CVE-2023-41302

Redirection permission verification vulnerability in the home screen module. Successful exploitation of this vulnerability may cause features to perform abnormally...

PT-2023-27890 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: A redirection permission verification vulnerability exists in the home screen module. Successful exploitation of this issue may cause features to perfor...

CVE-2023-43270

dst-admin v1.5.0 was discovered to contain a remote command execution RCE vulnerability via the userId parameter at /home/playerOperate...

PT-2023-28753 · Dst-Admin · Dst-Admin

Name of the Vulnerable Software and Affected Versions: dst-admin version 1.5.0 Description: The issue is related to a remote command execution RCE vulnerability. It can be exploited via the userId parameter at the "/home/playerOperate" API endpoint. Recommendations: For dst-admin version 1.5.0, a...

CVE-2023-43270

dst-admin v1.5.0 was discovered to contain a remote command execution RCE vulnerability via the userId parameter at /home/playerOperate...

CVE-2023-5042

Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Home Office Windows before build 40713, Acronis True Image OEM Windows before build 42575...

Information disclosure

Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Home Office Windows before build 40713...

CVE-2023-5042

Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Home Office Windows before build 40713, Acronis True Image OEM Windows before build 42575...

CVE-2023-5042

The CVE-2023-5042 entry affects Acronis Cyber Protect Home Office for Windows, prior to build 40713, due to insecure folder permissions that lead to sensitive information disclosure. Root cause is improper/configured folder access, enabling potential unauthorized exposure of protected data. Some ...

CVE-2023-5042

Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Home Office Windows before build 40713, Acronis True Image OEM Windows before build 42575...

PT-2023-5805 · Acronis · Acronis Cyber Protect Home Office

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect Home Office Windows versions before build 40713 Description: The issue is related to sensitive information disclosure due to insecure folder permissions. This could allow a remote attacker to gain unauthorized access to...

MidgeDropper Variant Targets Work-from-Home Employees on Windows PCs

By Deeba Ahmed If you are working from home, you need to be on the lookout for the new and complex variant of MidgeDropper malware. This is a post from HackRead.com Read the original post: MidgeDropper Variant Targets Work-from-Home Employees on Windows PCs...

CVE-2023-41011

Command Execution vulnerability in China Mobile Communications China Mobile Intelligent Home Gateway v.HG6543C4 allows a remote attacker to execute arbitrary code via the shortcuttelnet.cg component...

CVE-2023-41010

Insecure Permissions vulnerability in Sichuan Tianyi Kanghe Communication Co., Ltd China Telecom Tianyi Home Gateway v.TEWA-700G allows a local attacker to obtain sensitive information via the default password parameter...

CVE-2023-41011

Command Execution vulnerability in China Mobile Communications China Mobile Intelligent Home Gateway v.HG6543C4 allows a remote attacker to execute arbitrary code via the shortcuttelnet.cg component...

PT-2023-27743 · China Mobile · China Mobile Intelligent Home Gateway

Name of the Vulnerable Software and Affected Versions: China Mobile Intelligent Home Gateway version v.HG6543C4 Description: The issue allows a remote attacker to execute arbitrary code via the shortcut telnet.cg component. This enables the attacker to potentially gain control over the affected...

CVE-2023-41010

Insecure Permissions vulnerability in Sichuan Tianyi Kanghe Communication Co., Ltd China Telecom Tianyi Home Gateway v.TEWA-700G allows a local attacker to obtain sensitive information via the default password parameter...

China Mobile Intelligent Home Gateway Command Injection Vulnerability

China Mobile Intelligent Home Gateway is an intelligent home gateway from China Mobile, a Chinese company. A security vulnerability exists in China Mobile Communications China Mobile Intelligent Home Gateway v.HG6543C4, which originates from a vulnerability that allows remote attackers to execute...

CVE-2023-41010

CVE-2023-41010 describes an Insecure Permissions vulnerability in the Sichuan Tianyi Kanghe / China Telecom Tianyi Home Gateway v.TEWA-700G. The issue allows a local attacker to obtain sensitive information via the device’s default password parameter . Affected product/version: v.TEWA-700G . Root...

China Telecom Tianyi Home Gateway Security Vulnerability

China Telecom Tianyi Home Gateway is a home gateway from Sichuan Tianyi Kanghe Communication. A security vulnerability exists in Sichuan Tianyi Kanghe Communication China Telecom Tianyi Home Gateway v.TEWA-700G, which can be exploited by a local attacker to obtain sensitive information via the...