Tenda AX1806 saveParentControlInfo function stack overflow vulnerability

The Tenda AX1806 is a WiFi6 wireless router from Tenda, a Chinese company. A stack overflow vulnerability exists in the Tenda AX1806 saveParentControlInfo function, which can be exploited by an attacker to cause a Denial of Service DoS via the deviceId parameter...

CVE-2022-25830

Information Exposure vulnerability in Galaxy Watch3 Plugin prior to version 2.2.09.22012751 allows attacker to access password information of connected WiFiAp in the log...

CVE-2022-25829

Information Exposure vulnerability in Watch Active2 Plugin prior to version 2.2.08.22012751 allows attacker to access password information of connected WiFiAp in the log...

CVE-2022-25829

Information Exposure vulnerability in Watch Active2 Plugin prior to version 2.2.08.22012751 allows attacker to access password information of connected WiFiAp in the log...

CVE-2022-25828

Information Exposure vulnerability in Watch Active Plugin prior to version 2.2.07.22012751 allows attacker to access password information of connected WiFiAp in the log...

CVE-2022-25828

Information Exposure vulnerability in Watch Active Plugin prior to version 2.2.07.22012751 allows attacker to access password information of connected WiFiAp in the log...

CVE-2022-25827

Information Exposure vulnerability in Galaxy Watch Plugin prior to version 2.2.05.22012751 allows attacker to access password information of connected WiFiAp in the log...

CVE-2022-25826

Information Exposure vulnerability in Galaxy S3 Plugin prior to version 2.2.03.22012751 allows attacker to access password information of connected WiFiAp in the log...

CVE-2022-25214

Improper access control on the LocalClientList.asp interface allows an unauthenticated remote attacker to obtain sensitive information concerning devices on the local area network, including IP and MAC addresses. Improper access control on the wirelesssetup.asp interface allows an unauthenticated...

CVE-2022-25214

Improper access control on the LocalClientList.asp interface allows an unauthenticated remote attacker to obtain sensitive information concerning devices on the local area network, including IP and MAC addresses. Improper access control on the wirelesssetup.asp interface allows an unauthenticated...

CVE-2022-25214

Improper access control on the LocalClientList.asp interface allows an unauthenticated remote attacker to obtain sensitive information concerning devices on the local area network, including IP and MAC addresses. Improper access control on the wirelesssetup.asp interface allows an unauthenticated...

CVE-2021-40059

There is a permission control vulnerability in the Wi-Fi module. Successful exploitation of this vulnerability may affect confidentiality...

CVE-2021-40059

There is a permission control vulnerability in the Wi-Fi module. Successful exploitation of this vulnerability may affect confidentiality...

SAMSUNG Watch Active Plugin 日志信息泄露漏洞

The SAMSUNG Galaxy Watch Plugin is a component of a Galaxy Wearable application from Samsung South Korea. A log information disclosure vulnerability exists in versions prior to SAMSUNG Watch Active Plugin 2.2.05.22012751, which allows an attacker to access password information for WiFiAp in logs...

HUAWEI EMUI和Honor Magic Ui 安全漏洞

Huawei Emui is a mobile operating system developed on Android. Magic Ui is a mobile operating system developed on Android. Huawei Emui and Magic UI Wi-Fi modules have a privilege control vulnerability that could be exploited by attackers to obtain sensitive information...

Tenda AX1806 缓冲区错误漏洞

The Tenda AX1806 is a WiFi6 wireless router from Tenda, China. A stack overflow vulnerability exists in the Tenda AX1806 formfastsettingwifiset function, which can be exploited by an attacker to cause a denial of service DoS via the ssid parameter...

SAMSUNG Watch Active2 Plugin 日志信息泄露漏洞

SAMSUNG Watch Active2 Plugin is a component of a Galaxy Wearable application from Samsung South Korea. A log information disclosure vulnerability exists in versions prior to SAMSUNG Watch Active2 Plugin 2.2.08.22012751, which allows an attacker to access password information for WiFiAp in logs...

Samsung Galaxy S3 Plugin 日志信息泄露漏洞

The SAMSUNG Galaxy S3 Plugin is a component of the Samsung Gear application from Samsung South Korea. A log information disclosure vulnerability exists in versions prior to Samsung Galaxy S3 Plugin 2.2.03.22012751, which allows an attacker to access password information for WiFiAp in the log...

NETGEAR WAC120 Cross-Site Scripting Vulnerability

Netgear NETGEAR WAC120 is a wireless access point AP from Netgear, Inc. A cross-site scripting vulnerability exists in the Netgear WAC120 AC Access Point, which stems from unauthenticated cross-site scripting XSS could lead to a variety of attacks, such as session hijacking or even clipboard...

PT-2022-17552 · Samsung · Galaxy S3 Plugin

Name of the Vulnerable Software and Affected Versions: Galaxy S3 Plugin versions prior to 2.2.03.22012751 Description: The issue allows an attacker to access password information of connected WiFiAp in the log. Recommendations: For Galaxy S3 Plugin versions prior to 2.2.03.22012751, update to...