CVE-2022-34866

Passage Drive versions v1.4.0 to v1.5.1.0 and Passage Drive for Box version v1.0.0 contain an insufficient data verification vulnerability for interprocess communication. By running a malicious program, an arbitrary OS command may be executed with LocalSystem privilege of the Windows system where...

CVE-2022-34866

Passage Drive versions v1.4.0 to v1.5.1.0 and Passage Drive for Box version v1.0.0 contain an insufficient data verification vulnerability for interprocess communication. By running a malicious program, an arbitrary OS command may be executed with LocalSystem privilege of the Windows system where...

Design/Logic Flaw

Passage Drive versions v1.4.0 to v1.5.1.0 and Passage Drive for Box version v1.0.0 contain an insufficient data verification vulnerability for interprocess communication. By running a malicious program, an arbitrary OS command may be executed with LocalSystem privilege of the Windows system where...

CVE-2022-34866

Passage Drive versions v1.4.0 to v1.5.1.0 and Passage Drive for Box version v1.0.0 contain an insufficient data verification vulnerability for interprocess communication. By running a malicious program, an arbitrary OS command may be executed with LocalSystem privilege of the Windows system where...

PT-2022-8639

Name of the Vulnerable Software and Affected Versions H96 Smart TV Box H96 Pro Plus affected versions not specified Description An issue was discovered that allows attackers to corrupt files via calls to the saveDeepColorAttr service. This issue affects the H96 Smart TV Box H96 Pro Plus, enabling...

CVE-2022-34866: Improper Input Validation

Passage Drive versions v1.4.0 to v1.5.1.0 and Passage Drive for Box version v1.0.0 contain an insufficient data verification vulnerability for interprocess communication. By running a malicious program, an arbitrary OS command may be executed with LocalSystem privilege of the Windows system where...

CVE-2020-21405: Uncontrolled Resource Consumption

An issue was discovered in H96 Smart TV Box H96 Pro Plus allows attackers to corrupt files via calls to the saveDeepColorAttr service.unk...

PT-2022-8640

Name of the Vulnerable Software and Affected Versions RK Smart TV Box MAX affected versions not specified V88 SmartTV box affected versions not specified Description An issue was discovered that allows attackers to cause a denial of service via the switchNextDisplayInterface service...

PT-2022-22402 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Passage Drive versions v1.4.0 to v1.5.1.0 Passage Drive for Box version v1.0.0 Description: The issue is related to insufficient data verification for interprocess communication, which can be exploited by running a malicious program. This...

H96 Smart TV Box 资源管理错误漏洞

H96 Smart TV Box is a set-top box from H96. A security vulnerability exists in H96 Smart TV Box where an attacker can corrupt files by calling saveDeepColorAttr service.unk...

CVE-2020-21406: Undefined Security Weakness

An issue was discovered in RK Smart TV Box MAX and V88 SmartTV box that allows attackers to cause a denial of service via the switchNextDisplayInterface service...

RK Smart TV Box MAX和V88 SmartTV Box 安全漏洞

The Amazon RK Smart TV Box and V88 SmartTV Box are both set-top boxes from Amazon.com, Inc. A security vulnerability exists in the RK Smart TV Box MAX and V88 SmartTV Box that originated from a vulnerability that allows an attacker to cause a denial of service via the switchNextDisplayInterface...

Malicious Package

Overview monash-college-combo-box is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

WordPress Visual Slide Box Builder 3.2.9 SQL Injection Vulnerability

Title: WordPress 6.0 - Visual Slide Box Builder 3.2.9 SQLi Author: nu11secur1ty Vendor: https://wphive.com/ Software: https://wphive.com/plugins/wp-visual-slidebox-builder/?pluginversion=3.2.9 Reference:...

WordPress Visual Slide Box Builder 3.2.9 SQL Injection

Title: WordPress 6.0 - Visual Slide Box Builder 3.2.9 SQLi Author: nu11secur1ty Date: 07.11.2022 Vendor: https://wphive.com/ Software: https://wphive.com/plugins/wp-visual-slidebox-builder/?pluginversion=3.2.9 Reference:...

JVN#23766146: Passage Drive vulnerable to insufficient data verification

Passage Drive provided by Yokogawa Rental & Lease Corporation contains an insufficient data verification vulnerability for interprocess communication CWE-20. Impact By running a malicious program, an arbitrary OS command may be executed with LocalSystem privilege of the Windows system where the...

Counter Box < 1.2.1 - Arbitrary Counter Activation/Deactivation via CSRF

The plugin is lacking CSRF check when activating and deactivating counters, which could allow attackers to make a logged in admin perform such actions via CSRF attacks PoC https://example.com/wp-admin/admin.php?page=counter-box=1=activate...

Counter Box < 1.2.1 - Arbitrary Counter Activation/Deactivation via CSRF

The plugin is lacking CSRF check when activating and deactivating counters, which could allow attackers to make a logged in admin perform such actions via CSRF attacks https://example.com/wp-admin/admin.php?page=counter-box&id=1&action=activate...

Yokogawa Rental & Lease Passage Drive 输入验证错误漏洞

The Yokogawa Rental & Lease Passage Drive is a passage drive endpoint from Yokogawa Rental & Lease, Japan. An input validation error vulnerability exists in Yokogawa Rental & Lease Passage Drive that stems from insufficient data validation of Passage Drive including inter-process communication,...

Dynamic analysis of firmware components in IoT devices

Among the various offensive security techniques, vulnerability assessment takes priority when it comes to analyzing the security of IoT/IIoT devices. In most cases, such devices are analyzed using the black box testing approach, in which the researcher has virtually no knowledge about the object ...