D-Zero BurgerEditor 安全漏洞

D-Zero BurgerEditor is a convenient plug-in for domestic baserCMS suitable for corporate websites from Japan's D-Zero, which allows you to add, edit and move content intuitively and create sites without any Web knowledge. A security vulnerability exists in D-Zero BurgerEditor versions prior to...

[SECURITY] Fedora 40 Update: perl-App-cpanminus-1.7047-4.fc40

Why? It's dependency free, requires zero configuration, and stands alone but it's maintainable and extensible with plug-ins and friendly to shell scripting. When running, it requires only 10 MB of RAM...

CVE-2024-46041

IoT Haat Smart Plug IH-IN-16A-S v5.16.1 is vulnerable to Authentication Bypass by Capture-replay...

CVE-2024-46040

IoT Haat Smart Plug IH-IN-16A-S IH-IN-16A-S v5.16.1 suffers from Insufficient Session Expiration. The lack of validation of the authentication token at the IoT Haat during the Access Point Pairing mode leads the attacker to replay the Wi-Fi packets and forcefully turn off the access point after t...

IoT Haat Smart Plug IH-IN-16A-S 安全漏洞

IoT Haat Smart Plug IH-IN-16A-S is a smart plug from IoT Haat. A security vulnerability exists in IoT Haat Smart Plug IH-IN-16A-S version v5.16.1, which stems from vulnerability to capture replay authentication bypass attacks...

CVE-2024-46040

IoT Haat Smart Plug IH-IN-16A-S IH-IN-16A-S v5.16.1 suffers from Insufficient Session Expiration. The lack of validation of the authentication token at the IoT Haat during the Access Point Pairing mode leads the attacker to replay the Wi-Fi packets and forcefully turn off the access point after t...

CVE-2024-46040

IoT Haat Smart Plug IH-IN-16A-S IH-IN-16A-S v5.16.1 suffers from Insufficient Session Expiration. The lack of validation of the authentication token at the IoT Haat during the Access Point Pairing mode leads the attacker to replay the Wi-Fi packets and forcefully turn off the access point after t...

CVE-2024-46041

IoT Haat Smart Plug IH-IN-16A-S v5.16.1 is vulnerable to Authentication Bypass by Capture-replay...

CVE-2024-46041

The IoT Haat Smart Plug IH-IN-16A-S (Application Software Version v5.16.1 ) is vulnerable to an Authentication Bypass by Capture-replay . During the provisioning phase, an attacker can perform a replay attack by replacing a legitimate authentication token with an attacker-controlled token. This v...

CVE-2024-46041

IoT Haat Smart Plug IH-IN-16A-S v5.16.1 is vulnerable to Authentication Bypass by Capture-replay...

PT-2024-31882 · Iot Haat · Iot Haat Smart Plug Ih-In-16A-S

Name of the Vulnerable Software and Affected Versions: IoT Haat Smart Plug IH-IN-16A-S version 5.16.1 Description: The issue is related to Insufficient Session Expiration. The lack of validation of the authentication token at the IoT Haat during the Access Point Pairing mode allows an attacker to...

CVE-2024-46040: Insufficient Session Expiration

IoT Haat Smart Plug IH-IN-16A-S IH-IN-16A-S v5.16.1 suffers from Insufficient Session Expiration. The lack of validation of the authentication token at the IoT Haat during the Access Point Pairing mode leads the attacker to replay the Wi-Fi packets and forcefully turn off the access point after t...

CVE-2024-46040

The IoT Haat Smart Plug IH-IN-16A-S (version v5.16.1 ) is vulnerable to Insufficient Session Expiration . The root cause is a lack of validation for authentication tokens during the Access Point Pairing mode. An attacker can exploit this by replaying captured Wi-Fi packets to forcefully turn off ...

CVE-2024-46041: Authentication Bypass by Capture-replay

IoT Haat Smart Plug IH-IN-16A-S v5.16.1 is vulnerable to Authentication Bypass by Capture-replay...

PT-2024-31883

Name of the Vulnerable Software and Affected Versions IoT Haat Smart Plug IH-IN-16A-S version 5.16.1 Description The issue is related to Authentication Bypass by Capture-replay, which allows unauthorized access. Recommendations For IoT Haat Smart Plug IH-IN-16A-S version 5.16.1, consider disablin...

IoT Haat Smart Plug IH-IN-16A-S 安全漏洞

IoT Haat Smart Plug IH-IN-16A-S is a smart plug from IoT Haat. A security vulnerability exists in IoT Haat Smart Plug IH-IN-16A-S version v5.16.1, which stems from the presence of a session expiration insufficiency issue and lack of validation of authentication tokens, which could lead to an...

Moderate: mod_jk bug fix update

The modjk module is an Apache HTTP Server plug-in that enables the Apache HTTP Server to connect with the Apache Tomcat servlet engine. Bug Fixes: Rebase to upstream 1.2.50 release JIRA:AlmaLinux-58855 Security fixes: modjk: information Disclosure / DoS CVE-2024-46544 JIRA:AlmaLinux-59800...

TP-LINK Kasa KP125M和TP-LINK Tapo P125M 安全漏洞

TP-LINK Kasa KP125M and TP-LINK Tapo P125M are both a smart plug from China P&L TP-LINK. A security vulnerability exists in TP-LINK Kasa KP125M v1.0.0 and TP-LINK Tapo P125M v1.0.0, which stems from the presence of an information disclosure vulnerability that can be exploited by an attacker to...

UBUNTU-CVE-2024-46810

In the Linux kernel, the following vulnerability has been resolved: drm/bridge: tc358767: Check if fully initialized before signalling HPD event via IRQ Make sure the connector is fully initialized before signalling any HPD events via drmkmshelperhotplugevent, otherwise this may lead to NULL...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from failing to ensure that the connector is fully initialized before sending an HPD event. No details of the...