Kerui W18 Alarm 安全漏洞

The Kerui W18 Alarm System is a stable and reliable high-end GSM and WIFI dual network alarm system from Kerui. A security vulnerability exists in the Kerui W18 Alarm System v1.0 firmware version, which originated from a vulnerability that allows an attacker to gain full access to the system, and...

CVE-2023-31763

CVE-2023-31763 affects the AGShome Smart Alarm v1.0 transmitter. The vulnerability stems from weak security in the transmitter, enabling a code replay attack that could give an attacker full access to the system. The NVD/CVE records indicate a base score of 7.5 (HIGH) with AV:A, AC:H, PR:N, UI:N,...

Shenzhen Daping Computer AGShome Smart Alarm 安全漏洞

Shenzhen Daping Computer AGShome Smart Alarm is a home smart alarm from Shenzhen Daping Computer Shenzhen, China. A security vulnerability exists in Shenzhen Daping Computer AGShome Smart Alarm v1.0 firmware version, which originated from a vulnerability that allows an attacker to gain full acces...

CVE-2023-31759

CVE-2023-31759 affects the Kerui W18 Alarm System v1.0, specifically the 433MHz keyfob. The vulnerability enables a code replay attack to gain full system access, as described in multiple connected sources. The CVSS v3.1 metrics indicate an adjacent attack vector, high complexity, no privileges o...

CVE-2023-31763

Weak security in the transmitter of AGShome Smart Alarm v1.0 allows attackers to gain full access to the system via a code replay attack...

PT-2023-23456 · Unknown · Agshome Smart Alarm

Name of the Vulnerable Software and Affected Versions: AGShome Smart Alarm version 1.0 Description: The issue is related to weak security in the transmitter, allowing attackers to gain full access to the system via a code replay attack. Recommendations: For AGShome Smart Alarm version 1.0, consid...

CVE-2023-31759

Weak Security in the 433MHz keyfob of Kerui W18 Alarm System v1.0 allows attackers to gain full access via a code replay attack...

CVE-2023-28320

A denial of service vulnerability exists in curl v8.1.0 in the way libcurl provides several different backends for resolving host names, selected at build time. If it is built to use the synchronous resolver, it allows name resolves to time-out slow operations using alarm and siglongjmp. When doi...

libcurl 资源管理错误漏洞

libcurl is a tool for transferring data from or to a server. A security vulnerability exists in libcurl that stems from allowing name resolution to timeout operations using alarm and siglongjmp, causing the application to crash...

CVE-2023-31677

Insecure permissions in luowice 3.5.18 allow attackers to view information for other alarm devices via modification of the eseeid parameter...

CVE-2023-31677

Insecure permissions in luowice 3.5.18 allow attackers to view information for other alarm devices via modification of the eseeid parameter...

CVE-2023-31677

Insecure permissions in luowice 3.5.18 allow attackers to view information for other alarm devices via modification of the eseeid parameter...

Luowice 安全漏洞

Luowice is a cloud app for a series of security monitoring devices from China Luowice. A security vulnerability exists in Luowice version 3.5.18. An attacker can use this vulnerability to view the information of other alarm devices by modifying the eseeid parameter...

PT-2023-23414 · Luowice · Luowice

Name of the Vulnerable Software and Affected Versions: luowice version 3.5.18 Description: The issue allows attackers to view information for other alarm devices by modifying the eseeid parameter, due to insecure permissions. Recommendations: For luowice version 3.5.18, restrict access to the...

CVE-2023-31677

Insecure permissions in luowice 3.5.18 allow attackers to view information for other alarm devices via modification of the eseeid parameter...

The vulnerability of microprogrammed software in Nexx Garage Door Controllers (NXG-100B, NXG-200), Nexx Smart Plugs (NXPG-100W), and Nexx Smart Alarms (NXAL-100) lies in their susceptibility to being bypassed through the use of a user-controlled key. This allows intruders to alter the settings of the devices and gain access to information about them.

The vulnerability of the microprogrammed software of the Nexx Garage Door Controller NXG-100B, NXG-200, Nexx Smart Plug NXPG-100W, and Nexx Smart Alarm NXAL-100 lies in the ability to bypass authentication by using a user-controlled key. Exploiting this vulnerability could allow an intruder to...

The vulnerability of the microprogrammed software of the Nexx Garage Door Controller (NXG-100B, NXG-200), Nexx Smart Plug (NXPG-100W), and Nexx Smart Alarm (NXAL-100) stems from insufficient validation of input data. This allows intruders to obtain information intended for other devices.

The vulnerabilities of the microprogrammed software of the Nexx Garage Door Controller NXG-100B, NXG-200, Nexx Smart Plug NXPG-100W, and Nexx Smart Alarm NXAL-100 are related to insufficient verification of input data. Exploiting these vulnerabilities can allow an attacker operating remotely to...

The vulnerability of the microprogrammed software of the Nexx Garage Door Controller (NXG-100B, NXG-200), Nexx Smart Plug (NXPG-100W), and Nexx Smart Alarm (NXAL-100) lies in the ability to bypass authentication by using a user-controlled key. This allows intruders to execute arbitrary commands.

The vulnerability of the microprogrammed software of the Nexx Garage Door Controller NXG-100B, NXG-200, Nexx Smart Plug NXPG-100W, and Nexx Smart Alarm NXAL-100 lies in the ability to bypass authentication by using a user-controlled key. Exploiting this vulnerability allows an unauthorized person...

CVE-2023-26061

An issue was discovered in Nokia NetAct before 22 FP2211. On the Scheduled Search tab under the Alarm Reports Dashboard page, users can create a script to inject XSS. Input validation was missing during creation of a scheduled task. For an external attacker, it is very difficult to exploit this,...

CVE-2023-26061

An issue was discovered in Nokia NetAct before 22 FP2211. On the Scheduled Search tab under the Alarm Reports Dashboard page, users can create a script to inject XSS. Input validation was missing during creation of a scheduled task. For an external attacker, it is very difficult to exploit this,...