CVE-2023-43134

Affected product: Netis 360RAC1200 (v1.3.4517). The CVE denotes an unauthorized access vulnerability that lets an attacker obtain device-sensitive information, steal user tokens, and log in to the device backend management without authentication. The issue is rated base-score 9.8 (CRITICAL) by NV...

Socomec MODULYS GP Security Vulnerability

The Socomec MODULYS GP is a green power device from Socomec France. A security vulnerability exists in the Socomec MODULYS GP that stems from incorrect session management in a web application, which could allow an attacker to steal a session cookie in order to perform a variety of actions allowed...

CVE-2022-3407

The CVE-2022-3407 entry describes a bug in Motorola smartphones where, when USB-tethered to a host PC and sharing mobile data, originating a call on the device can cause the modem to reset, resulting in a failed call and potentially preventing emergency dialing. The issue is triggered in scenario...

Crooks Using Stealers and Stolen Cookies to Hack Airbnb Accounts

By Waqas If you are an Airbnb user, you need to be vigilant against cybercriminals who are targeting your device, personal, and financial information. This is a post from HackRead.com Read the original post: Crooks Using Stealers and Stolen Cookies to Hack Airbnb Accounts...

Antivirus Software: The Best Deals, Coupons and Discounts

By Owais Sultan In today’s digital age, securing your devices and data from cyber threats is a top priority. Antivirus software… This is a post from HackRead.com Read the original post: Antivirus Software: The Best Deals, Coupons and Discounts...

PT-2023-24324 · Unknown · Connected Io

Name of the Vulnerable Software and Affected Versions: Connected IO versions 2.1.0 and prior Description: The issue is related to a misconfiguration in the MQTT broker used for management and device communication. This misconfiguration allows devices to connect to the broker and issue commands to...

Cross site request forgery (csrf)

A vulnerability has been identified in RUGGEDCOM ROX MX5000 All versions V2.16.0, RUGGEDCOM ROX MX5000RE All versions V2.16.0, RUGGEDCOM ROX RX1400 All versions V2.16.0, RUGGEDCOM ROX RX1500 All versions V2.16.0, RUGGEDCOM ROX RX1501 All versions V2.16.0, RUGGEDCOM ROX RX1510 All versions V2.16.0...

TOTOLINK A3300R 操作系统命令注入漏洞

TOTOLINK A3300R is a dual-band wireless router manufactured by China's Gion Electronics TOTOLINK, mainly used for home and small network environments. A command injection vulnerability exists in the TOTOLINK A3300R. The vulnerability stems from the command parameter of the setTracerouteCfg method...

CVE-2023-32394

CVE-2023-32394 affects Apple devices and is fixed in iOS 16.5/iPadOS 16.5, watchOS 9.5, tvOS 16.5, and macOS Ventura 13.4. The issue allowed viewing contact information from the lock screen when the device is physically accessed; Apple attributes this to improved checks in the security content. A...

Hardcoded credentials

Hardcoded Credentials in multiple SPRECON-E CPU variants of Sprecher Automation allows an remote attacker to take over the device. These accounts should be deactivated according to Sprecher's hardening guidelines...

CVE-2023-24825 RIOT-OS vulnerable to NULL pointer dereference in gnrc_pktbuf_mark

RIOT-OS, an operating system for Internet of Things IoT devices, contains a network stack with the ability to process 6LoWPAN frames. Prior to version 2023.04, an attacker can send a crafted frame to the device to trigger a NULL pointer dereference leading to denial of service. This issue is fixe...

CVE-2023-33741

Macrovideo v380pro v1.4.97 shares the device id and password when sharing the device...

CVE-2023-33741

CVE-2023-33741 affects Macrovideo v380pro (v1.4.97). Multiple connected sources confirm a flaw where sharing a device leaks the device id and password. CVSS v3.1 base score 7.5 (HIGH) with network attack vector and no user interaction. Public details describe credentials exposure during sharing, ...

CVE-2022-4945 CVE-2022-4945

The Dataprobe cloud usernames and passwords are stored in plain text in a specific file. Any user able to read this specific file from the device could compromise other devices connected to the user's cloud...

CVE-2023-31477

CVE-2023-31477 is a path-traversal vulnerability in GL.iNet devices prior to 3.216. The flaw is in the file-sharing feature, which has no server-side restriction to limit sharing to the USB path, enabling sharing of arbitrary directories (e.g., /tmp, /etc). Impact described as exposing files via ...

Android Security Bulletin—May 2023Stay organized with collectionsSave and categorize content based on your preferences.

The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2023-05-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Android partners are...

CVE-2023-26101

In Progress Flowmon Packet Investigator before 12.1.0, a Flowmon user with access to Flowmon Packet Investigator could leverage a path-traversal vulnerability to retrieve files on the Flowmon appliance's local filesystem...

CVE-2023-25548

A CWE-863: Incorrect Authorization vulnerability exists that could allow access to device credentials on specific DCE endpoints not being properly secured when a hacker is using a low privileged user. Affected products: StruxureWare Data Center Expert V7.9.2 and prior...

Bypassing a Theft Threat Model

Thieves cut through the wall of a coffee shop to get to an Apple store, bypassing the alarms in the process. I wrote about this kind of thing in 2000, in Secrets and Lies page 318: My favorite example is a band of California art thieves that would break into peoples houses by cutting a hole in...

CVE-2023-25954

KYOCERA Mobile Print' v3.2.0.230119 and earlier, 'UTAX/TA MobilePrint' v3.2.0.230119 and earlier, and 'Olivetti Mobile Print' v3.2.0.230119 and earlier are vulnerable to improper intent handling. When a malicious app is installed on the victim user's Android device, the app may send an intent and...