650 matches found
Why Security Awareness Training is Your Best Defense
Cybercriminals are constantly on the lookout for ways to infiltrate our devices and steal our personal information. Data…...
CVE-2024-37570
On Mitel 6869i 4.5.0.41 devices, the Manual Firmware Update upgrade.html page does not perform sanitization on the username and path parameters sent by an authenticated user before appending flags to the busybox ftpget command. This leads to $ command execution...
Severe Flaws Disclosed in Brocade SANnav SAN Management Software
Several security vulnerabilities disclosed in Brocade SANnav storage area network SAN management application could be exploited to compromise susceptible appliances. The 18 flaws impact all versions up to and including 2.3.0, according to independent security researcher Pierre Barre, who discover...
Tenda AC8 fromAdvSetMacMtuWan function has a stack buffer overflow vulnerability
The Tenda AC8 is a router device that provides network connectivity and data transfer capabilities. A security vulnerability exists in Tenda AC8 version 16.03.34.09, which originates from a buffer overflow vulnerability in the function fromAdvSetMacMtuWan in file /goform/AdvSetMacMtuWan. No detai...
CVE-2024-21872
The device allows an unauthenticated attacker to bypass authentication and modify the cookie to reveal hidden pages that allows more critical operations to the transmitter...
Tenda AC7 安全漏洞
Tenda AC7 is a wireless router from Tenda, China. A security vulnerability exists in Tenda AC7 version 15.03.06.44 due to a buffer overflow vulnerability in the mac parameter of the GetParentControlInfo method...
SUSE-SU-2024:0977-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2019-25162: Fixed a potential use after free bsc1220409. - CVE-2021-46923: Fixed reference leakage in fs/mountsetattr bsc1220457. - CVE-2021-46924: Fixed fix...
The vulnerability of the software for X-Rite’s MAT 6 Kohinoor spectrometer arises from insufficient testing of input data. This vulnerability allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The software vulnerability of the X-Rite MAT 6 Kohinoor spectrometer exists due to insufficient testing of input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
CVE-2024-22006
OOB read in the TMU plugin that allows for memory disclosure in the power management subsystem of the device...
How are attackers using QR codes in phishing emails and lure documents?
Though QR codes were once on the verge of extinction, many consumers are used to seeing them in the wild for ordering at restaurants, or as mainstays on storefront doors informing customers how they can sign up for a newsletter or score a sweet deal. The use of QR codes saw a resurgence during th...
CVE-2024-24301
A Command Injection vulnerability exists in the web interface of the 4ipnet EAP-767 (version v3.42.00 ) enterprise-grade access point. This flaw allows an attacker with valid credentials to inject and execute arbitrary shell commands with root privileges . While the documents do not specify a pat...
CISA and Partners Release Advisory on PRC-sponsored Volt Typhoon Activity and Supplemental Living Off the Land Guidance
Today, CISA, the National Security Agency NSA, and the Federal Bureau of Investigation FBI released a joint Cybersecurity Advisory CSA, PRC State-Sponsored Actors Compromise and Maintain Persistent Access to U.S. Critical Infrastructure alongside supplemental Joint Guidance: Identifying and...
Code injection
A potential attacker with access to the Westermo Lynx device would be able to execute malicious code that could affect the correct functioning of the device...
Code injection
A potential attacker with access to the Westermo Lynx device may be able to execute malicious code that could affect the correct functioning of the device...
CVE-2023-45735
CVE-2023-45735 affects Westermo Lynx devices (206-F2G) running Westermo WeOS. The vulnerability is classified as Code Injection (CWE-94) with improper input handling in web interface, allowing a remote attacker with network access and low attack complexity to execute malicious code and potentiall...
CVE-2023-45735 Westermo Lynx Code Injection
A potential attacker with access to the Westermo Lynx device may be able to execute malicious code that could affect the correct functioning of the device...
CVE-2023-45213 Westermo Lynx Permissive Cross-domain Policy with Untrusted Domains
A potential attacker with access to the Westermo Lynx device would be able to execute malicious code that could affect the correct functioning of the device...
Code injection
The Android application BINHDRM26 com.bdrm.superreboot 1.0.3, exposes several critical actions through its exported broadcast receivers. These exposed actions can allow any app on the device to send unauthorized broadcasts, leading to unintended consequences. The vulnerability is particularly...
Super Reboot (Root) Recovery Security Vulnerability
Super Reboot Root Recovery is a mobile desktop software by actuator Personal Developer. A security vulnerability exists in Super Reboot Root Recovery version 1.0.3 that originates from allowing any application on the device to send unauthorized broadcasts...