Input validation

Improper input validation vulnerability in Tizen bootloader prior to Firmware update JUL-2021 Release allows arbitrary code execution using recovery partition in wireless firmware download mode...

CVE-2021-25435: Improper Input Validation

Improper input validation vulnerability in Tizen bootloader prior to Firmware update JUL-2021 Release allows arbitrary code execution using recovery partition in wireless firmware download mode...

Samsung Tizen 输入验证错误漏洞

Samsung Tizen is an open-source Linux-based mobile operating system from Samsung, South Korea, for smartphones, tablets, smartwatches, netbooks, in-vehicle messaging and entertainment devices, and smart TVs. A code injection vulnerability exists in Samsung Tizen, which stems from a faulty input...

PT-2021-16626

Name of the Vulnerable Software and Affected Versions: Tizen bootloader versions prior to Firmware update JUL-2021 Release Description: The issue is related to improper input validation in the Tizen bootloader, which allows for arbitrary code execution using the recovery partition when the device...

CVE-2019-17102

An exploitable command execution vulnerability exists in the recovery partition of Bitdefender BOX 2, version 2.0.1.91. The API method /api/updatesetup does not perform firmware signature checks atomically, leading to an exploitable race condition TOCTTOU that allows arbitrary execution of system...

CVE-2019-17102 Bitdefender BOX v2 bootstrap update_setup command execution vulnerability (VA-2226)

An exploitable command execution vulnerability exists in the recovery partition of Bitdefender BOX 2, version 2.0.1.91. The API method /api/updatesetup does not perform firmware signature checks atomically, leading to an exploitable race condition TOCTTOU that allows arbitrary execution of system...

PT-2020-9874

Name of the Vulnerable Software and Affected Versions Bitdefender BOX 2 versions prior to 2.1.47.36 Description An exploitable command execution issue exists in the recovery partition due to a race condition in the /api/update setup API endpoint. This allows arbitrary execution of system commands...

CVE-2019-17102: Improper Resource Locking

An exploitable command execution vulnerability exists in the recovery partition of Bitdefender BOX 2, version 2.0.1.91. The API method /api/updatesetup does not perform firmware signature checks atomically, leading to an exploitable race condition TOCTTOU that allows arbitrary execution of system...

Bitdefender BOX 2 bootstrap update_setup command execution vulnerability

Summary An exploitable command execution vulnerability exists in the recovery partition of Bitdefender BOX 2, version 2.0.1.91. The API method /api/updatesetup does not perform firmware signature checks atomically, leading to an exploitable race condition TOCTTOU that allows arbitrary execution o...

Veeam Agent – Windows recovery image file not found

This article includes steps that advise executing commands using Diskpart, which has no confirmation system to prevent mistakes. Failure to understand how to use Diskpart or typos may cause issues. Please take your time and double-check each command is correct for your environment before executin...