13888 matches found
CVE-2024-1662
The CVE-2024-1662 entry describes a Missing Authentication for Critical Function / Missing Authorization vulnerability in PORTY Smart Tech Technology Joint Stock Company PowerBank Application, allowing retrieval of embedded sensitive data in versions before 2.02. Affected component is the PowerBa...
CVE-2024-1662 Information Disclosure in Porty's PowerBank
Missing Authentication for Critical Function, Missing Authorization vulnerability in PORTY Smart Tech Technology Joint Stock Company PowerBank Application allows Retrieve Embedded Sensitive Data. This issue affects PowerBank Application: before 2.02...
Understanding HyperCycle’s HyperShare Smart Contract Feature
HyperCycle enhances AI safety and efficiency with cryptographic proofs and peer-to-peer nodes. HyperShare supports decentralized governance and income…...
CVE-2024-20874
Improper access control vulnerability in SmartManagerCN prior to SMR Jun-2024 Release 1 allows local attackers to launch privileged activities...
The vulnerability of the Microprogramming Software of the Alpha5 Smart Service System, related to the execution of operations outside the buffer in memory, allows a hacker to execute arbitrary code.
The vulnerability of the Microprogrammed Software of the Alpha5 Smart service system relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code by loading specially created malicious C5V files...
(Pwn2Own) Sonos Era 100 SMB2 Message Handling Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Sonos Era 100 smart speakers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of SMB2 messages. The issue results from the...
Fuji Electric Alpha5 C5V File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Alpha5 Smart. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
json-smart: Uncontrolled Resource Consumption vulnerability in json-smart (Resource Exhaustion)
A flaw was found in the json-smart package. This security flaw occurs when reaching a ‘‘ or ‘‘ character in the JSON input, and the code parses an array or an object, respectively. The 3PP does not have any limit to the nesting of such arrays or objects. Since nested arrays and objects are parsed...
CVE-2022-48681
Some Huawei smart speakers have a memory overflow vulnerability. Successful exploitation of this vulnerability may cause certain functions to fail...
CVE-2022-48681
Some Huawei smart speakers have a memory overflow vulnerability. Successful exploitation of this vulnerability may cause certain functions to fail...
CVE-2022-48681
Some Huawei smart speakers have a memory overflow vulnerability. Successful exploitation of this vulnerability may cause certain functions to fail...
CVE-2022-48681
The CVE CVE-2022-48681 affects some Huawei smart speakers and is described as a memory overflow vulnerability. Huawei PSIRT advisory HWPSIRT-2022-52860 confirms this CVE ID and notes that exploitation may cause certain functions to fail. The connected documents do not provide specific affected mo...
PT-2024-11773 · Huawei · Huawei Smart Speakers
Name of the Vulnerable Software and Affected Versions: Huawei smart speakers affected versions not specified Description: The issue is related to a memory overflow, which may cause certain functions to fail upon successful exploitation. Recommendations: At the moment, there is no information abou...
Huawei smart speakers 安全漏洞
Huawei smart speakers are a series of smart speakers from Chinese company Huawei Huawei. A security vulnerability exists in Huawei smart speakers, which stems from the presence of a memory overflow that may cause some functions to fail...
SherlockChain - A Streamlined AI Analysis Framework For Solidity, Vyper And Plutus Contracts
SherlockChain is a powerful smart contract analysis framework that combines the capabilities of the renowned Slither tool with advanced AI-powered features. Developed by a team of security experts and AI researchers, SherlockChain offers unparalleled insights and vulnerability detection for...
Fedora: Security Advisory for python-tqdm (FEDORA-2024-24e4bba70f)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory for rust-sd (FEDORA-2024-ce2936b568)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2024-34240
QDOCS Smart School 7.0.0 is vulnerable to Cross Site Scripting XSS resulting in arbitrary code execution in admin functions related to adding or updating records...
