CVE-2023-48419

An attacker in the wifi vicinity of a target Google Home can spy on the victim, resulting in Elevation of Privilege...

CVE-2023-48419

An attacker in the wifi vicinity of a target Google Home can spy on the victim, resulting in Elevation of Privilege...

Privilege escalation

An attacker in the wifi vicinity of a target Google Home can spy on the victim, resulting in Elevation of Privilege...

CVE-2023-48419

Technical details for CVE-2023-48419 are not publicly provided in the supplied documents; no affected product versions, root cause, or remediation are specified. Monitor for updates.

CVE-2023-48419 An attacker in the wifi vicinity of a target Google Home can spy on the victim, resulting in EoP

An attacker in the wifi vicinity of a target Google Home can spy on the victim, resulting in Elevation of Privilege...

CVE-2023-48419 An attacker in the wifi vicinity of a target Google Home can spy on the victim, resulting in EoP

An attacker in the wifi vicinity of a target Google Home can spy on the victim, resulting in Elevation of Privilege...

PT-2024-13612 · Google · Google Home

Name of the Vulnerable Software and Affected Versions: Google Home affected versions not specified Description: An attacker in the wifi vicinity of a target Google Home can spy on the victim, resulting in Elevation of Privilege. Recommendations: At the moment, there is no information about a newe...

Kami YI HOME Security Breach

Kami YI HOME is a webcam from Kami. A security vulnerability exists in Kami YI HOME prior to version 4.1.920231127, which originates from a vulnerability that allows remote attackers to execute arbitrary JavaScript code via the com.ants360.yicamera.activity.WebViewActivity component...

Vietnamese Group Hacks and Sells Bedroom Camera Footage

By Waqas Cheap Security, Costly Privacy: Vietnamese Group Profits from Hacked Home Cameras by Selling Bedroom Camera Footage- Change Your Passwords Now! This is a post from HackRead.com Read the original post: Vietnamese Group Hacks and Sells Bedroom Camera Footage...

CVE-2023-48670

Dell SupportAssist for Home PCs version 3.14.1 and prior versions contain a privilege escalation vulnerability in the installer. A local low privileged authenticated attacker may potentially exploit this vulnerability, leading to the execution of arbitrary executable on the operating system with...

CVE-2023-48670

Dell SupportAssist for Home PCs version 3.14.1 and prior versions contain a privilege escalation vulnerability in the installer. A local low privileged authenticated attacker may potentially exploit this vulnerability, leading to the execution of arbitrary executable on the operating system with...

CVE-2023-48670

Dell SupportAssist for Home PCs, versions 3.14.1 and earlier, contain a local privilege-escalation flaw in the installer. A local, low-privileged authenticated attacker could potentially exploit this to execute arbitrary code with elevated privileges. PT-2023-30890 provides a remediation path: up...

Dell SupportAssist for Home PCs Code Issue Vulnerability

Dell SupportAssist for Home PCs is a client application for home computers from Dell USA. The program provides automated, proactive and predictive techniques for troubleshooting and more. A security vulnerability exists in Dell SupportAssist for Home PCs version 3.14.1 and prior versions, which...

PT-2023-30890 · Dell · Dell Supportassist

Name of the Vulnerable Software and Affected Versions: Dell SupportAssist for Home PCs versions 3.14.1 and prior Description: A privilege escalation vulnerability exists in the installer of Dell SupportAssist for Home PCs, allowing a local low-privileged authenticated attacker to potentially...

CVE-2023-50639

Cross Site Scripting XSS vulnerability in CuteHttpFileServer v.1.0 and v.2.0 allows attackers to obtain sensitive information via the file upload function in the home page...

Cross site scripting

Cross Site Scripting XSS vulnerability in CuteHttpFileServer v.1.0 and v.2.0 allows attackers to obtain sensitive information via the file upload function in the home page...

MajorDoMo Remote Code Execution

Introduction MajorDoMo, a beacon in Russian home automation and particularly favored by Raspberry Pi aficionados, has been a trusted name for over a decade. With over 380 stars on its official GitHub repository at the time of writing https://github.com/sergejey/majordomo, its popularity is eviden...

MajorDoMo Command Execution Vulnerability (CNVD-2024-0217529)

MajorDoMo is an open source DIY smart home automation platform from the MajorDoMo community. MajorDoMo suffers from a command execution vulnerability that stems from the file thumb.php failing to properly filter construct command special characters, commands, and more. An attacker can exploit thi...

User accounts disclosed to unauthenticated actors on the LAN

Summary The login page discloses all active user accounts to any unauthenticated browsing request originating on the Local Area Network. Details Starting the Home Assistant 2023.12 release, the login page returns all currently active user accounts to browsing requests from the Local Area Network...

GHSA-JQPC-RC7G-VF83 User accounts disclosed to unauthenticated actors on the LAN

Summary The login page discloses all active user accounts to any unauthenticated browsing request originating on the Local Area Network. Details Starting the Home Assistant 2023.12 release, the login page returns all currently active user accounts to browsing requests from the Local Area Network...