13896 matches found
CVE-2024-46040
IoT Haat Smart Plug IH-IN-16A-S IH-IN-16A-S v5.16.1 suffers from Insufficient Session Expiration. The lack of validation of the authentication token at the IoT Haat during the Access Point Pairing mode leads the attacker to replay the Wi-Fi packets and forcefully turn off the access point after t...
IoT Haat Smart Plug IH-IN-16A-S 安全漏洞
IoT Haat Smart Plug IH-IN-16A-S is a smart plug from IoT Haat. A security vulnerability exists in IoT Haat Smart Plug IH-IN-16A-S version v5.16.1, which stems from vulnerability to capture replay authentication bypass attacks...
CVE-2024-46040
IoT Haat Smart Plug IH-IN-16A-S IH-IN-16A-S v5.16.1 suffers from Insufficient Session Expiration. The lack of validation of the authentication token at the IoT Haat during the Access Point Pairing mode leads the attacker to replay the Wi-Fi packets and forcefully turn off the access point after t...
IoT Haat Smart Plug IH-IN-16A-S 安全漏洞
IoT Haat Smart Plug IH-IN-16A-S is a smart plug from IoT Haat. A security vulnerability exists in IoT Haat Smart Plug IH-IN-16A-S version v5.16.1, which stems from the presence of a session expiration insufficiency issue and lack of validation of authentication tokens, which could lead to an...
CVE-2024-46041
IoT Haat Smart Plug IH-IN-16A-S v5.16.1 is affected by CVE-2024-46041: an Authentication Bypass via capture-replay during Provisioning (Access Point pairing). Public sources (NVD/Red Hat/CNNVD) confirm the product and version, describing an authentication-token replay attack that can bypass login...
CVE-2024-9554
A vulnerability classified as problematic was found in Sovell Smart Canteen System up to 3.0.7303.30513. Affected by this vulnerability is the function CheckETCheckPwdz201 of the file suanfa.py of the component Password Reset Handler. The manipulation leads to authorization bypass. The attack can...
CVE-2024-9554 Sovell Smart Canteen System Password Reset suanfa.py Check_ET_CheckPwdz201 authorization
A vulnerability classified as problematic was found in Sovell Smart Canteen System up to 3.0.7303.30513. Affected by this vulnerability is the function CheckETCheckPwdz201 of the file suanfa.py of the component Password Reset Handler. The manipulation leads to authorization bypass. The attack can...
CVE-2024-9554
Sovell Smart Canteen System (up to 3.0.7303.30513) is affected by a vulnerability in the Password Reset Handler. The issue resides in the function Check_ET_CheckPwdz201 of suanfa.py and allows authorization bypass. It can be exploited remotely, with attack complexity described as high; exploitati...
CVE-2024-9554 Sovell Smart Canteen System Password Reset suanfa.py Check_ET_CheckPwdz201 authorization
A vulnerability classified as problematic was found in Sovell Smart Canteen System up to 3.0.7303.30513. Affected by this vulnerability is the function CheckETCheckPwdz201 of the file suanfa.py of the component Password Reset Handler. The manipulation leads to authorization bypass. The attack can...
The FBI Still Hasn’t Cracked NYC Mayor Eric Adams’ Phone
Plus: Harvard students pack Meta’s smart glasses with privacy-invading face-recognition tech, Microsoft and the DOJ seize Russian hackers’ domains, and more...
CVE-2024-9204
The Smart Custom 404 Error Page plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via $SERVER'REQUESTURI' in all versions up to, and including, 11.4.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...
CVE-2024-9204
The Smart Custom 404 Error Page plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via $SERVER'REQUESTURI' in all versions up to, and including, 11.4.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...
WordPress Smart Custom 404 Error Page plugin <= 11.4.7 - Reflected Cross-Site Scripting vulnerability
Reflected Cross-Site Scripting vulnerability discovered by Webbernaut in WordPress Plugin Smart Custom 404 Error Page versions = 11.4.7...
WordPress plugin Smart Custom 404 Error Page 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists i...
Not Black Mirror: Meta’s smart glasses used to reveal someone’s identity just by looking at them
Like something out of Black Mirror, two students have demonstrated a way to use smart glasses and facial recognition technology to immediately reveal people’s names, phone numbers, and addresses. The Harvard students have dubbed the system I-XRAY and it works like this: When you look at someone’s...
PT-2024-39487 · WordPress · Smart Custom 404 Error Page
Name of the Vulnerable Software and Affected Versions: The Smart Custom 404 Error Page plugin for WordPress versions up to, and including, 11.4.7 Description: The issue is related to Reflected Cross-Site Scripting via the $ SERVER'REQUEST URI' variable, caused by insufficient input sanitization a...
CVE-2024-41999
Smart-tab Android app installed April 2023 or earlier contains an active debug code vulnerability. If this vulnerability is exploited, an attacker with physical access to the device may exploit the debug function to gain access to the OS functions, escalate the privilege, change the device's...
CVE-2024-42496
Smart-tab Android app installed April 2023 or earlier contains an issue with plaintext storage of a password. If this vulnerability is exploited, an attacker with physical access to the device may retrieve the credential information and spoof the device to access the related external service...
CVE-2024-42496
Smart-tab Android app installed April 2023 or earlier contains an issue with plaintext storage of a password. If this vulnerability is exploited, an attacker with physical access to the device may retrieve the credential information and spoof the device to access the related external service...
CVE-2024-42496
Smart-tab Android app (affected component: plaintext storage of a password) is vulnerable to credential exposure if a device is physically accessed. The CVE description and connected sources indicate that storing passwords plaintext can allow an attacker with physical access to retrieve credentia...