Security Advisory - Connection Hijacking Vulnerability in Some Huawei Home Routers

Some Huawei home routers have a connection hijacking vulnerability. Successful exploitation of this vulnerability may cause DoS or information leakage.Vulnerability ID:HWPSIRT-2023-76605 This vulnerability has been assigned a CVEID:CVE-2023-7266...

PT-2024-4675 · Huawei · Huawei Ws7206-10 +3

Name of the Vulnerable Software and Affected Versions: Huawei home routers affected versions not specified Huawei TC7001-10, WS7200-10, and WS7206-10 affected versions not specified Description: The issue is related to a connection hijacking vulnerability in some Huawei home routers. This...

CVE-2024-6108

A vulnerability was found in Genexis Tilgin Home Gateway 322AS0500-03051305. It has been classified as problematic. Affected is an unknown function of the file /vood/cgi-bin/voodview.cgi?act=index&lang=EN of the component Login. The manipulation of the argument errmsg leads to basic cross site...

CVE-2024-6108 Genexis Tilgin Home Gateway Login cross site scripting

A vulnerability was found in Genexis Tilgin Home Gateway 322AS0500-03051305. It has been classified as problematic. Affected is an unknown function of the file /vood/cgi-bin/voodview.cgi?act=index&lang=EN of the component Login. The manipulation of the argument errmsg leads to basic cross site...

CVE-2024-6108

CVE-2024-6108 affects Genexis Tilgin Home Gateway 322_AS0500-03_05_13_05. The issue is in the Login component, where the parameter and/or errmsg in /vood/cgi-bin/vood_view.cgi?act=index&lang=EN# is manipulated, leading to basic cross-site scripting. This can be triggered remotely. The available s...

CVE-2024-6108 Genexis Tilgin Home Gateway Login cross site scripting

A vulnerability was found in Genexis Tilgin Home Gateway 322AS0500-03051305. It has been classified as problematic. Affected is an unknown function of the file /vood/cgi-bin/voodview.cgi?act=index&lang=EN of the component Login. The manipulation of the argument errmsg leads to basic cross site...

PT-2024-37385

Name of the Vulnerable Software and Affected Versions: Genexis Tilgin Home Gateway version 322 AS0500-03 05 13 05 Description: A problematic issue has been found, affecting an unknown function of the file /vood/cgi-bin/vood view.cgi?act=index&lang=EN of the component Login. The manipulation of th...

CVE-2024-6108: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

A vulnerability was found in Genexis Tilgin Home Gateway 322AS0500-03051305. It has been classified as problematic. Affected is an unknown function of the file /vood/cgi-bin/voodview.cgi?act=index&lang=EN of the component Login. The manipulation of the argument errmsg leads to basic cross site...

Malvertising Campaign Leads to Execution of Oyster Backdoor

The following analysts contributed to this blog: Thomas Elkins, Daniel Thiede, Josh Lockwood, Tyler McGraw, and Sasha Kovalev. Executive Summary Rapid7 has observed a recent malvertising campaign that lures users into downloading malicious installers for popular software such as Google Chrome and...

Schneider Electric EVlink Home Smart Security Vulnerability

The Schneider Electric EVlink Home Smart is a smart home electric vehicle charger from Schneider Electric France. A security vulnerability exists in Schneider Electric EVlink Home Smart version v2.0.4.1.2131 and v2.0.3.8.2128, which stems from the presence of a Resource Error Domain vulnerability...

What Data Does Veeam Kasten for Kubernetes Include in the Phone Home Reports

Purpose This article documents what data is included in the phone home reports sent by Veeam Kasten for Kubernetes. Solution The data is divided into the following sections Basic Data Infrastructure Data Run Time Data for Billing Purposes Additional Metrics Profiles Artifact Metrics Basic Data...

ABB KNX Security Vulnerability

ABB KNX is a smart home and building automation system from ABB Switzerland. ABB KNX has a security vulnerability that stems from the presence of an FDSK leak and replay attack...

RHEL 5 : libuser (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libuser: TOCTOU race conditions by copying and removing directory trees CVE-2012-5630 - libuser: Security...

PT-2024-40394 · Typo3 · Typo3

Name of the Vulnerable Software and Affected Versions: TYPO3 versions 4.6.x and higher Description: The issue arises when the configuration option config.prefixLocalAnchors is used with the values "all" or "cached" in a TYPO3 installation. This can lead to caching of request URLs with arbitrary...

Tenda AX1806 iptv.stb.port parameter handling stack overflow vulnerability

The Tenda AX1806 is a home wireless router device. The Tenda AX1806 suffers from a stack overflow vulnerability that originates from the iptv.stb.port parameter via the function formSetIptv, no details of the vulnerability are provided at this time...

Tenda AX1806 formSetIptv Stack Buffer Overflow Vulnerability

The Tenda AX1806 is a home wireless router device. The Tenda AX1806 suffers from a stack buffer overflow vulnerability that originates via the adv.iptv.stbpvid parameter in the function formSetIptv, which can be exploited by an attacker to crash an application or execute arbitrary code in the...

Tenda AX1806 iptv.stb.mode parameter handling stack overflow vulnerability

The Tenda AX1806 is a home wireless router device. The Tenda AX1806 suffers from a stack overflow vulnerability, which originates from the iptv.stb.mode parameter in the function formSetIptv and can be exploited by an attacker to execute arbitrary code...

How to remove a user from a shared Mac

There will be times when you need to remove a user from a device. In this article well show you how to remove a user from a Mac. For a better understanding its good to understand the difference between an actual user of the device and a "sharing only user." On a Mac, you can use Sharing Only User...

texashomeoutlet.com Cross Site Scripting vulnerability OBB-3928985

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Tenda AX1806 安全漏洞

The Tenda AX1806 is a home wireless router device. The Tenda AX1806 suffers from a stack overflow vulnerability that originates from the iptv.city.vlan parameter in the function formSetIptv, for which no detailed vulnerability details have been provided...