CVE-2022-34753

A CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability exists that could cause remote root exploit when the command is compromised. Affected Products: SpaceLogic C-Bus Home Controller 5200WHC2, formerly known as C-Bus Wiser Homer Controlle...

CVE-2022-34753

CVE-2022-34753 affects Schneider Electric SpaceLogic C-Bus Home Controller (5200WHC2), formerly C-Bus Wiser Home Controller MK2, up to version 1.31.460 (firmware 604). The vulnerability is an authenticated OS command injection vulnerability that allows remote root execution when a crafted command...

The vulnerability of the “Reports” component of the TUG Home Base Server allows a attacker to perform XSS attacks.

The vulnerability of the “Reports” component of the TUG Home Base Server is related to the lack of measures to sanitize input data. Exploiting this vulnerability allows a remote attacker to carry out XSS attacks...

The vulnerability of the “Upload” component of the TUG Home Base Server allows attackers to carry out XSS attacks.

The vulnerability of the “Upload” component of the TUG Home Base Server is related to the lack of measures to sanitize input data. Exploiting this vulnerability allows a remote attacker to carry out XSS attacks...

The vulnerability of the TUG Home Base Server, related to deficiencies in the authentication process, allows attackers to add and remove arbitrary users.

The vulnerability of the TUG Home Base Server is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to add and remove arbitrary users remotely...

The vulnerability of the TUG Home Base Server, related to deficiencies in the authentication process, allows a perpetrator to gain unauthorized access to hashed user credentials.

The vulnerability of the TUG Home Base Server is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain unauthorized access to hashed user credentials...

CVE-2022-22997

Addressed a remote code execution vulnerability by resolving a command injection vulnerability and closing an AWS S3 bucket that potentially allowed an attacker to execute unsigned code on My Cloud Home devices...

CVE-2022-22997

Addressed a remote code execution vulnerability by resolving a command injection vulnerability and closing an AWS S3 bucket that potentially allowed an attacker to execute unsigned code on My Cloud Home devices...

Remote code execution

Addressed a remote code execution vulnerability by resolving a command injection vulnerability and closing an AWS S3 bucket that potentially allowed an attacker to execute unsigned code on My Cloud Home devices...

CVE-2022-22997

CVE-2022-22997 affects Western Digital My Cloud Home. The issue is a remote code execution via a command injection vulnerability tied to an AWS S3 bucket, which could have allowed unsigned code execution on the device. Mitigation provided in public advisories includes firmware updates (e.g., 8-7-...

CVE-2022-22997 Command Injection Vulnerability on My Cloud Home

Addressed a remote code execution vulnerability by resolving a command injection vulnerability and closing an AWS S3 bucket that potentially allowed an attacker to execute unsigned code on My Cloud Home devices...

CVE-2022-22998 Protecting AWS credentials stored in plaintext on My Cloud Home

Implemented protections on AWS credentials that were not properly protected...

CVE-2022-34753

A CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability exists that could cause remote root exploit when the command is compromised. Affected Products: SpaceLogic C-Bus Home Controller 5200WHC2, formerly known as C-Bus Wiser Homer Controlle...

Western Digital My Cloud Home 操作系统操作系统命令注入漏洞

Western Digital My Cloud Home is an easy-to-use personal cloud storage device from Western Digital USA. It plugs directly into a Wi-Fi router to protect your digital life. Western Digital My Cloud Home suffers from an operating system command injection vulnerability that stems from an AWS S3 buck...

CVE-2022-31585

The umeshpatil-dev/Homeinternet repository through 2020-08-28 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

Home__internet 路径遍历漏洞

Homeinternet is a type of web server by the individual developer Umesh Patil. It is used to make specified folders on a computer accessible on a network for quick file uploads and downloads. Homeinternet A security vulnerability exists in versions 2020-08-28 and earlier, which stems from an unsaf...

Multiple MediaTek Chips Autoboot Access Control Error Vulnerability

MediaTek Inc. is the world's fourth largest fab-based semiconductor company and a leader in the markets of mobile terminals, smart home applications, wireless connectivity and Internet of Things IoT products, with approximately 1.5 billion units of end products with built-in MediaTek chips hittin...

Bluetooth buffer overflow vulnerability in multiple MediaTek chips (CNVD-2022-66252)

MediaTek Inc. is the world's fourth largest fab-based semiconductor company and a leader in the markets of mobile terminals, smart home applications, wireless connectivity and Internet of Things IoT products, with approximately 1.5 billion units of end products with built-in MediaTek chips hittin...

Multiple MediaTek Chip WLAN Driver Input Validation Error Vulnerability

MediaTek Inc. is the world's fourth largest fab-based semiconductor company and a leader in the markets of mobile terminals, smart home applications, wireless connectivity and Internet of Things IoT products, with approximately 1.5 billion units of end products with built-in MediaTek chips hittin...

Jetty SslConnection does not release pooled ByteBuffers in case of errors

Impact SslConnection does not release ByteBuffers in case of error code paths. For example, TLS handshakes that require client-auth with clients that send expired certificates will trigger a TLS handshake errors and the ByteBuffers used to process the TLS handshake will be leaked. Workarounds...