indoor Wi-Fi Security Camera - Code signing bypass
An attacker who can execute arbitrary Operating Systems commands, can bypass code signing enforcements in the kernel, and execute arbitrary native code. This vulnerability has been resolved in firmware version 2.800.0000000.8.R.20241111...
CVE-2024-52547 Lorex 2K Indoor Wi-Fi Security Camera - Stack buffer overflow
An authenticated attacker can trigger a stack based buffer overflow in the DHIP Service TCP port 80. This vulnerability has been resolved in firmware version 2.800.0000000.8.R.20241111...
CVE-2024-52546 Lorex 2K Indoor Wi-Fi Security Camera - Null pointer dereference
An unauthenticated attacker can perform a null pointer dereference in the DHIP Service UDP port 37810. This vulnerability has been resolved in firmware version 2.800.0000000.8.R.20241111...
CVE-2024-52545 Lorex 2K Indoor Wi-Fi Security Camera - Out of bounds heap read
An unauthenticated attacker can perform an out of bounds heap read in the IQ Service TCP port 9876. This vulnerability has been resolved in firmware version 2.800.0000000.8.R.20241111...
CVE-2024-52545 Lorex 2K Indoor Wi-Fi Security Camera - Out of bounds heap read
An unauthenticated attacker can perform an out of bounds heap read in the IQ Service TCP port 9876. This vulnerability has been resolved in firmware version 2.800.0000000.8.R.20241111...
CVE-2024-45030 igb: cope with large MAX_SKB_FRAGS
In the Linux kernel, the following vulnerability has been resolved: igb: cope with large MAXSKBFRAGS Sabrina reports that the igb driver does not cope well with large MAXSKBFRAG values: setting MAXSKBFRAG to 45 causes payload corruption on TX. An easy reproducer is to run ssh to connect to the...
CVE-2024-45030 igb: cope with large MAX_SKB_FRAGS
In the Linux kernel, the following vulnerability has been resolved: igb: cope with large MAXSKBFRAGS Sabrina reports that the igb driver does not cope well with large MAXSKBFRAG values: setting MAXSKBFRAG to 45 causes payload corruption on TX. An easy reproducer is to run ssh to connect to the...
2K Games Help Desk Platform Hacked to Spread Info-stealing Malware
By Deeba Ahmed Famous publisher 2K Games helpdesk platform was hacked where the attackers attempted to distribute malware to gamers devices.… This is a post from HackRead.com Read the original post: 2K Games Help Desk Platform Hacked to Spread Info-stealing Malware...
2K games helpdesk abused to spread RedLine malware
On September 20, 2022, the official Twitter account for 2K Support tweeted an important message from the Customer Support team. The tweet said an unauthorized party illegally accessed the credentials of one of the vendors of the helpdesk platform. The attacker then used that access to send out...
Malicious code in 2k-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f17ea2b8ca8faf0f7dbb81efe846a312ba5a60c6b7f9643b848b99b516b89aa9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-24 Malicious code in 2k-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f17ea2b8ca8faf0f7dbb81efe846a312ba5a60c6b7f9643b848b99b516b89aa9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Buffer overflow
A Buffer Overflow vulnerability in the RSTP server component of Eufy Indoor 2K Indoor Camera allows a local attacker to achieve remote code execution. This issue affects: Eufy Indoor 2K Indoor Camera 2.0.9.3 version and prior versions...
CVE-2021-3555
A Buffer Overflow vulnerability in the RSTP server component of Eufy Indoor 2K Indoor Camera allows a local attacker to achieve remote code execution. This issue affects: Eufy Indoor 2K Indoor Camera 2.0.9.3 version and prior versions...
Huawei M6 suffers from information leakage vulnerability
Huawei M6 is equipped with flagship Kirin 980 processor, supports 25601600 2K class HD screen and so on. Huawei M6 has an information leakage vulnerability that can be exploited by attackers to obtain sensitive information...
2k-shop.ru XSS vulnerability
Open Bug Bounty ID: OBB-599906 Description| Value ---|--- Affected Website:| 2k-shop.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
store.2k.com Open Redirect vulnerability
Vulnerable URL: https://store.2k.com/store/Tk22k/enUS/RedirectToLandingPage/pgm.95708900?landingpage=http%3A%2F%2Fwww.openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...
iSO Filer Lite 2.1.0 - Directory Traversal
No description provided by source. Exploit Title: Filer Lite v2.1.0 for iPhone / iPod touch, Directory Traversal Date: 02/24/2011 Author: R3d@l3rt, Sp@2K, Sunlight, H@ckk3y Software Link : http://itunes.apple.com/kr/app/filer-lite-download-view-manage/id350939597?mt=8 Version: 2.1.0 Tested on:...
QK SMTP <= 3.01 (RCPT TO) Remote Buffer Overflow Exploit (pl)
No description provided by source. !/bin/perl http://www.securityfocus.com/bid/20681 tested on winXp Pro SP0 English/winXp Pro SP2 Italian/win 2k SP4 Italian/English return address is universal bind a remote cmd.exe on target host on 4444 port; based on expanders original exploit credit to Greg...
Allwin WinExec cmd.exe + ExitProcess Shellcode - 195 bytes
No description provided by source. / Title: Allwin WinExec cmd.exe + ExitProcess Shellcode - 195 bytes Date: 2010-06-25 Author: RubberDuck Web: http://bflow.security-portal.cz Tested on: Win 2k, Win 2003, Win XP Home SP2/SP3 CZ/ENG 32, Win Vista 32/64, Win 7 32/64, Win 2k8 32 Thanks to:...
Roger Wilco 1.4.1 - Remote Server Side Buffer Overrun Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8566/info A vulnerability has been reported for various Roger Wilco server releases. The problem occurs server-side, and can be triggered when processing malformed client packets. Specifically, when connecting to a server...