457 matches found
CVE-2019-15944
In Counter-Strike: Global Offensive before 8/29/2019, community game servers can display unsafe HTML in a disconnection message...
CVE-2019-15944: Improper Encoding or Escaping of Output
In Counter-Strike: Global Offensive before 8/29/2019, community game servers can display unsafe HTML in a disconnection message...
PT-2019-14487
Name of the Vulnerable Software and Affected Versions Counter-Strike: Global Offensive versions prior to 8/29/2019 Description The issue allows community game servers to display unsafe HTML in a disconnection message, potentially leading to security concerns. Recommendations For versions prior to...
USN-4105-1 cups vulnerabilities
Stephan Zeisberg discovered that the CUPS SNMP backend incorrectly handled encoded ASN.1 inputs. A remote attacker could possibly use this issue to cause CUPS to crash by providing specially crafted network traffic. CVE-2019-8696, CVE-2019-8675 It was discovered that CUPS did not properly handle...
UBUNTU-CVE-2019-15214
An issue was discovered in the Linux kernel before 5.0.10. There is a use-after-free in the sound subsystem because card disconnection causes certain data structures to be deleted too early. This is related to sound/core/init.c and sound/core/info.c...
CVE-2019-1897
A vulnerability in the web-based management interface of Cisco RV110W, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to disconnect clients that are connected to the guest network on an affected router. The vulnerability is due to improper authorization of an HTTP...
Cisco RV110W, RV130W, and RV215W Routers Denial of Service Vulnerability
A vulnerability in the web-based management interface of Cisco RV110W, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to disconnect clients that are connected to the guest network on an affected router. The vulnerability is due to improper authorization of an HTTP...
Microsoft Windows RDP can bypass the Windows lock screen
Overview Microsoft Windows RDP can allow an attacker to bypass the lock screen on remote sessions. Description In Windows a session can be locked, which presents the user with a screen that requires authentication to continue using the session. Session locking can happen over RDP in the same way...
CVE-2019-12195
TP-Link TL-WR840N v5 00000005 devices allow XSS via the network name. The attacker must log into the router by breaking the password and going to the admin login page by THC-HYDRA to get the network name. With an XSS payload, the network name changed automatically and the internet connection was...
CVE-2019-12195: Improper Neutralization of Input During Web Page Generation
TP-Link TL-WR840N v5 00000005 devices allow XSS via the network name. The attacker must log into the router by breaking the password and going to the admin login page by THC-HYDRA to get the network name. With an XSS payload, the network name changed automatically and the internet connection was...
PT-2019-12691
Name of the Vulnerable Software and Affected Versions TP-Link TL-WR840N version 5 00000005 Description The issue allows for cross-site scripting XSS attacks via the network name. An attacker must first gain access to the router by cracking the password and logging into the admin page. Once access...
TP-LINK TL-WR840N v5 00000005 - Cross-Site Scripting
Exploit Title: TL-WR840N v5 00000005 Date: 5/10/2019 Exploit Author: purnendu ghosh Vendor Homepage: https://www.tp-link.com/ Software Link: https://www.amazon.in/TP-LINK-TL-WR840N-300Mbps-Wireless-External/dp/B01A0G1J7Q Category: Hardware Firmware Version:0.9.1 3.16 v0001.0 Build 171211 Rel.5880...
TP-LINK TL-WR840N v5 00000005 - Cross-Site Scripting Vulnerability
Exploit for hardware platform in category web applications Exploit Title: TL-WR840N v5 00000005 Exploit Author: purnendu ghosh Vendor Homepage: https://www.tp-link.com/ Software Link: https://www.amazon.in/TP-LINK-TL-WR840N-300Mbps-Wireless-External/dp/B01A0G1J7Q Category: Hardware Firmware...
TP-LINK TL-WR840N v5 00000005 - Cross-Site Scripting
TP-LINK TL-WR840N v5 00000005 - Cross-Site Scripting Exploit Title: TL-WR840N v5 00000005 Date: 5/10/2019 Exploit Author: purnendu ghosh Vendor Homepage: https://www.tp-link.com/ Software Link: https://www.amazon.in/TP-LINK-TL-WR840N-300Mbps-Wireless-External/dp/B01A0G1J7Q Category: Hardware...
PT-2019-2934
Name of the Vulnerable Software and Affected Versions ZNC versions prior to 1.7.3-rc1 Description The issue allows an existing remote user to cause a Denial of Service crash via invalid encoding. It is due to insufficient input validation in the mechanism for disconnecting clients from the IRC...
Denial of Service Vulnerability in Telecommunications Science and Technology First Research Institute In-Vehicle Surveillance System
The First Institute of Telecommunications Science and Technology hereinafter referred to as "Telecom One" is a national professional research institute in the field of communications in China, and is now one of the core enterprises of the Institute of Telecommunications Science and Technology ITS...
What Happens If Russia Cuts Itself Off From the Internet
State media has reported that Russia will attempt to disconnect from the global internet this spring. That's going to be tricky...
PT-2018-15280
Name of the Vulnerable Software and Affected Versions BlinkForHome aka Blink For Home Sync Module versions 2.10.4 and earlier Description A design flaw allows attackers to disable cameras via Wi-Fi by disconnecting the Sync Module from the Wi-Fi network, which prevents incident clips triggered by...
The vulnerability of the HTTP-server on the RouterOS operating system of MikroTik allows a hacker to cause a service failure.
The vulnerability of the HTTP server /nova/bin/www on MikroTik routers under the RouterOS operating system arises from errors in memory cleanup, which store information about initiated connections. Exploiting this vulnerability allows a remote attacker to cause a failure in the HTTP server by...
Command injection
Lack of an authentication mechanism in KERUI Wifi Endoscope Camera YPC99 allows an attacker to watch or block the camera stream. The RTSP server on port 7070 accepts the command STOP to stop streaming, and the command SETSSID to disconnect a user...