VulnCheck KEV: CVE-2023-38817

An issue in Inspect Element Ltd Echo.ac v.5.2.1.0 allows a local attacker to gain privileges via a crafted command to the echodriver.sys component. NOTE: the vendor's position is that the reported ability for user-mode applications to execute code as NT AUTHORITY\SYSTEM was "deactivated by...

CVE-2024-41444

SeaCMS v12.9 has a SQL injection vulnerability in the key parameter of /js/player/dmplayer/dmku/index.php?ac=so...

CVE-2024-7795 Autel MaxiCharger AC Elite Business C50 AppAuthenExchangeRandomNum Stack-Based Buffer Overflow Remote Code Execution Vulnerability

Autel MaxiCharger AC Elite Business C50 AppAuthenExchangeRandomNum Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC Elite Business C50 EV chargers...

CVE-2024-7795

Autel MaxiCharger AC Elite Business C50 EV chargers are affected by CVE-2024-7795. The vulnerability lies in handling of the AppAuthenExchangeRandomNum BLE command, where insufficient validation of the length of user-supplied data copied into a fixed-length stack buffer can allow a network-adjace...

blogs.nalsar.ac.in Improper Access Control vulnerability OBB-3959112

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2024-29473 · Tenda · Tenda Ac18

Name of the Vulnerable Software and Affected Versions: Tenda AC18 version 15.03.3.10 EN Description: A stack-based buffer overflow issue allows a remote attacker to execute arbitrary code via the ssid parameter at the "ip/goform/fast setting wifi set" endpoint. Recommendations: For Tenda AC18...

Ubuntu: Security Advisory (USN-6893-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Malicious code in sap-ac (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 870a5115e5b80eb328e2100fc8e18af8a1dfea9e5dde756b2c4fad13bda5b53d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7788 Malicious code in sap-ac (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 870a5115e5b80eb328e2100fc8e18af8a1dfea9e5dde756b2c4fad13bda5b53d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-25142 · Tenda · Tenda Ac18

Name of the Vulnerable Software and Affected Versions: Tenda AC18 version 15.03.3.10 EN Description: A stack-based buffer overflow issue was discovered via the deviceId parameter at the "ip/goform/saveParentControlInfo" endpoint. This allows for potential exploitation. Recommendations: For Tenda...

PT-2024-6137 · Autel · Autel Maxicharger Ac Elite Business C50

Name of the Vulnerable Software and Affected Versions: Autel MaxiCharger AC Elite Business C50 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC Elite Business C50 charging stations...

(Pwn2Own) Autel MaxiCharger AC Elite Business C50 DLB_HostHeartBeat Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC Elite Business C50 charging stations. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DLBHostHeartBeat handler of the...

CLSA-2024-1718900452 linux-firmware: Fix of CVE-2022-38076

Update iwlwifi firmware to mitigate CVE-2022-38076 for wifi adapters: Intel Wireless-AC 9560, Intel Wireless-AC 9462, Intel Wireless-AC 9461...

CLSA-2024-1718899761 linux-firmware: Fix of CVE-2022-38076

Update iwlwifi firmware to mitigate CVE-2022-38076 for wifi adapters: Intel Wireless-AC 9560, Intel Wireless-AC 9462, Intel Wireless-AC 9461, Intel Wireless-AC 9260...

cortez-ac.com Cross Site Scripting vulnerability OBB-3934759

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2021-47430 x86/entry: Clear X86_FEATURE_SMAP when CONFIG_X86_SMAP=n

In the Linux kernel, the following vulnerability has been resolved: x86/entry: Clear X86FEATURESMAP when CONFIGX86SMAP=n Commit 3c73b81a9164 "x86/entry, selftests: Further improve user entry sanity checks" added a warning if AC is set when in the kernel. Commit 662a0221893a3d "x86/entry: Fix AC...

TOTOLINK CPE CP450 安全漏洞

TOTOLINK CP450 is a wireless bridge from China Gion Electronics TOTOLINK. The TOTOLINK CP450 suffers from a buffer overflow vulnerability that stems from the CloudACMunualUpdate method failing to properly validate the length size of input data, which can be exploited by an attacker to cause a...

astwoodbankac.co.uk Cross Site Scripting vulnerability OBB-3926057

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2024-3133 · Tenda · Tenda Ac8

Name of the Vulnerable Software and Affected Versions: Tenda AC8 version 16.03.34.09 Description: A critical issue affects the function R7WebsSecurityHandler of the file /goform/execCommand, leading to a stack-based buffer overflow when the password argument is manipulated. This can be exploited...

PT-2024-8485 · Tenda · Tenda Ac15

Name of the Vulnerable Software and Affected Versions: Tenda AC15 version 15.03.05.19 Description: A critical issue affects the function formSetDeviceName of the file /goform/SetOnlineDevName. The manipulation of the argument devName leads to a stack-based buffer overflow in the memory. This can ...