CVE-2022-36498

H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function AspSetTimingtimeWifiAndLed...

CVE-2022-36498

H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function AspSetTimingtimeWifiAndLed...

CVE-2022-36493

H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function SetAPWifiorLedInfoById...

CVE-2022-36493

H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function SetAPWifiorLedInfoById...

CVE-2022-36469

H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function SetAPWifiorLedInfoById...

CVE-2022-36469

H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function SetAPWifiorLedInfoById...

CVE-2022-36468

H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function AspSetTimingtimeWifiAndLed...

CVE-2022-36468

H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function AspSetTimingtimeWifiAndLed...

Microsoft Uncovers New Post-Compromise Malware Used by Nobelium Hackers

The threat actor behind the SolarWinds supply chain attack has been linked to yet another "highly targeted" post-exploitation malware that could be used to maintain persistent access to compromised environments. Dubbed MagicWeb by Microsoft's threat intelligence teams, the development reiterates...

H3C H200 缓冲区错误漏洞

The H3C H200 is a kind of full gigabit home smart hub from China's Xinhua San H3C. A security vulnerability exists in the H3C H200 H200V100R004 version that stems from a stack overflow issue in the AspSetTimingtimeWifiAndLed method...

H3C Magic NX18 Plus 缓冲区错误漏洞

The H3C Magic NX18 Plus is a Gigabit dual-band router from China's Xinhua San H3C. A security vulnerability exists in the H3C Magic NX18 Plus NX18PV100R003 version, which stems from a stack overflow issue in the AspSetTimingtimeWifiAndLed method...

Air-Gapped Devices Can Send Covert Morse Signals via Network Card LEDs

A security researcher who has a long line of work demonstrating novel data exfiltration methods from air-gapped systems has come up with yet another technique that involves sending Morse code signals via LEDs on network interface cards NICs. The approach, codenamed ETHERLED, comes from Dr...

CVE-2022-35525

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameter ledswitch, which leads to command injection in page /ledonoff.shtml...

melbourneled.com.au Cross Site Scripting vulnerability OBB-2834391

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

多款WAVLINK产品安全漏洞

WAVLINK AC1200 and so on are products of China RuiYin Technology WAVLINK company.WAVLINK AC1200 is a dual-band high-power wireless router.WAVLINK WL-WN531P3 is a wireless router.WAVLINK WN533A8 is a wireless router. A security vulnerability exists in WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3,...

ASUS GameSDK 代码问题漏洞

ASUS GameSDK is a service from Asus ASUS of Taiwan, China. It allows users to control the LEDs of Asus Aura-enabled devices, such as keyboards, mice, and motherboards. A security vulnerability exists in ASUS GameSDK version 1.0.0.4, which originates from an unreferenced service path vulnerability...

CVE-2022-30923

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the AspSetTimingtimeWifiAndLed parameter at /goform/aspForm...

H3C Magic R100 缓冲区错误漏洞

H3C Magic R100 is a router from H3C.A buffer overflow vulnerability exists in the H3C Magic R100 R100V100R005 version, which stems from a buffer overflow issue in the SetAPWifiorLedInfoById parameter of the /goform/aspForm page. No detailed vulnerability details are currently available...

Microsoft showcases the future of comprehensive security at RSA 2022

The last time the RSA Conference was held as an in-person event was in 2020. Needless to say, a lot has changed since then. RSA is once again going forward as an in-person and digital event in San Francisco, from June 6 to 9, 2022. After two years of remote interactions, we’re excited to exchange...

Microsoft showcases the future of comprehensive security at RSA 2022

The last time the RSA Conference was held as an in-person event was in 2020. Needless to say, a lot has changed since then. RSA is once again going forward as an in-person and digital event in San Francisco, from June 6 to 9, 2022. After two years of remote interactions, we’re excited to exchange...