CVE-2023-23771

The CVE-2023-23771 entry concerns Motorola MBTS Base Radio. The vulnerability is in the Man Machine Interface (MMI) where a hard-coded backdoor password is accepted for service technicians to diagnose and configure the device, and this password cannot be changed or disabled. This creates potentia...

PT-2023-19196 · Motorola · Motorola Ebts/Mbts Base Radio

Name of the Vulnerable Software and Affected Versions: Motorola EBTS/MBTS Base Radio affected versions not specified Description: The Motorola MBTS Base Radio lacks cryptographic signature validation for firmware update packages, allowing an authenticated attacker to gain arbitrary code execution...

PT-2023-19194 · Motorola · Motorola Mbts Base Radio

Name of the Vulnerable Software and Affected Versions: Motorola MBTS Base Radio affected versions not specified Description: The Motorola MBTS Base Radio Man Machine Interface MMI accepts a hard-coded backdoor password that cannot be changed or disabled, allowing service technicians to diagnose a...

Motorola MBTS Base Radio 信任管理问题漏洞

The Motorola MBTS Base Radio is a walkie-talkie from Motorola USA. A security vulnerability exists in the Motorola MBTS Base Radio that stems from the acceptance of hard-coded backdoor passwords...

Remotely Stopping Polish Trains

Turns out that its easy to broadcast radio commands that force Polish trains to stop: …the saboteurs appear to have sent simple so-called "radio-stop" commands via radio frequency to the trains they targeted. Because the trains use a radio system that lacks encryption or authentication for those...

RE-Chat 跨站脚本漏洞

RE-Chat is the Chat module for radio-emergency.de. A cross-site scripting vulnerability exists in Doc2k RE-Chat version 1.0, which stems from the presence of an unknown function in jsonradio-emergency.de/rechat.js that results in cross-site scripting...

RIC Message Router 安全漏洞

The RIC Message Router is a component that transfers messages between RAN Radio Access Network Intelligent Controllers in 5G networks. A security vulnerability exists in RIC Message Router version v.4.9.0, which stems from a buffer overflow vulnerability that could allow a remote attacker to caus...

The Cheap Radio Hack That Disrupted Poland's Railway System

The sabotage of more than 20 trains in Poland by apparent supporters of Russia was carried out with a simple “radio-stop” command anyone could broadcast with $30 in equipment...

CVE-2023-32499

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Tony Zeoli, Tony Hayes Radio Station by netmix® – Manage and play your Show Schedule in WordPress! plugin = 2.4.0.9 versions...

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Tony Zeoli, Tony Hayes Radio Station by netmix® – Manage and play your Show Schedule in WordPress! plugin = 2.4.0.9 versions...

CVE-2023-32499 WordPress Radio Station Plugin <= 2.4.0.9 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Tony Zeoli, Tony Hayes Radio Station by netmix® – Manage and play your Show Schedule in WordPress! plugin = 2.4.0.9 versions...

CVE-2023-32499

CVE-2023-32499 corresponds to a WordPress plugin vulnerability in the Radio Station plugin by netmix (WordPress plugin: Radio Station). Connected sources confirm an unauthenticated Reflected Cross-Site Scripting (XSS) condition affecting version(s)

Radio Station < 2.5.0 - Reflected XSS

Description The plugin does not sanitise and escape some parameters before outputting them back in the page, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

WordPress plugin Radio Station 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

CVE-2023-39843

Missing encryption in the RFID tag of Suleve 5-in-1 Smart Door Lock v1.0 allows attackers to create a cloned tag via brief physical proximity to the original device...

CVE-2023-39842

Missing encryption in the RFID tag of Digoo DG-HAMB Smart Home Security System v1.0 allows attackers to create a cloned tag via brief physical proximity to the original device...

CVE-2023-39841

Missing encryption in the RFID tag of Etekcity 3-in-1 Smart Door Lock v1.0 allows attackers to create a cloned tag via brief physical proximity to the original device...

CVE-2023-39841

Missing encryption in the RFID tag of Etekcity 3-in-1 Smart Door Lock v1.0 allows attackers to create a cloned tag via brief physical proximity to the original device...

CVE-2023-39842

Missing encryption in the RFID tag of Digoo DG-HAMB Smart Home Security System v1.0 allows attackers to create a cloned tag via brief physical proximity to the original device...

Ash Allen Design RFID tag of Etekcity 3-in-1 Smart Door Lock 安全漏洞

Ash Allen Design RFID tag of Etekcity 3-in-1 Smart Door Lock is a 3-in-1 smart lock from Ash Allen Design. A security vulnerability exists in the Etekcity 3-in-1 Smart Door Lock v1.0 version. An attacker exploiting this vulnerability could create a cloned tag by briefly physically approaching the...