The vulnerability of the microprogramming BIOS in Intel NUC Kit embedded software allows a perpetrator to enhance their privileges.

The vulnerability of the microprogramming BIOS in Intel NUC Kit embedded software is related to access control errors. Exploiting this vulnerability can allow attackers to enhance their privileges...

Intel NUC Kit 代码问题漏洞

Intel NUC Kit is a small desktop computer from Intel Corporation USA. A security vulnerability exists in Intel NUC Kit Wireless Adapter versions prior to 22.40. An attacker could exploit the vulnerability to escalate privileges...

PT-2022-23343 · Intel · Intel Nuc Kit Wireless Adapter Drivers

Name of the Vulnerable Software and Affected Versions: Intel NUC Kit Wireless Adapter drivers for Windows 10 versions prior to 22.40 Description: The issue is related to an unquoted search path in the installer software for some Intel NUC Kit Wireless Adapter drivers. This may allow an...

PT-2022-18457 · Intel · Intel Sgx Sdk

Name of the Vulnerable Software and Affected Versions: IntelR SGX SDK software affected versions not specified Description: The issue is related to the premature release of a resource during its expected lifetime, which may allow a privileged user to potentially enable information disclosure via...

kit-suki.com Cross Site Scripting vulnerability OBB-3044491

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Microsoft Azure Real Time Operating System 安全漏洞

Microsoft Azure Real Time Operating System Azure RTOS is an embedded development kit from Microsoft Corporation USA that includes a small but powerful operating system that delivers reliable, ultra-fast performance for resource-constrained devices. A security vulnerability exists in Microsoft Azu...

webappfind (=0.1.1) potentially affected by unknown CVE via addon-kit (=0.0.1-security)

addon-kit NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on addon-kit and may be impacted: - webappfind =0.1.1 Source cves: unknown CVE Source advisory: OSV:MAL-2022-852...

Malicious code in addon-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2cb769bc829ad73185d9dec43b063a45ed4dab7a85aed2152ea5dc9a75328b58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-852 Malicious code in addon-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2cb769bc829ad73185d9dec43b063a45ed4dab7a85aed2152ea5dc9a75328b58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Cross-site Scripting (XSS)

Overview vapor/leaf-kit is an an expressive, performant, and extensible templating language built for Swift. Affected versions of this package are vulnerable to Cross-site Scripting XSS with untrusted user input. If an attacker managed to find a variable that was rendered with their unsanitized...

Jeg Elementor Kit < 2.5.7 - Subscriber+ Authorization Bypass

The plugin does not properly authorize requests to various ajax actions, allowing authenticated users with roles as low as subscriber to create header templates and make additional changes to the site using an easily available nonce value...

PT-2022-6321 · Silicon +1 · Gecko Sdk +1

Name of the Vulnerable Software and Affected Versions: Micrium uC-HTTP version 3.01.01 Silicon Labs Gecko SDK affected versions not specified Description: The issue is related to a heap-based buffer overflow in the HTTP server functionality. This can be exploited by sending a specially crafted HT...

The vulnerability of the Iota All-In-One Security Kit’s Telnet server allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Iota All-In-One Security Kit’s Telnet server lies in the ability to use strictly encrypted credentials. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information through the TCP port 55023...

SUSE: Security Advisory (SUSE-SU-2022:3791-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2022:3728-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2022:3718-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-35886

Four format string injection vulnerabilities exist in the web interface /action/wirelessConnect functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9Z and 6.9X. A specially-crafted HTTP request can lead to memory corruption, information disclosure and denial of service. An attacke...

CVE-2022-35877

Four format string injection vulnerabilities exist in the XCMD testWifiAP functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. Specially-crafted configuration values can lead to memory corruption, information disclosure and denial of service. An attacker can modify a...

CVE-2022-35880

Four format string injection vulnerabilities exist in the UPnP logging functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9Z and 6.9X. A specially-crafted UPnP negotiation can lead to memory corruption, information disclosure, and denial of service. An attacker can host a malicio...

CVE-2022-33204

Four OS command injection vulnerabilities exists in the web interface /action/wirelessConnect functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP reque...