Weak password vulnerability in Airspace Technologies WIFISKY 7-layer flow control router

Shenzhen Airspace Technology Co., Ltd. is a supplier of network communication equipment, dedicated to the research and development of network communication equipment. Weak password vulnerability exists in Airspace Technology WIFISKY 7-layer flow control router. Attackers utilize the weak password...

Weak Password Vulnerability in BK-S1000-24POE/BK-S1000-8POE of Shenzhen Wannabe Brocade Network Technology Co.

Shenzhen Wannabe Boco Network Technology Co., Ltd. is a company mainly engaged in the technical research and development, development, and sales of network communication equipment, computers, other electronic products, integrated circuits, and mechanical equipment. Shenzhen WANET BOKE Network...

Security Bulletin: Vulnerability in OpenSSH affects IBM Integrated Analytics System

Summary Redhat provided OpenSSH is used by IBM Integrated Analytics System. This bulletin provides mitigation for the reported CVE. Vulnerability Details CVEID: CVE-2020-14145 DESCRIPTION: OpenSSH is vulnerable to a man-in-the-middle attack, caused by an observable discrepancy flaw. An attacker...

CVE-2020-24588

A flaw was found in the Linux kernels wifi implementation. An attacker within wireless broadcast range can inject custom data into the wireless communication circumventing checks on the data. This can cause the frame to pass checks and be considered a valid frame of a different type. Mitigation...

Linux kernel 资源管理错误漏洞

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A post-release reuse vulnerability exists in the nfc socket in Linux Kernel versions prior to 5.12.2. A local attacke...

Mitsubishi Electric GOT and Tension Controller (Update A)

1. EXECUTIVE SUMMARY CVSS v3 5.9 ATTENTION: Exploitable remotely Vendor: Mitsubishi Electric Equipment: GOT and Tension Controller Vulnerability: Buffer Access with Incorrect Length Value 2. UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled ICSA-21-131-02...

Cross-Site Scripting

Overview Insufficient validation in cross-origin communication postMessage in reveal.js version 3.9.1 and earlier allow attackers to perform cross-site scripting attacks. Recommendation Upgrade to version 3.9.2 or later References - CVE - GitHub Advisory...

GHSA-6VWX-MWP8-FH44 Cross-site Scripting in reveal.js

Insufficient validation in cross-origin communication postMessage in reveal.js version 3.9.1 and earlier allow attackers to perform cross-site scripting attacks...

Cross-site Scripting in reveal.js

Insufficient validation in cross-origin communication postMessage in reveal.js version 3.9.1 and earlier allow attackers to perform cross-site scripting attacks...

SQL Injection Vulnerability in UTP-R3050-5GP of Shenzhen Utep Technology Co.

Founded in 2005, UTEPO is an industrial communication and intelligent Internet of Things solution provider with "Netpower" technology as the core. Based on technological innovation, UTEPO provides intelligent Internet of Things solutions in the fields of smart parks, smart security, smart cities,...

Logic Flaw Vulnerability in RMP Router Management Platform of Xiamen Sihsin Communication Technology Co.

Xiamen Sihsin Communication Technology Co., Ltd. is a backbone enterprise in the field of wireless communication of Internet of Things in China, and is a high-tech enterprise with products, services and management activities covered by a strong color of "integrity, trust, confidence and faith"...

Agenzia delle Entrate Desktop Telematico 安全漏洞

Agenzia delle Entrate Desktop Telematic is an application from Agenzia delle Entrate, Italy. Application for checking, authenticating and sending documents A security vulnerability exists in Agenzia delle Entrate Desktop Telematico version 1.0.0. The vulnerability stems from the program contactin...

Command Execution Vulnerability in Youyou Firewall of Shenzhen Hechen Communication Technology Co.

Yoyo is a registered trademark of Shenzhen Hechen Communication Technology Co., Ltd, founded in 1998, the main products are Mailgard Yoyo series mail servers, mail archiving, spam filtering gateway, mail gateway, global mail gateway, mail load balancing gateway, firewalls, VPNs, etc. Yoyo is the...

CANalyse - A Vehicle Network Analysis And Attack Tool

CANalyse is a tool built to analyze the log files to find out unique datasets automatically and able to connect to simple user interfaces such as Telegram. Basically, while using this tool the attacker can provide a bot-ID and use the tool over the internet through telegram-bot. CANalyse is made ...

CVE-2021-30173

Local File Inclusion vulnerability of the omni-directional communication system allows remote authenticated attacker inject absolute path into Url parameter and access arbitrary file...

CVE-2021-30173

CVE-2021-30173 involves a Local File Inclusion vulnerability in the omni-directional communication system (Jun-He/Junghee/Junghee-type Total Communication System). The issue arises when an authenticated attacker injects an absolute path into the Url parameter, enabling access to arbitrary files o...

竣禾科技全方位通讯系统跨站脚本漏洞

Junghee Technology Omni-Communication System is an application software of China Junghee Technology Co. It is used for communication gateway system. A cross-site scripting vulnerability exists in the Junghua Technology Omni-Communication System, which originates from the special characters on the...

竣禾科技全方位通讯系统安全漏洞

Junghee Technology Omni-Communication System is an application software of China Junghee Technology Co. The system is used for communication gateway. A security vulnerability exists in Junghua Technology Total Communication System, which can be exploited by attackers to inject absolute paths into...

Sifchain: Flaws In Social media Icon on error page which can lead to financial loss to a company.

Here, i found an issue on sifchain.finance that will direct impact to the customer of sifchain company which can be great loss in business as well as there will be problem regarding to communication with the genuine customer of a company. I know that sifchain.finance is not in scope but i saw thi...

CVE-2021-1519

A vulnerability in the interprocess communication IPC channel of Cisco AnyConnect Secure Mobility Client Software could allow an authenticated, local attacker to overwrite VPN profiles on an affected device. The vulnerability is due to insufficient validation of user-supplied input. An attacker...