Radio Thermostat CT50 and CT80 Local HTTP API Unauthorized Access Vulnerability

Radio Thermostat CT50 and CT80 are both touchscreen thermostat products from Radio Thermostat USA. This product manages the heating and cooling systems in a home.Local HTTP API is one of the local HTTP interfaces. A security vulnerability exists in the Local HTTP API in Radio Thermostat CT50 and...

CVE-2018-11315

The Local HTTP API in Radio Thermostat CT50 and CT80 1.04.84 and below products allows unauthorized access via a DNS rebinding attack. This can result in remote device temperature control, as demonstrated by a tstat theat request that accesses a device purchased in the Spring of 2018, and sets a...

Information disclosure

The Local HTTP API in Radio Thermostat CT50 and CT80 1.04.84 and below products allows unauthorized access via a DNS rebinding attack. This can result in remote device temperature control, as demonstrated by a tstat theat request that accesses a device purchased in the Spring of 2018, and sets a...

CVE-2018-11315

CVE-2018-11315 affects Radio Thermostat CT50/CT80 Local HTTP API (firmware 1.04.84 and earlier). The vulnerability arises from unauthorized access enabled by DNS rebinding, enabling a remote attacker to issue commands via the Local HTTP API and, as described, potentially control device temperatur...

CVE-2018-11315

The Local HTTP API in Radio Thermostat CT50 and CT80 1.04.84 and below products allows unauthorized access via a DNS rebinding attack. This can result in remote device temperature control, as demonstrated by a tstat theat request that accesses a device purchased in the Spring of 2018, and sets a...

The vulnerability of the Qualcomm QCRIL component in the Android operating system allows a hacker to trigger buffer overflows.

The vulnerability of the Qualcomm QCRIL component in the Android operating system is caused by a numerical overflow. Exploiting this vulnerability allows a remote attacker to trigger the buffer overflow...

openthread/radio-receive-done-fuzzer: Index-out-of-bounds in ot::RouterTable::UpdateAllocation

Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=5160541604544512 Project: openthread Fuzzer: libFuzzeropenthreadradio-receive-done-fuzzer Fuzz target binary: radio-receive-done-fuzzer Job Type: libfuzzerubsanopenthread Platform Id: linux...

tele-radio.com XSS vulnerability

Open Bug Bounty ID: OBB-616443 Description| Value ---|--- Affected Website:| tele-radio.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

radio-frei.de XSS vulnerability

Open Bug Bounty ID: OBB-615180 Description| Value ---|--- Affected Website:| radio-frei.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Google Android Qualcomm Component Elevation of Privilege Vulnerability (CNVD-2018-10686)

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An elevation of privilege vulnerability exists in the Google Android Qualcomm Radio internet packet accelerator component, which can be exploited by an attacker to elevat...

yiddishradioproject.org XSS vulnerability

Open Bug Bounty ID: OBB-611604 Description| Value ---|--- Affected Website:| yiddishradioproject.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2017-12712

The authentication algorithm in Abbott Laboratories pacemakers manufactured prior to Aug 28, 2017, which involves an authentication key and time stamp, can be compromised or bypassed, which may allow a nearby attacker to issue unauthorized commands to the pacemaker via RF communications. CVSS v3...

radio-rfe.com XSS vulnerability

Open Bug Bounty ID: OBB-606746 Description| Value ---|--- Affected Website:| radio-rfe.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Android Radio Driver Information Disclosure Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA.Radio driver is one of the radio drivers. An information disclosure vulnerability exists in the Radio driver in versions of Android prior to 2017-08-05. An attacker can exploit the...

Google Android has an unspecified vulnerability (CNVD-2018-09702)

Android is a Linux-based open-source operating system jointly developed by Google and the Open Handheld Alliance OHA, and Qualcomm MSM8909W is a central processing unit CPU product of Qualcomm. A security vulnerability exists in RIL in versions of Android prior to 2018-04-05. No detailed...

trinidadradiostations.net XSS vulnerability

Open Bug Bounty ID: OBB-603718 Description| Value ---|--- Affected Website:| trinidadradiostations.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Hijacking Emergency Sirens

Turns out it's easy to hijack emergency sirens with a radio transmitter...

ATI Systems Emergency Mass Notification Systems False Alert Vulnerability

ATI Systems designs, builds and installs mass notification systems for the community, campus, industrial and military markets.Emergency Mass Notification Systems is an emergency mass notification system. ATI Systems Emergency Mass Notification Systems Unauthorized Operation Vulnerability An...

ATI Systems Emergency Mass Notification Systems False Alert Vulnerability (CNVD-2018-07875)

ATI Systems designs, builds and installs mass notification systems for the community, campus, industrial and military markets.Emergency Mass Notification Systems is an emergency mass notification system. An unauthorized operation vulnerability exists in ATI Systems Emergency Mass Notification...

Vulnerability in San Francisco’s Public Safety Warning Sirens Fixed

Public emergency alert sirens, designed to both warn the masses of a crisis and direct them to safety, can be compromised by attackers who can take control of the system to broadcast false alarms. That is the conclusion of researchers at radio security firm Bastille, who released details of its...