CVE-2023-21024

In maybeFinish of FallbackHome.java, there is a possible delay of lockdown screen due to logic error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID:...

PT-2023-3277 · Sandisk +1 · Sandisk Ibi +3

Name of the Vulnerable Software and Affected Versions: Western Digital My Cloud versions prior to 5.25.132 My Cloud Home and My Cloud Home Duo versions prior to 8.13.1-102 SanDisk ibi versions prior to 8.13.1-102 Description: The issue is related to an impersonation attack that could allow an...

SoX 14.4.2 - Denial Of Service

Exploit Title: SoX 14.4.2 - Denial Of Service Exploit Author: LiquidWorm Vendor: Chris Bagwell Product web page: http://sox.sourceforge.net https://en.wikipedia.org/wiki/SoX Affected version: , buffer=, buffersize=optim...

SFTP path ~ resolving discrepancy

curl supports SFTP transfers. curl's SFTP implementation offers a special feature in the path component of URLs: a tilde character as the first path element in the path to denotes a path relative to the user's home directory. This is supported because of wording in the once proposed to-become RFC...

CVE-2023-1499

A vulnerability classified as critical was found in code-projects Simple Art Gallery 1.0. Affected by this vulnerability is an unknown functionality of the file adminHome.php. The manipulation of the argument reachcity leads to sql injection. The attack can be launched remotely. The exploit has...

CVE-2023-1500

A vulnerability, which was classified as problematic, has been found in code-projects Simple Art Gallery 1.0. Affected by this issue is some unknown functionality of the file adminHome.php. The manipulation of the argument aboutinfo leads to cross site scripting. The attack may be launched...

MAL-2023-784 Malicious code in sp-home-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 666572c644b50ae47d8c155e0e6297e840cf222216ebb534d81b4e4d1e501491 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sp-home-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 666572c644b50ae47d8c155e0e6297e840cf222216ebb534d81b4e4d1e501491 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-1416

A vulnerability classified as critical has been found in Simple Art Gallery 1.0. Affected is an unknown function of the file adminHome.php. The manipulation of the argument socialfacebook leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...

PT-2023-16969 · Unknown · Simple Art Gallery

Name of the Vulnerable Software and Affected Versions: Simple Art Gallery version 1.0 Description: A critical vulnerability has been found in the software. The issue is related to an unknown function of the file adminHome.php, where the manipulation of the social facebook argument leads to sql...

CVE-2023-27203

Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /billing/home.php...

CVE-2023-27482

homeassistant is an open source home automation tool. A remotely exploitable vulnerability bypassing authentication for accessing the Supervisor API through Home Assistant has been discovered. This impacts all Home Assistant installation types that use the Supervisor 2023.01.1 or older...

Design/Logic Flaw

homeassistant is an open source home automation tool. A remotely exploitable vulnerability bypassing authentication for accessing the Supervisor API through Home Assistant has been discovered. This impacts all Home Assistant installation types that use the Supervisor 2023.01.1 or older...

CVE-2023-27482

homeassistant is an open source home automation tool. A remotely exploitable vulnerability bypassing authentication for accessing the Supervisor API through Home Assistant has been discovered. This impacts all Home Assistant installation types that use the Supervisor 2023.01.1 or older...

CVE-2023-27482

CVE-2023-27482 affects Home Assistant Supervisor (not Home Assistant Container or Core in Python) via a remotely exploitable authentication bypass of the Supervisor API. Affected installations are those using Supervisor 2023.01.1 or older. Mitigation: Supervisor 2023.03.1 has been rolled out to a...

PT-2023-21158

Name of the Vulnerable Software and Affected Versions Home Assistant Supervisor versions 2023.01.1 and earlier Home Assistant Core versions prior to 2023.3.0 Description A remotely exploitable issue has been discovered in Home Assistant, allowing unauthorized access to the Supervisor API by...

Home Assistant Authorization Vulnerability

Home Assistant is an open source home automation management system. The system is primarily used to control home automation devices. An authorization issue vulnerability exists in Home Assistant Supervisor versions prior to 2023.01.1 that stems from an authentication bypass vulnerability...

CVE-2023-27482

homeassistant is an open source home automation tool. A remotely exploitable vulnerability bypassing authentication for accessing the Supervisor API through Home Assistant has been discovered. This impacts all Home Assistant installation types that use the Supervisor 2023.01.1 or older...

CVE-2023-27482

homeassistant is an open source home automation tool. A remotely exploitable vulnerability bypassing authentication for accessing the Supervisor API through Home Assistant has been discovered. This impacts all Home Assistant installation types that use the Supervisor 2023.01.1 or older...

LastPass Hack: Engineer's Failure to Update Plex Software Led to Massive Data Breach

The massive breach at LastPass was the result of one of its engineers failing to update Plex on their home computer, in what's a sobering reminder of the dangers of failing to keep software up-to-date. The embattled password management service last week revealed how unidentified actors leveraged...