14077 matches found
Stack overflow
An exploitable stack-based buffer overflow vulnerability exists in the samsungWifiScan callback notification of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17. The video-core process incorrectly handles the answer received from a smart camera...
CVE-2018-3867
An exploitable stack-based buffer overflow vulnerability exists in the samsungWifiScan callback notification of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17. The video-core process incorrectly handles the answer received from a smart camera...
CVE-2018-3867
An exploitable stack-based buffer overflow vulnerability exists in the samsungWifiScan callback notification of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17. The video-core process incorrectly handles the answer received from a smart camera...
CVE-2018-3867
CVE-2018-3867 describes a stack-based buffer overflow in Samsung SmartThings Hub (STH-ETH-250) video-core HTTP server. The vulnerability exists in the samsungWifiScan callback handling during camera discovery, where the hub constructs a POST to a callback URL using an unconstrained camera respons...
Belkin Wemo Insight Smart Plug Stack Buffer Overflow Vulnerability
Belkin Wemo Insight Smart Plug is a smart plug device from Belkin USA. A stack buffer overflow vulnerability exists in the libUPnPHndlr.so file in the Belkin Wemo Insight Smart Plug. A remote attacker can exploit this vulnerability to bypass local security protections with the help of specially...
Arbitrary User Password Recovery Vulnerability in Smart Campus Platforms
Smart Campus Platform is a set of smart campus system developed by Guangdong ZhiNai Internet of Things Technology Co. The system involves a number of functional modules such as teaching scheduling, class transfer, class time statistics, teacher leave, student big data management platform,...
Domoticz Detection
Checks if Domoticz Smart Home Software is running on the target host. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...
Security Advisory - FRP Bypass Vulnerability in Huawei Smart Phones
There is Factory Reset Protection FRP bypass security vulnerability in some Huawei smart phones. When re-configuring the mobile phone using the factory reset protection FRP function, an attacker can login the configuration flow by Gaode Map and can perform some operations to update the Google...
Belkin IoT Smart Plug Flaw Allows Remote Code Execution in Smart Homes
A vulnerability in a popular Wi-Fi–connected electric outlet for smart homes would allow a remote attacker to take over smart TVs and other devices, as well as execute code – potentially exposing tens of thousands of consumers to cryptomining, ransomware, information disclosure, botnet enslavemen...
CVE-2018-6692 Wemo Insight Smart Plug - Remote Code Execution vulnerability
Stack-based Buffer Overflow vulnerability in libUPnPHndlr.so in Belkin Wemo Insight Smart Plug allows remote attackers to bypass local security protection via a crafted HTTP post packet...
CVE-2018-6692
CVE-2018-6692 describes a stack-based buffer overflow in Belkin’s Wemo Insight Smart Plug, specifically in the library libUPnPHndlr.so. The flaw can be triggered by crafting an HTTP POST to UPnP endpoints (notably through the EnergyPerUnitCostVersion field inside a SOAP/UPnP payload), leading to ...
CVE-2018-14079
Wi2be SMART HP WMT R1.2.20201400922 allows unauthorized remote attackers to obtain sensitive information via /Status/SystemStatusRpm.esp...
CVE-2018-14078
Wi2be SMART HP WMT R1.2.20201400922 allows unauthorized remote attackers to reset the admin password via the /ConfigWizard/ChangePwd.esp?2admin URL Attackers can login using the "admin" username with password "admin" after a successful attack...
CVE-2018-14078
Wi2be SMART HP WMT R1.2.20201400922 allows unauthorized remote attackers to reset the admin password via the /ConfigWizard/ChangePwd.esp?2admin URL Attackers can login using the "admin" username with password "admin" after a successful attack...
CVE-2018-14079
Wi2be SMART HP WMT R1.2.20201400922 allows unauthorized remote attackers to obtain sensitive information via /Status/SystemStatusRpm.esp...
CVE-2018-14077
Wi2be SMART HP WMT R1.2.20201400922 allows unauthorized remote attackers to backup the device configuration via a direct request to /Maintenance/configfile.cfg...
CVE-2018-14077
Wi2be SMART HP WMT R1.2.20201400922 allows unauthorized remote attackers to backup the device configuration via a direct request to /Maintenance/configfile.cfg...
Default credentials
Wi2be SMART HP WMT R1.2.20201400922 allows unauthorized remote attackers to reset the admin password via the /ConfigWizard/ChangePwd.esp?2admin URL Attackers can login using the "admin" username with password "admin" after a successful attack...