CVE-2024-52546

An unauthenticated attacker can perform a null pointer dereference in the DHIP Service UDP port 37810. This vulnerability has been resolved in firmware version 2.800.0000000.8.R.20241111...

CVE-2024-52544

An unauthenticated attacker can trigger a stack based buffer overflow in the DP Service TCP port 3500. This vulnerability has been resolved in firmware version 2.800.0000000.8.R.20241111...

CVE-2024-52547 Lorex 2K Indoor Wi-Fi Security Camera - Stack buffer overflow

An authenticated attacker can trigger a stack based buffer overflow in the DHIP Service TCP port 80. This vulnerability has been resolved in firmware version 2.800.0000000.8.R.20241111...

CVE-2024-52546 Lorex 2K Indoor Wi-Fi Security Camera - Null pointer dereference

An unauthenticated attacker can perform a null pointer dereference in the DHIP Service UDP port 37810. This vulnerability has been resolved in firmware version 2.800.0000000.8.R.20241111...

CVE-2024-52546

Lorex 2K Indoor Wi‑Fi Security Camera is affected by CVE-2024‑52546: an unauthenticated user can trigger a null pointer dereference in the DHIP Service (UDP port 37810). The issue is addressed in firmware version 2.800.0000000.8.R.20241111. The public sources describe an exploit chain affecting m...

CVE-2024-52545

Lorex 2K Indoor Wi‑Fi Security Camera is affected by CVE-2024-52545: an unauthenticated attacker can perform an out-of-bounds heap read in the IQ Service (TCP port 9876). The issue is resolved in firmware version 2.800.0000000.8.R.20241111. Remediation: push the firmware update to devices as prov...

CVE-2024-52545 Lorex 2K Indoor Wi-Fi Security Camera - Out of bounds heap read

An unauthenticated attacker can perform an out of bounds heap read in the IQ Service TCP port 9876. This vulnerability has been resolved in firmware version 2.800.0000000.8.R.20241111...

CVE-2024-52544

Lorex 2K Indoor Wi‑Fi Security Camera is affected by CVE-2024-52544 via the DP Service (TCP port 3500). An unauthenticated attacker can trigger a stack-based buffer overflow, enabling a path to remote code execution when chained with other vulnerabilities in the exploit chain described by Rapid7....

Exploit for Uncontrolled Resource Consumption in Ietf Http

CVE-2023-44487 - HTTP/2 Rapid Reset Exploit PoC --- Desc...

Lorex 2K Indoor Wi-Fi Security Camera 安全漏洞

Lorex 2K Indoor Wi-Fi Security Camera is a series of security cameras from Lorex Canada. A security vulnerability previously existed in Lorex 2K Indoor Wi-Fi Security Camera version 2.800.0000000.8.R.20241111. An attacker could exploit this vulnerability to perform an out-of-bounds heap read in t...

Lorex 2K Indoor Wi-Fi Security Camera 安全漏洞

Lorex 2K Indoor Wi-Fi Security Camera is a series of security cameras from Lorex Canada. A security vulnerability previously existed in the Lorex 2K Indoor Wi-Fi Security Camera version 2.800.0000000.8.R.20241111. An unauthenticated attacker exploiting this vulnerability could trigger a stack-bas...

The vulnerabilities of the disable_show() and disable_store() functions in the Linux kernel USB driver allow attackers to compromise the integrity and accessibility of protected information.

The vulnerability of the disableshow and disablestrore functions in the drivers/usb/core/port.c file of the Linux kernel’s USB driver is related to the use of a zero pointer. Exploiting this vulnerability could allow an attacker to compromise the integrity and accessibility of the protected...

Lorex 2K Indoor Wi-Fi Security Camera 安全漏洞

Lorex 2K Indoor Wi-Fi Security Camera is a series of security cameras from Lorex Canada. A security vulnerability previously existed in Lorex 2K Indoor Wi-Fi Security Camera version 2.800.0000000.8.R.20241111. An attacker could exploit this vulnerability to perform null pointer dereferencing in t...

Lorex 2K Indoor Wi-Fi Security Camera 安全漏洞

Lorex 2K Indoor Wi-Fi Security Camera is a series of security cameras from Lorex Canada. A security vulnerability previously existed in the Lorex 2K Indoor Wi-Fi Security Camera version 2.800.0000000.8.R.20241111. An authenticated attacker exploiting this vulnerability could trigger a stack-based...

PT-2024-10651 · Mediatek · Drivers/Misc/Mediatek/Eccci/Port Rpc.C

Name of the Vulnerable Software and Affected Versions: drivers/misc/mediatek/eccci/port rpc.c affected versions not specified Description: The issue is related to an incorrect bounds check in the rpc msg handler and related handlers, which could lead to a possible out of bounds write. This could...

Hewlett Packard Enterprise AutoPass License Server SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Hewlett Packard Enterprise AutoPass License Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web service, which listens on TCP port 58...

The vulnerability of the IPSEC component of the Brocade Fabric OS allows attackers to enhance their privileges.

The vulnerability of the IPSEC component in the Brocade Fabric OS operating system is related to the lack of measures taken at the management level to clean data. Exploiting this vulnerability can allow attackers to enhance their privileges by executing a specially created portcfg command...

Hewlett Packard Enterprise AutoPass License Server Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of Hewlett Packard Enterprise AutoPass License Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web service, which listens on TCP port 5814 by...

Hewlett Packard Enterprise AutoPass License Server XML External Entity Processing Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Hewlett Packard Enterprise AutoPass License Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web service, which listens on TCP port 58...

Cross Site Scripting (XSS)

librenms/librenms is vulnerable to Stored Cross-Site Scripting XSS. The vulnerability is due to improper input sanitization in the "descr" parameter on the "Port Settings" page, allowing authenticated users to inject arbitrary JavaScript...