7338 matches found
CVE-2020-22001
CVE-2020-22001 affects HomeAutomation 3.3.2. Vulnerability: authentication bypass by spoofing the X-Forwarded-For header to the local loopback IP, enabling remote control of the smart home solution. Documented in multiple sources (Red Hat, NVD, CVE list, Zeroscience) with PoC/advisory details and...
Subreddit Home Automation 授权问题漏洞
Subreddit Home Automation is an automation device for the Subreddit community. An automated electric light. Subreddit Home Automation 3.3.2 suffers from a security vulnerability that stems from an authentication bypass vulnerability when spoofing a client IP address using the X-Forwarded-For head...
Subreddit Home Automation 跨站脚本漏洞
Subreddit Home Automation is an automation device for the Subreddit community. An automated electric light. Subreddit Home Automation 3.3.2 suffers from a cross-site scripting vulnerability that stems from an XSS vulnerability when input passed to multiple scripts via multiple parameters is not...
Subreddit Home Automation 跨站请求伪造漏洞
Subreddit Home Automation is an automation device for the Subreddit community. An automated electric light. A cross-site request forgery vulnerability exists in HomeAutomation version 3.3.2 that allows a user to perform certain actions via an HTTP request without performing any validity checks to...
Subreddit Home Automation 操作系统命令注入漏洞
Subreddit Home Automation is an automation device for the Subreddit community. An automated electric light. A security vulnerability exists in Subreddit Home Automation 3.3.2, which stems from authenticated OS command execution in the custom command v0.1 plugin...
Trend Micro HouseCall for Home Networks elevation of privilege vulnerability (CNVD-2021-37057)
Trend Micro HouseCall for Home Networks is a suite of home network security scanning software from Trend Micro. The software supports scanning a wide range of home network devices and identifying network risks. An elevation of privilege vulnerability exists in Trend Micro HouseCall for Home...
Trend Micro HouseCall for Home Networks Incorrect Permission Assignment Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro HouseCall for Home Networks. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...
Trend Micro HouseCall for Home Networks 安全漏洞
Trend Micro HouseCall for Home Networks is a suite of home network security scanning software from Trend Micro. The software supports scanning a wide range of home network devices and identifying network risks. An elevation of privilege vulnerability exists in Trend Micro HouseCall for Home...
Trend Micro HouseCall for Home Networks 安全漏洞
Trend Micro HouseCall for Home Networks is a suite of home network security scanning software from Trend Micro. The software supports scanning a wide range of home network devices and identifying network risks. An elevation of privilege vulnerability exists in Trend Micro HouseCall for Home...
Trend Micro Inc. Home Network Security tdts.ko TRF file-parsing denial-of-service vulnerability
Talos Vulnerability Report TALOS-2021-1239 Trend Micro Inc. Home Network Security tdts.ko TRF file-parsing denial-of-service vulnerability April 22, 2021 CVE Number CVE-2021-31517 SUMMARY A denial-of-service vulnerability exists in the tdts.ko TRF file-parsing functionality of Trend Micro Inc.’s...
Trend Micro Inc. Home Network Security tdts.ko TRF file-parsing denial-of-service vulnerability
Talos Vulnerability Report TALOS-2021-1240 Trend Micro Inc. Home Network Security tdts.ko TRF file-parsing denial-of-service vulnerability April 22, 2021 CVE Number CVE-2021-31518 SUMMARY A denial-of-service vulnerability exists in the tdts.ko TRF file-parsing function of Trend Micro Inc.’s Home...
Homeworking vs Homeschooling. The cyber challenge
March 2020 was a significant challenge. We were propelled into lockdown. From happily working in an office I had to switch to working from home. Previously I had always looked at my home as exactly that, a home. A place to relax and spend time as a family. Never did I expect to be spending every...
Fibaro Home Center MITM / Missing Authentication / Code Execution Vulnerabilities
Fibaro Home Center Light and Fibaro Home Center 2 versions 4.600 and below suffer from man-in-the-middle, missing authentication, remote command execution, and missing encryption vulnerabilities. Fibaro Home Center MITM / Missing Authentication / Code Execution Vendor description:...
Fibaro Home Center MITM / Missing Authentication / Code Execution
IoT Inspector Research Lab Advisory IOT-20210408-0 title: Multiple vulnerabilities vendor/product: Fibaro Home Center Light / Fibaro Home Center 2 https://www.fibaro.com/ vulnerable version: 4.600 and older fixed version: 4.610 CVE number: CVE-2021-20989, CVE-2021-20990, CVE-2021-20991,...
Working from home: Options and opportunities
By Owais Sultan Technology has given ample opportunities to work from home even when the entire world is suffering from the COVID-19 pandemic. Here are some of the ways through which you can take advantage of technology and cybersecurity to work online from home. Bug bounty hunter Become Copywrit...
CVE-2021-20990
In Fibaro Home Center 2 and Lite devices with firmware version 4.600 and older an internal management service is accessible on port 8000 and some API endpoints could be accessed without authentication to trigger a shutdown, a reboot or a reboot into recovery mode...
CVE-2021-20989
Fibaro Home Center 2 and Lite devices with firmware version 4.600 and older initiate SSH connections to the Fibaro cloud to provide remote access and remote support capabilities. This connection can be intercepted using DNS spoofing attack and a device initiated remote port-forward channel can be...
CVE-2021-20991
In Fibaro Home Center 2 and Lite devices with firmware version 4.540 and older an authenticated user can run commands as root user using a command injection vulnerability...
CVE-2021-20990
In Fibaro Home Center 2 and Lite devices with firmware version 4.600 and older an internal management service is accessible on port 8000 and some API endpoints could be accessed without authentication to trigger a shutdown, a reboot or a reboot into recovery mode...
