RPi-Jukebox-RFID operating system command injection vulnerability

RPi-Jukebox-RFID is a contactless jukebox for the Raspberry Pi from the individual developers at Micz Flor in Germany. It plays audio files, playlists, podcasts, web streams and spotify triggered by the RFID card. An operating system command injection vulnerability exists in RPi-Jukebox-RFID...

CVE-2022-36749: Improper Neutralization of Special Elements used in an OS Command

RPi-Jukebox-RFID v2.3.0 was discovered to contain a command injection vulnerability via the component /htdocs/utils/Files.php. This vulnerability is exploited via a crafted payload injected into the file name of an uploaded file...

USN-5390-2 linux-raspi vulnerabilities

David Bouman discovered that the netfilter subsystem in the Linux kernel did not properly validate passed user register indices. A local attacker could use this to cause a denial of service or possibly execute arbitrary code. CVE-2022-1015 David Bouman discovered that the netfilter subsystem in t...

CVE-2021-34589

In Bender/ebee Charge Controllers in multiple versions are prone to an RFID leak. The RFID of the last charge event can be read without authentication via the web interface...

Authentication flaw

In Bender/ebee Charge Controllers in multiple versions are prone to an RFID leak. The RFID of the last charge event can be read without authentication via the web interface...

CVE-2021-34589

CVE-2021-34589 concerns the RFID leak in Bender/ebee Charge Controllers . Affected products include multiple versions of the Bender ebee Charge Controllers, where the RFID data from the last charge event can be read without authentication through the web interface. The available documents corrobo...

CVE-2021-34589 Bender Charge Controller: RFID leak

In Bender/ebee Charge Controllers in multiple versions are prone to an RFID leak. The RFID of the last charge event can be read without authentication via the web interface...

CVE-2021-34589

In Bender/ebee Charge Controllers in multiple versions are prone to an RFID leak. The RFID of the last charge event can be read without authentication via the web interface...

CVE-2021-34589: Exposure of Sensitive Information to an Unauthorized Actor

In Bender/ebee Charge Controllers in multiple versions are prone to an RFID leak. The RFID of the last charge event can be read without authentication via the web interface...

PT-2022-10360 · Unknown · Bender/Ebee Charge Controllers

Name of the Vulnerable Software and Affected Versions: Bender/ebee Charge Controllers affected versions not specified Description: The issue concerns an RFID leak in Bender/ebee Charge Controllers. The RFID of the last charge event can be read without authentication via the web interface...

Bender ebee Charging Controller: Information leakage vulnerability

The ebee is a charge controller from Bender. An information disclosure vulnerability exists in the Bender ebee Charge Controller, which stems from an RFID leak that allows the RFID of the last charging event to be read via the web interface without authentication.An attacker can exploit this...

Military’s RFID Tracking of Guns May Endanger Troops

Reports that the military has started outfitting firearms with RFID tags for tracking have raised security alarms. The concern: What if the enemy uses the tags to track soldiers on the battlefield? The Department of Defense, the Marines and the Navy have already rejected the RFID tagging tech for...

Siemens SIMATIC RFID

1. EXECUTIVE SUMMARY CVSS v3 7.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: SIMATIC RFID terminals Vulnerability: Out-of-bounds Write 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to remotely execute code. 3...

Command Execution Vulnerability in Guangdong Todi Elib 4.1 Library Cluster Management System

Ltd. is a high-tech company, hereinafter referred to as "TODI Technology", has been engaged in the library management software research and development, and library RFID self-service equipment research and development and manufacturing, to provide library RFID system solutions. Guangdong toppy...

Unauthorized Access Vulnerability in Cloud Patrol System of Beijing Landsea Electronic Technology Co.

Beijing Landwell Electronic Technology Co., Ltd Landwell for short, has created all the mobile automatic identification products with independent intellectual property rights and independent brand "LANDWELL"; and built a high-tech enterprise which is integrated with the research, development,...

Logic Flaw Vulnerability in Cloud Patrol System of Beijing Landsea Electronic Technology Co.

Beijing Landwell Electronic Technology Co., Ltd Landwell for short, has created all the mobile automatic identification products with independent intellectual property rights and independent brand "LANDWELL"; and built a high-tech enterprise which is integrated with the research, development,...

Siemens SIMATIC RFID Readers Denial of Service Vulnerability

The SIMATIC RF185C, RF186C/CI and RF188C/CI are communication modules for direct connection of image recognition systems to PROFINET IO/Ethernet and OPC UA.The SIMATIC RF300R is a compact RFID reader. A denial of service vulnerability exists in Siemens SIMATIC RFID Readers. An attacker could...

CVE-2021-31340

A vulnerability has been identified in SIMATIC RF166C All versions V1.1 and V1.1 and V1.1 and V1.1 and V1.1 and V1.1 and V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V4.0. Affected devices do not properly handle large numbers of incoming connections. A...

Code injection

A vulnerability has been identified in SIMATIC RF166C All versions V1.1 and V1.1 and V1.1 and V1.1 and V1.1 and V1.1 and V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V3.0 V4.0. Affected devices do not properly handle large numbers of incoming connections. A...

Siemens SIMATIC: Multiple products have vulnerabilities related to resource management errors

The SIMATIC RF185C, RF186C/CI and RF188C/CI are communication modules for direct connection of image recognition systems to PROFINET IO/Ethernet and OPC UA.The SIMATIC RF300R is a compact RFID reader. A denial of service vulnerability exists in Siemens SIMATIC RFID Readers. An attacker could...