CVE-2019-5260

The CVE-2019-5260 issue affects Huawei/Honor devices: HUAWEI Y9 2019 and Honor View 20, caused by insufficient input validation when parsing certain TD-SCDMA messages, allowing a rogue base station to trigger a DoS via an infinite loop and device reboot. Public details from multiple sources confi...

CVE-2019-5260

Huawei smartphones HUAWEI Y9 2019 and Honor View 20 have a denial of service vulnerability. Due to insufficient input validation of specific value when parsing the messages, an attacker may send specially crafted TD-SCDMA messages from a rogue base station to the affected devices to exploit this...

CVE-2019-5260: Improper Input Validation

Huawei smartphones HUAWEI Y9 2019 and Honor View 20 have a denial of service vulnerability. Due to insufficient input validation of specific value when parsing the messages, an attacker may send specially crafted TD-SCDMA messages from a rogue base station to the affected devices to exploit this...

PT-2019-17542

Name of the Vulnerable Software and Affected Versions Huawei smartphones HUAWEI Y9 2019 and Honor View 20 affected versions not specified Description The issue is related to a denial of service vulnerability. It occurs due to insufficient input validation of a specific value when parsing messages...

Security Advisory - Denial of Service Vulnerability on Some Huawei Smartphones

There is a denial of service vulnerability on some Huawei smartphones. Due to insufficient input validation of specific value when parsing the messages, an attacker may send specially crafted TD-SCDMA messages from a rogue base station to the affected devices to exploit this vulnerability...

PT-2019-7765

Name of the Vulnerable Software and Affected Versions Newspaper theme versions prior to 6.7.2 Description The issue is related to a lack of options access control via td ajax update panel. Recommendations For versions prior to 6.7.2, update to version 6.7.2 or later to resolve the issue...

PT-2019-8547

Name of the Vulnerable Software and Affected Versions Newspaper theme versions prior to 6.7.2 Description The issue concerns script injection via the td adsheader variable to the "admin-ajax.php" endpoint. This allows for malicious script execution. Recommendations For versions prior to 6.7.2,...

PT-2019-4372

Name of the Vulnerable Software and Affected Versions Huawei smartphones versions earlier than 9.1.0.333C00E333R2P1T8 Huawei Mate 20 versions earlier than 9.1.0.131C00E131R3P1 Huawei Mate 20 Pro versions earlier than 9.1.0.310C185E10R2P1 Huawei Mate 20 RS versions earlier than 9.1.0.135C786E133R3...

Leaky Amazon S3 Buckets Expose Data of Netflix, TD Bank

Three publicly-accessible cloud storage buckets from data management company Attunity leaked more than a terabyte of data from its top Fortune 100 customers – including internal business documents, system passwords, sensitive employee information. Israel-based Attunity, which was acquired by Qlik...

TP-Link TD-W8961ND Cross-Site Scripting Vulnerability

The TP-Link TD-W8961ND is a wireless router from China P&L TP-LINK. A cross-site scripting vulnerability exists in the TP-Link TD-W8961ND, which can be exploited by a remote attacker to inject malicious code into the current list of the DHCP client with the help of the hostname of the DHCP client...

Design/Logic Flaw

TP-Link TD-W8961ND devices allow XSS via the hostname of a DHCP client...

CVE-2018-20372

TP-Link TD-W8961ND devices allow XSS via the hostname of a DHCP client...

CVE-2018-20372

TP-Link TD-W8961ND devices allow XSS via the hostname of a DHCP client...

CVE-2018-20372

CVE-2018-20372 affects TP-Link TD-W8961ND devices, where an XSS flaw can be triggered via the hostname of a DHCP client in the router’s web interface. The root cause is a cross-site scripting flaw in the handling/display of DHCP client hostnames, allowing injected payloads to execute in the devic...

CVE-2018-20372: Improper Neutralization of Input During Web Page Generation

TP-Link TD-W8961ND devices allow XSS via the hostname of a DHCP client...

PT-2018-15328 · Tp Link · Tp-Link Td-W8961Nd

Name of the Vulnerable Software and Affected Versions: TP-Link TD-W8961ND affected versions not specified Description: The issue allows for cross-site scripting XSS attacks via the hostname of a DHCP client. This can be exploited by changing a device's hostname to an XSS payload, which will then ...

Siemens TD Keypad Designer DLL Hijacking Vulnerability

Siemens TD Keypad Designer is a keyboard design program from Siemens Germany for Siemens TD 100C and other products. A DLL hijacking vulnerability exists in SIEMENS TD Keypad Designer all versions. An attacker could exploit the vulnerability to execute code with the privileges of the user running...

CVE-2018-13806

A vulnerability has been identified in SIEMENS TD Keypad Designer All versions. A DLL hijacking vulnerability exists in all versions of SIEMENS TD Keypad Designer which could allow an attacker to execute code with the permission of the user running TD Designer. The attacker must have write access...

CVE-2018-13806

CVE-2018-13806 is a DLL hijacking vulnerability in Siemens TD Keypad Designer (all versions). The root cause is an uncontrolled search path element that could allow code execution with the user’s privileges when a TD project is opened. The attacker must have write access to the directory containi...

CVE-2018-13806

A vulnerability has been identified in SIEMENS TD Keypad Designer All versions. A DLL hijacking vulnerability exists in all versions of SIEMENS TD Keypad Designer which could allow an attacker to execute code with the permission of the user running TD Designer. The attacker must have write access...