europa-seereisen.de Cross Site Scripting vulnerability OBB-3451314

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-34832: Buffer Copy without Checking Size of Input

TP-Link Archer AX10EUV1.2230220 was discovered to contain a buffer overflow via the function FUN131e8 - 0x132B4...

CVE-2023-34832

CVE-2023-34832 affects the TP-Link Archer AX10(EU)_V1.2_230220 router. The root cause is a buffer overflow in the function FUN_131e8 - 0x132B4 caused by improper usage of sprintf, leading to potential memory corruption. The issue is rated with a high impact (NVD CVSS v3.1 base score 9.8, CRITICAL...

CVE-2023-29562

TP-Link TL-WPA7510 EUV2190125 was discovered to contain a stack overflow via the operation parameter at /admin/locale...

Stack overflow

TP-Link TL-WPA7510 EUV2190125 was discovered to contain a stack overflow via the operation parameter at /admin/locale...

CVE-2023-29562: Out-of-bounds Write

TP-Link TL-WPA7510 EUV2190125 was discovered to contain a stack overflow via the operation parameter at /admin/locale...

CVE-2023-29562

The CVE-2023-29562 entry concerns the TP-Link TL-WPA7510 (EU) V2 190125. A stack overflow is triggered via the operation parameter at the /admin/locale API endpoint. Public descriptions consistently identify this as a memory buffer overflow with potential to impact confidentiality, integrity, and...

Paragon Solutions Spyware: Graphite

Paragon Solutions is yet another Israeli spyware company. Their product is called "Graphite," and is a lot like NSO Groups Pegasus. And Paragon is working with what seems to be US approval: American approval, even if indirect, has been at the heart of Paragons strategy. The company sought a list ...

CVE-2023-27126: Insufficiently Protected Credentials

The AES Key-IV pair used by the TP-Link TAPO C200 camera V3 EU on firmware version 1.1.22 Build 220725 is reused across all cameras. An attacker with physical access to a camera is able to extract and decrypt sensitive data containing the Wifi password and the TP-LINK account credential of the...

The Software-Defined Car

Developers are starting to talk about the software-defined car. For decades, features have accumulated like cruft in new vehicles: a box here to control the antilock brakes, a module there to run the cruise control radar, and so on. Now engineers and designers are rationalizing the way they go...

eu-abogada.com Cross Site Scripting vulnerability OBB-3364298

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Leaked EU Document Shows Spain Wants to Ban End-to-End Encryption

In response to an EU proposal to scan private messages for illegal material, the country's officials said it is “imperative that we have access to the data.”...

smartcloud.smart1.eu Cross Site Scripting vulnerability OBB-3351909

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-31700

TP-Link TL-WPA4530 KIT V2 EU170406 and V2 EU161115 is vulnerable to Command Injection via httpRpmPlcDeviceAdd...

eu.vibram.com Cross Site Scripting vulnerability OBB-3348198

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-31701: Improper Neutralization of Special Elements used in a Command

TP-Link TL-WPA4530 KIT V2 EU170406 and V2 EU161115 is vulnerable to Command Injection via httpRpmPlcDeviceRemove...

CVE-2023-31700: Improper Neutralization of Special Elements used in a Command

TP-Link TL-WPA4530 KIT V2 EU170406 and V2 EU161115 is vulnerable to Command Injection via httpRpmPlcDeviceAdd...

CVE-2023-31701

Summary (CVE-2023-31701): The vulnerability affects TP-Link TL-WPA4530 KIT V2 (EU) builds 161115 through 170406. It enables Command Injection via the httpRpmPlcDeviceRemove endpoint. Public details describe a related issue around input data handling at management endpoints (notably the httpRpmPlc...

PT-2023-3397 · Tp Link · Tp-Link Tl-Wpa4530 Kit V2

Name of the Vulnerable Software and Affected Versions: TP-Link TL-WPA4530 KIT V2 EU versions 161115 through 170406 Description: The issue is related to the httpRpmPlcDeviceAdd function in the TP-Link TL-WPA4530 V2 adapter's firmware, which fails to properly sanitize data at the management level...

Toyota Leaked Vehicle Data of 2 Million Customers

The FBI disables notorious Russia-linked malware, the EU edges toward a facial recognition ban, and security firm Dragos has an intrusion of its own...