CVE-2018-4027: Improper Synchronization

An exploitable denial-of-service vulnerability exists in the XMLUploadFile Wi-Fi command of the NT9665X Chipset firmware, running on the Anker Roav A1 Dashcam, version RoavA1SWV1.9. A specially crafted packet can cause a semaphore deadlock, which prevents the device from receiving any physical or...

CVE-2018-4024: NULL Pointer Dereference

An exploitable denial-of-service vulnerability exists in the thumbnail display functionality of the NT9665X Chipset firmware, running on the Anker Roav A1 Dashcam, version RoavA1SWV1.9. A specially crafted packet can cause a null pointer dereference, resulting in a device reboot...

CVE-2018-4023: Out-of-bounds Write

An exploitable code execution vulnerability exists in the XMLUploadFile Wi-Fi command of the NT9665X Chipset firmware, running on the Anker Roav A1 Dashcam, version RoavA1SWV1.9. A specially crafted packet can cause a stack-based buffer overflow, resulting in code execution...

PT-2019-10753

Name of the Vulnerable Software and Affected Versions Roav A1 Dashcam version RoavA1SWV1.9 Description The issue is related to a code execution vulnerability in the URL-parsing functionality. A specially crafted packet can cause a stack-based buffer overflow, resulting in code execution. An...

D-Link DWL-2600AP Upgrade Firmware Command Injection Vulnerability

D-Link DWL-2600AP suffers from an authentication OS command injection vulnerability via the upgrade firmware functionality. Document Title: =============== D-Link DWL-2600AP - Authenticated OS Command Injection Upgrade Firmware Product & Service Introduction: =============================== The...

D-Link DWL-2600AP Upgrade Firmware Command Injection

Document Title: =============== D-Link DWL-2600AP - Authenticated OS Command Injection Upgrade Firmware Product & Service Introduction: =============================== The D-Link DWL-2600AP has a web interface for configuration. You can use any web browser you like to login to the D-Link...

Mitsubishi QS061P-A1-K PLC Detection

Binary data 754934.prm...

Mitsubishi QS061P-A1 PLC Detection

Binary data 754933.prm...

D-Link DWL-2600AP Authenticated OS Command Injection Vulnerability

D-Link DWL-2600AP suffers from an authentication OS command injection vulnerability via the tftp restore functionality. Document Title: =============== D-Link DWL-2600AP - Authenticated OS Command Injection Restore Configuration Product & Service Introduction: =============================== The...

D-Link DWL-2600AP Authenticated OS Command Injection

Document Title: =============== D-Link DWL-2600AP - Authenticated OS Command Injection Restore Configuration Product & Service Introduction: =============================== The D-Link DWL-2600AP has a web interface for configuration. You can use any web browser you like to login to the D-Link...

Xiaomi Mi A1 Information Disclosure Vulnerability

The Xiaomi Mi A1 is a smartphone from Chinese company Xiaomi. An information disclosure vulnerability exists in the Xiaomi Mi A1 tissotsprout version 8.1.0, OPM version 1.171019.026, and version 9.6.4.0.ODHMIFE, which stems from the device storing plaintext Wi-Fi passwords in logcat during the...

Design/Logic Flaw

An issue was discovered on Xiaomi Mi A1 tissotsprout:8.1.0/OPM1.171019.026/V9.6.4.0.ODHMIFE devices. They store cleartext Wi-Fi passwords in logcat during the process of setting up the phone as a hotspot...

CVE-2018-18698

An issue was discovered on Xiaomi Mi A1 tissotsprout:8.1.0/OPM1.171019.026/V9.6.4.0.ODHMIFE devices. They store cleartext Wi-Fi passwords in logcat during the process of setting up the phone as a hotspot...

CVE-2018-18698

An issue was discovered on Xiaomi Mi A1 tissotsprout:8.1.0/OPM1.171019.026/V9.6.4.0.ODHMIFE devices. They store cleartext Wi-Fi passwords in logcat during the process of setting up the phone as a hotspot...

CVE-2018-18698

Affected product/variant: Xiaomi Mi A1 (tissot_sprout) running 8.1.0/OPM1.171019.026/V9.6.4.0.ODHMIFE. Vulnerability detail: The device stores cleartext Wi‑Fi passwords in logcat during the process of enabling hotspot, exposing credentials. Impact: Unauthorized disclosure of Wi‑Fi passwords. Root...

PT-2018-14578

Name of the Vulnerable Software and Affected Versions Xiaomi Mi A1 version 8.1.0/OPM1.171019.026/V9.6.4.0.ODHMIFE Description An issue was discovered where devices store cleartext Wi-Fi passwords in logcat during the process of setting up the phone as a hotspot. Recommendations For version...

CVE-2018-18698: Insufficiently Protected Credentials

An issue was discovered on Xiaomi Mi A1 tissotsprout:8.1.0/OPM1.171019.026/V9.6.4.0.ODHMIFE devices. They store cleartext Wi-Fi passwords in logcat during the process of setting up the phone as a hotspot...

Tools to address OWASP Top 10 Risks

In a recent article published by Security Boulevard. we talked about OWASP Top 10 Risk classification and overlap. In this post, we will look into the tools that may help address these risks. To understand what’s possible to cover with which protection mechanisms we can now color-code our OWASP...

a1.net XSS vulnerability

Open Bug Bounty ID: OBB-675929 Description| Value ---|--- Affected Website:| a1.net Open Bug Bounty Program:| View Open Bug Bounty Program Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N...

a1-traktor.de XSS vulnerability

Open Bug Bounty ID: OBB-673533 Description| Value ---|--- Affected Website:| a1-traktor.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...