14042 matches found
Shining a Light on SolarCity: Practical Exploitation of the X2e IoT Device (Part One)
In 2019, Mandiant’s Red Team discovered a series of vulnerabilities present within Digi International’s ConnectPort X2e device, which allows for remote code execution as a privileged user. Specifically, Mandiant’s research focused on SolarCity’s now owned by Tesla rebranded ConnectPort X2e device...
Unpatched ShareIT Android App Flaw Could Let Hackers Inject Malware
Multiple unpatched vulnerabilities have been discovered in SHAREit, a popular app with over one billion downloads, that could be abused to leak a user's sensitive data, execute arbitrary code, and possibly lead to remote code execution. The findings come from cybersecurity firm Trend Micro's...
The vulnerability in the web interface of the Cisco Smart Software Manager On-Prem administration tool allows a perpetrator to execute arbitrary commands.
The vulnerability of the web interface of the Cisco Smart Software Manager On-Prem administration tool is related to insufficient validation of entered data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with elevated privileges remotely...
The vulnerability in the web interface of the Cisco Smart Software Manager On-Prem administration tool allows a perpetrator to execute arbitrary commands.
The vulnerability of the web interface of the Cisco Smart Software Manager On-Prem administration tool is related to insufficient validation of entered data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with root privileges remotely...
The vulnerability in the web interface of the Cisco Smart Software Manager On-Prem software management tool allows a perpetrator to redirect users to any desired website.
The vulnerability in the web interface of the Cisco Smart Software Manager On-Prem software management tool relates to the redirection of URLs to an unreliable website. Exploiting this vulnerability allows a malicious actor to remotely redirect users to any desired website...
The vulnerability in the web interface of the Cisco Smart Software Manager On-Prem administration tool allows a perpetrator to execute arbitrary commands.
The vulnerability of the web interface of the Cisco Smart Software Manager On-Prem administration tool is related to insufficient validation of entered data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with elevated privileges remotely...
A week in security (February 1 – February 7)
Last week on Malwarebytes Labs, we dug into a load of security events. We first peered into how Fonix ransomware was giving up the ghost, swearing off a life of crime and even apologizing for past actions. We looked at a credit card skimmer that found opportunity in the latest Magento 1 hacking...
Unauthorized Access Vulnerability in 360 Smart Camera PTZ AI Edition Standard Model AP2C
360 Smart Camera PTZ AI Edition Standard Model AP2C is a device under the 360 Smart Home platform, which can help the owner to realize real-time monitoring of the home situation. 360 Smart Camera PTZ AI Edition Standard Model AP2C suffers from an unauthorized access vulnerability, which can be...
The vulnerability in the web interface of the Cisco Smart Software Manager On-Prem administration tool allows a perpetrator to execute arbitrary commands.
The vulnerability of the web interface of the Cisco Smart Software Manager On-Prem administration tool is related to insufficient validation of entered data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with root privileges remotely...
The vulnerability in the web interface of the Cisco Smart Software Manager On-Prem administration tool allows a perpetrator to execute arbitrary commands.
The vulnerability of the web interface of the Cisco Smart Software Manager On-Prem administration tool is related to insufficient validation of entered data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with elevated privileges remotely...
Unauthorized Access Vulnerability in Xiao Xing Look Smart Camera
Xiao Xing Look Smart Camera is an important device under the ZTE Smart Home platform, which can help the owner to realize real-time monitoring of the home situation. Unauthorized access vulnerability exists in Xiao Xing Look Smart Camera, which can be exploited by attackers to obtain sensitive...
GNU Binutils 后置链接漏洞
GNU Binutils GNU Binary Utilities or binutils is a set of programming language utility programs developed by the GNU community. The programs are primarily designed to work with target files in a variety of formats, and provide linkers, assemblers, and other tools for target files and archives. An...
Denial of Service Vulnerability in Meijer's Meijer App
Midea Home App is the official app of Midea Group for consumers, and it is also the smart home appliance management app based on M-Smart system. A denial of service vulnerability exists in Midea Home App, which can be exploited by attackers to cause the app to stop running...
Huawei AIS-BW80H-00 输入验证错误漏洞
Huawei AIS-BW80H-00 is a smart speaker device from Huawei China. Huawei AIS-BW80H-00 is vulnerable to an input validation error, which could be exploited by an attacker to load a crafted software package onto the device...
ZOHO ManageEngine OpManager Remote Code Execution Vulnerability
ZOHO ManageEngine OpManager is a network, server and virtualization monitoring software from ZOHO, Inc. A security vulnerability exists in Zoho ManageEngine OpManager Stable build before 125203, which can be exploited by attackers to remotely execute code via the Smart Update Manager SUM servlet...
Nespresso smart cards can be exploited for unlimited coffee
By Habiba Rashid Let us imagine that your Nespresso smart card had no limit to how much coffee you can buy with it. A little too convenient, isn’t it? This is a post from HackRead.com Read the original post: Nespresso smart cards can be exploited for unlimited coffee...
Nespresso Smart Cards Brewed with Weak Security
Researchers have demonstrated how to outsmart Nespresso Pro machines that use certain smart cards, hacking them to dispense coffee on-demand. Nespresso produces a range of coffees and machines for personal and professional use. Some of the commercial machines accept Mifare Classic stored-value...
CVE-2020-28653
Zoho ManageEngine OpManager Stable build before 125203 and Released build before 125233 allows Remote Code Execution via the Smart Update Manager SUM servlet...
