Lucene search
+L

2893 matches found

seebug.org
seebug.org
added 2021/07/28 12:0 a.m.323 views

Denver Smart Wifi Camera SHC-150 - 'Telnet' 远程代码执行漏洞

Exploit Title: Denver Smart Wifi Camera SHC-150 - 'Telnet' Remote Code Execution RCE Date: 27 July 2021 Exploit Author: Ivan Nikolsky enty8080 Vendor Homepage: https://denver.eu/products/smart-home-security/denver-shc-150/c-1024/c-1243/p-3824 Version: Denver SHC-150 all firmware versions Tested o...

0.5AI score
SaveExploits0
NVD
NVD
added 2021/07/24 11:15 p.m.37 views

CVE-2021-37436

Amazon Echo Dot devices through 2021-07-02 sometimes allow attackers, who have physical access to a device after a factory reset, to obtain sensitive information via a series of complex hardware and software attacks. NOTE: reportedly, there were vendor marketing statements about safely removing...

4.2CVSS0.00284EPSS
SaveExploits0References4
OSV
OSV
added 2021/07/24 11:15 p.m.11 views

CVE-2021-37436

Amazon Echo Dot devices through 2021-07-02 sometimes allow attackers, who have physical access to a device after a factory reset, to obtain sensitive information via a series of complex hardware and software attacks. NOTE: reportedly, there were vendor marketing statements about safely removing...

4.2CVSS5.8AI score0.00284EPSS
SaveExploits0References4
Prion
Prion
added 2021/07/24 11:15 p.m.30 views

Design/Logic Flaw

Amazon Echo Dot devices through 2021-07-02 sometimes allow attackers, who have physical access to a device after a factory reset, to obtain sensitive information via a series of complex hardware and software attacks. NOTE: reportedly, there were vendor marketing statements about safely removing...

1.9CVSS4.3AI score0.00284EPSS
SaveExploits0References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/07/24 11:15 p.m.3 views

CVE-2021-37436

Amazon Echo Dot devices through 2021-07-02 sometimes allow attackers, who have physical access to a device after a factory reset, to obtain sensitive information via a series of complex hardware and software attacks. NOTE: reportedly, there were vendor marketing statements about safely removing...

4.2CVSS6AI score0.00284EPSS
SaveExploits0References5
CVE
CVE
added 2021/07/24 10:46 p.m.101 views

CVE-2021-37436

CVE-2021-37436 affects Amazon Echo Dot devices. The connected sources describe a design/logic flaw that, after a factory reset, can let an attacker with physical access extract sensitive information through a sequence of hardware and software attacks. There are no published patch details in the p...

4.2CVSS4.2AI score0.00284EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2021/07/24 10:46 p.m.42 views

CVE-2021-37436

Amazon Echo Dot devices through 2021-07-02 sometimes allow attackers, who have physical access to a device after a factory reset, to obtain sensitive information via a series of complex hardware and software attacks. NOTE: reportedly, there were vendor marketing statements about safely removing...

4.5AI score0.00284EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/07/24 12:0 a.m.9 views

Amazon Echo Dot 安全漏洞

The Amazon Echo Dot is a voice-activated speaker from Amazon.com. It can be used to play music, control smart home devices, make phone calls, answer questions, set timers and alarms, and more using Alexa. The Amazon Echo Dot suffers from a security vulnerability that allows attackers to gain acce...

4.2CVSS5.2AI score0.00284EPSS
SaveExploits0References5
CNVD
CNVD
added 2021/07/16 12:0 a.m.33 views

Unspecified vulnerability in DEPSTECH WiFi Digital Microscope

DEPSTECH WiFi Digital Microscope is a wifi industrial endoscope from Shenzhen Shenhai Innovation Technology Co., Ltd. in China. DEPSTECH WiFi Digital Microscope 3 has a security vulnerability that allows remote attackers to change the SSID and password and demand a ransom from the legitimate devi...

8.1CVSS3.2AI score0.00941EPSS
SaveExploits1References1
NVD
NVD
added 2021/07/15 4:15 p.m.18 views

CVE-2020-12734

DEPSTECH WiFi Digital Microscope 3 allows remote attackers to change the SSID and password, and demand a ransom payment from the rightful device owner, because there is no way to reset to Factory Default settings...

8.1CVSS0.00941EPSS
SaveExploits1References2
Prion
Prion
added 2021/07/15 4:15 p.m.18 views

Design/Logic Flaw

DEPSTECH WiFi Digital Microscope 3 allows remote attackers to change the SSID and password, and demand a ransom payment from the rightful device owner, because there is no way to reset to Factory Default settings...

4.8CVSS8AI score0.00941EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2021/07/15 3:3 p.m.27 views

CVE-2020-12734

DEPSTECH WiFi Digital Microscope 3 allows remote attackers to change the SSID and password, and demand a ransom payment from the rightful device owner, because there is no way to reset to Factory Default settings...

8.1AI score0.00941EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2021/07/15 12:0 a.m.6 views

DEPSTECH WiFi Digital Microscope 安全漏洞

DEPSTECH WiFi Digital Microscope is a wifi industrial endoscope from Shenzhen Shenhai Innovation Technology Co., Ltd. in China. DEPSTECH WiFi Digital Microscope 3 has a security vulnerability that allows remote attackers to change the SSID and password and demand a ransom from the legitimate devi...

8.1CVSS5.7AI score0.00941EPSS
SaveExploits1References2
NVD
NVD
added 2021/07/14 2:15 p.m.19 views

CVE-2021-0515

In Factory::CreateStrictFunctionMap of factory.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution in an unprivileged process with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

10CVSS0.01436EPSS
SaveExploits0References1
OSV
OSV
added 2021/07/14 2:15 p.m.5 views

CVE-2021-0515

In Factory::CreateStrictFunctionMap of factory.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution in an unprivileged process with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

9.8CVSS6.3AI score0.01436EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/07/14 1:43 p.m.24 views

CVE-2021-0515

In Factory::CreateStrictFunctionMap of factory.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution in an unprivileged process with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

9.5AI score0.01436EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2021/07/13 12:0 a.m.19 views

Huawei EulerOS: Security Advisory for cups (EulerOS-SA-2021-2190)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

3.3CVSS4.3AI score0.00268EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2021/07/13 12:0 a.m.7 views

The vulnerability of Western Digital WD My Book Live and WD My Book Live Duo disk storage devices stems from authentication procedures that have flaws. This allows attackers to reset the device to its factory settings.

The vulnerability of the microprogrammed software in Western Digital WD My Book Live and WD My Book Live Duo storage devices is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

8.5CVSS7.4AI score0.1271EPSS
SaveExploits1References3
NVD
NVD
added 2021/07/08 2:15 p.m.35 views

CVE-2021-25433

Improper authorization vulnerability in Tizen factory reset policy prior to Firmware update JUL-2021 Release allows untrusted applications to perform factory reset using dbus signal...

5.5CVSS0.00223EPSS
SaveExploits0References1
OSV
OSV
added 2021/07/08 2:15 p.m.8 views

CVE-2021-25433

Improper authorization vulnerability in Tizen factory reset policy prior to Firmware update JUL-2021 Release allows untrusted applications to perform factory reset using dbus signal...

5.5CVSS6.1AI score0.00223EPSS
SaveExploits0References1
Rows per page
Query Builder