2391 matches found
PT-2023-19968 · Nokia · Nokia Airscale Asika Single Ran
Name of the Vulnerable Software and Affected Versions: NOKIA Airscale ASIKA Single RAN devices versions prior to 21B Description: An issue was discovered where Nokia Single RAN commissioning procedures do not change the default SSH public/private key values that are specific to a network operator...
Nokia Airscale ASIKA Single RAN 路径遍历漏洞
Nokia Airscale ASIKA Single RAN is an application for end-to-end use by Nokia of Finland. A security vulnerability exists in NOKIA Airscale ASIKA Single RAN prior to version 21B. An attacker can exploit the vulnerability to access files and directories stored outside the web root folder...
MAL-2023-364 Malicious code in fc-radio-button (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83481051c5331447023a047dfc4f6f747cf968f9cbe6c214bd3baa3aa57c0348 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in fc-radio-button (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83481051c5331447023a047dfc4f6f747cf968f9cbe6c214bd3baa3aa57c0348 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MediaTek 芯片 缓冲区错误漏洞
MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in the ril module of the MediaTek chips, which is caused by a lack of boundary checking and may allow out-of-bounds reads...
MediaTek 芯片 缓冲区错误漏洞
MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in the ril module of the MediaTek chips, which is caused by a lack of boundary checking and may allow out-of-bounds reads...
stquentin-radio.com Cross Site Scripting vulnerability OBB-3384309
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
antiqueradio.org Cross Site Scripting vulnerability OBB-3364569
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Kerui W18 Alarm 安全漏洞
The Kerui W18 Alarm System is a stable and reliable high-end GSM and WIFI dual network alarm system from Kerui. A security vulnerability exists in the Kerui W18 Alarm System v1.0 firmware version, which originated from a vulnerability that allows an attacker to gain full access to the system, and...
Digoo DG-HAMB Smart Home Security System 安全漏洞
The Digoo DG-HAMB Smart Home Security System is a suite of smart home security alarm systems from Digoo. A security vulnerability exists in the Digoo DG-HAMB Smart Home Security System v1.0 firmware version, which stems from a vulnerability that allows an attacker to gain full access, where the...
Screen SFT DAB 600/C - Authentication Bypass Account Creation
!/usr/bin/env python3 Exploit Title: Screen SFT DAB 600/C - Authentication Bypass Account Creation Exploit Author: LiquidWorm Vendor: DB Elettronica Telecomunicazioni SpA Product web page: https://www.screen.it | https://www.dbbroadcast.com...
PT-2023-24266 · Nissan · Nissan Sylphy Classic
Name of the Vulnerable Software and Affected Versions: Nissan Sylphy Classic version 2021 Description: The remote keyfob system sends the same RF signal for each door-open request, allowing for a replay attack. The vendor claims this issue cannot be reproduced with genuine Nissan parts, citing a...
Screen SFT DAB 600/C Unauthenticated Information Disclosure
Screen SFT DAB 600/C Unauthenticated Information Disclosure userManager.cgx Vendor: DB Elettronica Telecomunicazioni SpA Product web page: https://www.screen.it | https://www.dbbroadcast.com https://www.dbbroadcast.com/products/radio/sft-dab-series-compact-air/ Affected version: Firmware: 1.9.3...
Screen SFT DAB 600/C Authentication Bypass Erase Account Exploit
Summary Screen's new radio DAB Transmitter is reaching the highest technology level in both Digital Signal Processing and RF domain. SFT DAB Series - Compact Radio DAB Transmitter - Air. Thanks to the digital adaptive precorrection and configuatio flexibility, the Hot Swap System technology, the...
WordPress Radio Station Plugin <= 2.4.0.9 is vulnerable to Cross Site Scripting (XSS)
Software Radio Station Type Plugin Vulnerable versions = 2.4.0.9 Fixed in 2.5.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-32499 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 99046d0099f2 Credits minhtuanact...
radio-menq.am Cross Site Scripting vulnerability OBB-3310795
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
radio-data.de Cross Site Scripting vulnerability OBB-3268276
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
radio-busch.de Cross Site Scripting vulnerability OBB-3268275
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
radio-rai.ru Cross Site Scripting vulnerability OBB-3266730
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Sielco PolyEco Digital FM Transmitter 2.0.6 - Radio Data System POST Manipulation Vulnerability
Exploit Title: Sielco PolyEco Digital FM Transmitter 2.0.6 - Radio Data System POST Manipulation Exploit Author: LiquidWorm Vendor: Sielco S.r.l Product web page: https://www.sielco.org Affected version: PolyEco1000 CPU:2.0.6 FPGA:10.19 PolyEco1000 CPU:1.9.4 FPGA:10.19 PolyEco1000 CPU:1.9.3...