2500 matches found
CVE-2021-33533
In Weidmueller Industrial WLAN devices in multiple versions an exploitable command injection vulnerability exists in the iwwebs functionality. A specially crafted iwserverip parameter can cause user input to be reflected in a subsequent iwsystem call, resulting in remote control over the device. ...
CVE-2020-7862
A vulnerability in agent program of HelpU remote control solution could allow an authenticated remote attacker to execute arbitrary commands This vulnerability is due to insufficient input santization when communicating customer process...
Advantech WebAccess/SCADA Open Redirect Vulnerability
Advantech WebAccess/SCADA is a suite of SCADA software from Advantech based on a browser architecture. The software supports dynamic graphical displays and real-time data control, and provides the ability to remotely control and manage automation equipment. An open redirection vulnerability exist...
Weak Password Vulnerability in SuperMicro IPMI/iKVM
Supermicro IPMI/iKVM is a management tool developed by Supermicro Computer Corporation for its on-board IPMI card, which can be used to boot up the system remotely, enter the BIOS, etc. for system control. Supermicro IPMI/iKVM suffers from a weak password vulnerability that can be exploited by an...
多款Hewlett Packard Enterprise产品跨站脚本漏洞
Hewlett Packard Enterprise Integrated Lights-Out 4 iLO 4 and Hewlett Packard Enterprise Integrated Lights-Out 5 iLO 5 are both products of Hewlett Packard Enterprise. Hewlett Packard Enterprise Integrated Lights-Out 4 iLO 4 and Hewlett Packard Enterprise Integrated Lights-Out 5 iLO 5 are both...
多款Hewlett Packard Enterprise产品跨站脚本漏洞
Hewlett Packard Enterprise Integrated Lights-Out 4 iLO 4, etc. are products of Hewlett Packard Enterprise. Hewlett Packard Enterprise Integrated Lights-Out 4 is a remote control solution. Hewlett Packard Enterprise Integrated Lights-Out 5 iLO 5 is a remote control solution. Hewlett Packard...
Stalkerware Apps Riddled with Security Bugs
Android stalkerware apps – used to surreptitiously track people’s movements and digital activities – turn out to themselves be rife with security holes that put victims in even danger. Stalkerware can track the GPS location of a victim’s device, record conversations, capture images and snoop on...
6 Unpatched Flaws Disclosed in Remote Mouse App for Android and iOS
As many as six zero-days have been uncovered in an application called Remote Mouse, allowing a remote attacker to achieve full code execution without any user interaction. The unpatched flaws, collectively named 'Mouse Trap,' were disclosed on Wednesday by security researcher Axel Persinger, who...
CVE-2021-30168
The sensitive information of webcam device is not properly protected. Remote attackers can unauthentically grant administrator’s credential and further control the devices...
Design/Logic Flaw
The sensitive information of webcam device is not properly protected. Remote attackers can unauthentically grant administrator’s credential and further control the devices...
CVE-2020-22001
HomeAutomation 3.3.2 suffers from an authentication bypass vulnerability when spoofing client IP address using the X-Forwarded-For header with the local loopback IP address value allowing remote control of the smart home solution...
CVE-2020-22001
HomeAutomation 3.3.2 suffers from an authentication bypass vulnerability when spoofing client IP address using the X-Forwarded-For header with the local loopback IP address value allowing remote control of the smart home solution...
Authentication flaw
HomeAutomation 3.3.2 suffers from an authentication bypass vulnerability when spoofing client IP address using the X-Forwarded-For header with the local loopback IP address value allowing remote control of the smart home solution...
CVE-2020-22001
HomeAutomation 3.3.2 suffers from an authentication bypass vulnerability when spoofing client IP address using the X-Forwarded-For header with the local loopback IP address value allowing remote control of the smart home solution...
PT-2021-10716 · Unknown · Homeautomation
Name of the Vulnerable Software and Affected Versions: HomeAutomation version 3.3.2 Description: The issue allows for an authentication bypass when the X-Forwarded-For header is spoofed with the local IP address, enabling remote control of the smart home solution. Recommendations: For...
Subreddit Home Automation 授权问题漏洞
Subreddit Home Automation is an automation device for the Subreddit community. An automated electric light. Subreddit Home Automation 3.3.2 suffers from a security vulnerability that stems from an authentication bypass vulnerability when spoofing a client IP address using the X-Forwarded-For head...
CVE-2020-22001: Authentication Bypass by Spoofing
HomeAutomation 3.3.2 suffers from an authentication bypass vulnerability when spoofing client IP address using the X-Forwarded-For header with the local loopback IP address value allowing remote control of the smart home solution...
Helpcom Authorization Issues Vulnerability
Helpcom is an application from the Korean company Helpcom. It provides remote control services. Helpcom suffers from an authorization problem vulnerability that can be exploited by an unauthenticated attacker to execute arbitrary commands...
Helpcom 授权问题漏洞
Helpcom is an application from the Korean company Helpcom. It provides remote control services. Helpcom suffers from an authorization problem vulnerability that can be exploited by an unauthenticated attacker to execute arbitrary commands...
SUSE: Security Advisory (SUSE-SU-2018:0455-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...