276 matches found
Stack overflow
A stack overflow in the function DM In fillobjbystr of TP-Link Archer C50&A5USV5200407 allows attackers to cause a Denial of Service DoS via a crafted HTTP request...
CVE-2022-33087
CVE-2022-33087 describes a stack overflow in TP-Link Archer C50 and A5 (US) devices, triggered by a crafted HTTP request in the function variants named DM_Infillobjbystr()/DM_ Infillobjbystr(), leading to Denial of Service. Public references in NVD and vendor trackers confirm the vulnerability an...
TP-LINK Archer 缓冲区错误漏洞
TP-LINK Archer C50 and TP-LINK Archer A5 are both products of China P&L TP-LINK.TP-LINK Archer C50 is a wireless router.TP-LINK Archer A5 is a wireless dual-band router. A buffer error vulnerability exists in the TP-LINK Archer C50&A5USV5200407, which originates from a stack overflow in the...
AMD Secure Processor 安全特征问题漏洞
The Advanced Micro Devices AMD Secure Processor ASP is a standalone ARM Coretex-A5 chip from Advanced Micro Devices. AMD Secure Processor suffers from a security signature issue vulnerability that can be exploited by an attacker to exploit multiple vulnerabilities in AMD processors...
AMD Secure Processor 输入验证错误漏洞
AMD Secure Processor ASP is a standalone ARM Coretex-A5 chip from AMD. An input validation error vulnerability exists in multiple AMD products that stems from incorrect input and range checking in the Platform Secure Processor PSP bootloader image header that could allow an attacker to use...
Hisense A5 series cell phones have information leakage vulnerability
Hisense owns two listed companies in Shanghai, Shenzhen and Hong Kong, Hisense Video 600060 and Hisense Home Appliances 000921, and owns a number of brands such as Hisense, Toshiba, Gorenje, Kelon, Ronshen and ASKO. The information disclosure vulnerability exists in Hisense A5 series cell phones...
a5.websitealive.com Cross Site Scripting vulnerability OBB-1331433
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Apple devices vulnerable to arbitrary code execution in SecureROM
Overview Some Apple devices are vulnerable to arbitrary code execution at the Boot ROM level called "SecureROM" by Apple by exploiting a use-after-free vulnerability. Successful exploitation results in the ability to execute arbitrary code on the device. checkm8 is a public exploit for this...
Samsung A5 Access Control Error Vulnerability
The Samsung A5 is a smartphone from the South Korean company Samsung Samsung. An access control error vulnerability exists in the Samsung A5. The vulnerability stems from the network system or product not properly restricting access to resources from unauthorized roles. An attacker could exploit...
SYS.1.2.2.A5
Ziel des Bausteins SYS.1.2.2 ist die Absicherung von Microsoft Windows Server 2012 und Microsoft Windows Server 2012 R2. Die Standard-Anforderung Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify...
CVE-2019-15434
The Samsung A5 Android device with a build fingerprint of samsung/a5y17ltexx/a5y17lte:8.0.0/R16NW/A520FXXS8CSC5:user/release-keys contains a pre-installed app with a package name of com.samsung.android.themecenter app versionCode=7000000, versionName=7.0.0.0 that allows other pre-installed apps t...
Code injection
The Samsung A5 Android device with a build fingerprint of samsung/a5y17ltexx/a5y17lte:8.0.0/R16NW/A520FXXS8CSC5:user/release-keys contains a pre-installed app with a package name of com.samsung.android.themecenter app versionCode=7000000, versionName=7.0.0.0 that allows other pre-installed apps t...
CVE-2019-15434
The CVE-2019-15434 entry concerns a Samsung A5 device running Android 8.0 where a pre-installed app, com.samsung.android.themecenter (versionCode 7000000, versionName 7.0.0.0), exports an app component that can be misused by any pre-installed app possessing signatureOrSystem permissions to perfor...
Fake iOS Jailbreak Site Lures in Apple Users
Bad actors are taking advantage of a recently-disclosed iOS bug with a fake website claiming to give iPhone users the ability to jailbreak their phones. In reality, researchers warn, the site ultimately enables attackers to conduct click fraud. A jailbreak, a method to escape Apple’s limitations ...
iOS Exploit 'Checkm8' Could Allow Permanent iPhone Jailbreaks
A researcher is warning of an un-patchable bug affecting hundreds of millions of iPhones that gives attackers system-level access to handsets via an unblockable jailbreak hack. Right now, the scope of the attack is limited. The exploit is dubbed “checkm8” by a security researcher who goes by the...
Hacker Releases 'Unpatchable' Jailbreak For All iOS Devices, iPhone 4s to iPhone X
An iOS hacker and cybersecurity researcher today publicly released what he claimed to be a "permanent unpatchable bootrom exploit," in other words, an epic jailbreak that works on all iOS devices ranging from iPhone 4s A5 chip to iPhone 8 and iPhone X A11 chip. Dubbed Checkm8, the exploit leverag...
SyGuestBook A5 Cross-Site Request Forgery Vulnerability
SyGuestBook A5 is a PHP-based open source message board system . A cross-site request forgery vulnerability exists in SyGuestBook A5 version 1.2. An attacker can use this vulnerability to change the administrator password...
CVE-2019-13949
SyGuestBook A5 Version 1.2 has no CSRF protection mechanism, as demonstrated by CSRF for an index.php?c=Administrator&a=update admin password change...
CVE-2019-13948
SyGuestBook A5 Version 1.2 allows stored XSS because the isValidData function in include/functions.php does not properly block XSS payloads, as demonstrated by a crafted use of the onerror attribute of an IMG element...