867 matches found
CVE-2020-8508
nsak64.sys in Norman Malware Cleaner 2.08.08 allows users to call arbitrary kernel functions because the passing of function pointers between user and kernel mode is mishandled...
CVE-2020-8508
CVE-2020-8508 affects Norman Malware Cleaner 2.08.08, via nsak64.sys. The root cause is mishandling of passing function pointers between user and kernel modes, enabling an attacker to call arbitrary kernel functions. This results in high-severity impact (partial confidentiality, integrity, and av...
CVE-2020-8508: Out-of-bounds Write
nsak64.sys in Norman Malware Cleaner 2.08.08 allows users to call arbitrary kernel functions because the passing of function pointers between user and kernel mode is mishandled...
PT-2020-20185
Name of the Vulnerable Software and Affected Versions Norman Malware Cleaner version 2.08.08 Description The issue arises from the mishandling of function pointers passed between user and kernel mode in the nsak64.sys driver, allowing users to call arbitrary kernel functions. Recommendations For...
Clario: XSS in https://mackeeper.com
Summary: XSS in https://mackeeper.com Vulnerable URL: https://mackeeper.com/mk/memory-cleaner/%3C/%3E'+alertdocument.domain%20// Vulnerable Parameter: "URL Path" Steps To Reproduce: Steps: Navigate to the Vulnerable URL Notice the pop-up...
Cross-Site Scripting (XSS)
resque-cleaner is vulnerable to cross-site scripting XSS. A remote attacker is able to inject arbitrary Javascript into a victim's browser via the klass, from, to, page and exception parameters...
WordPress WPS Cleaner plugin <= 1.4.4 - Cross-Site Request Forgery (CSRF) + media disclosure vulnerabilities
Cross-Site Request Forgery CSRF + media disclosure vulnerabilities found by Julio Potier in WordPress WPS Cleaner plugin versions = 1.4.4. Solution Update the WordPress WPS Cleaner plugin...
WPS Cleaner <= 1.4.4 - Multiple Issues
CSRF, Media Dislcosure...
Jisiwei i3 robot vacuum cleaner encryption issue vulnerability
Jisiwei i3 is a vacuuming robot from the Chinese company Jisiwei. A vulnerability with encryption issues exists in version 2.0 of the Jisiwei i3 robot vacuum cleaner APP. The vulnerability stems from a networked system or product that does not properly utilize relevant cryptographic algorithms,...
CVE-2019-12820
A vulnerability was found in the app 2.0 of the Shenzhen Jisiwei i3 robot vacuum cleaner. Actions performed on the app such as changing a password, and personal information it communicates with the server, use unencrypted HTTP. As an example, while logging in through the app to a Jisiwei account,...
CVE-2019-12821
A vulnerability was found in the app 2.0 of the Shenzhen Jisiwei i3 robot vacuum cleaner, while adding a device to the account using a QR-code. The QR-code follows an easily predictable pattern that depends only on the specific device ID of the robot vacuum cleaner. By generating a QR-code...
Design/Logic Flaw
A vulnerability was found in the app 2.0 of the Shenzhen Jisiwei i3 robot vacuum cleaner. Actions performed on the app such as changing a password, and personal information it communicates with the server, use unencrypted HTTP. As an example, while logging in through the app to a Jisiwei account,...
Code injection
A vulnerability was found in the app 2.0 of the Shenzhen Jisiwei i3 robot vacuum cleaner, while adding a device to the account using a QR-code. The QR-code follows an easily predictable pattern that depends only on the specific device ID of the robot vacuum cleaner. By generating a QR-code...
CVE-2019-12821
A vulnerability was found in the app 2.0 of the Shenzhen Jisiwei i3 robot vacuum cleaner, while adding a device to the account using a QR-code. The QR-code follows an easily predictable pattern that depends only on the specific device ID of the robot vacuum cleaner. By generating a QR-code...
CVE-2019-12821
The CVE concerns the Shenzhen Jisiwei i3 robot vacuum cleaner’s app 2.0. A QR code used to add a device to an account encodes the device ID using a predictable pattern (JSW + six digits). An attacker can generate a QR-code with a target device ID to connect an arbitrary device and gain full acces...
CVE-2019-12820
A vulnerability was found in the app 2.0 of the Shenzhen Jisiwei i3 robot vacuum cleaner. Actions performed on the app such as changing a password, and personal information it communicates with the server, use unencrypted HTTP. As an example, while logging in through the app to a Jisiwei account,...
CVE-2019-12820
The CVE-2019-12820 entry concerns the Shenzhen Jisiwei i3 robot vacuum cleaner app 2.0 (Android/iOS). The vulnerability is that login and other personal information communications between the app and its server are sent over unencrypted HTTP, enabling a local-network MiTM attacker to capture cred...
PT-2019-12965
Name of the Vulnerable Software and Affected Versions Shenzhen Jisiwei i3 robot vacuum cleaner app version 2.0 Description A security issue was discovered in the app, related to adding a device to an account using a QR-code. The QR-code pattern is easily predictable and depends on the device ID o...
PT-2019-12964
Name of the Vulnerable Software and Affected Versions Shenzhen Jisiwei i3 robot vacuum cleaner app version 2.0 Description A security issue was discovered in the app, where actions like changing passwords and communicating personal information with the server use unencrypted HTTP. For instance,...
CVE-2019-12821: Use of Insufficiently Random Values
A vulnerability was found in the app 2.0 of the Shenzhen Jisiwei i3 robot vacuum cleaner, while adding a device to the account using a QR-code. The QR-code follows an easily predictable pattern that depends only on the specific device ID of the robot vacuum cleaner. By generating a QR-code...