The vulnerability of the /goform/SetIpMacBind component in the Tenda AC8 router software allows a attacker to cause a service failure or execute arbitrary code.

The vulnerability of the /goform/SetIpMacBind component in Tenda AC8 software lies in the possibility of writing data outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to cause service failures or execute arbitrary code...

Identification and Disruption of QakBot Infrastructure

SUMMARY The Cybersecurity and Infrastructure Security Agency CISA and Federal Bureau of Investigation FBI are releasing this joint Cybersecurity Advisory CSA to disseminate QakBot infrastructure indicators of compromise IOCs identified through FBI investigations as of August 2023. On August 25, F...

The vulnerability of the functions DH_check(), DH_check_ex(), or EVP_PKEY_param_check() in the OpenSSL library allows a attacker to cause a service failure.

The vulnerability of the DHcheck, DHcheckex, or EVPPKEYparamcheck functions in the OpenSSL library is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Poland Arrests 2 Suspected Hackers for Train Disruption

By Waqas According to Polish RMF radio, one of the suspects is a police officer; however, this information has not… This is a post from HackRead.com Read the original post: Poland Arrests 2 Suspected Hackers for Train Disruption...

CVE-2023-38026

SpotCam Co., Ltd. SpotCam FHD 2 has a vulnerability of using hard-coded uBoot credentials. An remote attacker can exploit this vulnerability to access the system to perform arbitrary system operations or disrupt service...

CVE-2023-38026

SpotCam Co., Ltd. SpotCam FHD 2 has a vulnerability of using hard-coded uBoot credentials. An remote attacker can exploit this vulnerability to access the system to perform arbitrary system operations or disrupt service...

CVE-2023-38024

SpotCam Co., Ltd. SpotCam FHD 2’s hidden Telnet function has a vulnerability of using hard-coded Telnet credentials. An remote unauthenticated attacker can exploit this vulnerability to access the system to perform arbitrary system operations or disrupt service...

CVE-2023-38025 SpotCam Co., Ltd. SpotCamFHD - Command Injection -1

SpotCam Co., Ltd. SpotCam FHD 2’s hidden Telnet function has a vulnerability of OS command injection. An remote unauthenticated attacker can exploit this vulnerability to execute command injection attack to arbitrary system commands or disrupt service...

CVE-2023-38024 SpotCam Co., Ltd. SpotCamFHD - Use of Hard-coded Cryptographic Key -1

SpotCam Co., Ltd. SpotCam FHD 2’s hidden Telnet function has a vulnerability of using hard-coded Telnet credentials. An remote unauthenticated attacker can exploit this vulnerability to access the system to perform arbitrary system operations or disrupt service...

SpotCam Sense 操作系统命令注入漏洞

SpotCam Sense is a camera from China's SightBoob.com SpotCam company. SpotCam FHD 2 1.0036 firmware version exists operating system command injection vulnerability, the vulnerability stems from the Telnet function there is a command injection vulnerability, an attacker can use this vulnerability ...

SpotCam Sense 命令注入漏洞

SpotCam Sense is a webcam from China's SpotCam company. SpotCam Sense v2.2044 firmware version exists command injection vulnerability, the vulnerability stems from the Telnet function there is a command injection vulnerability, an attacker can use this vulnerability to arbitrary system commands t...

The vulnerability of the “f_ipv6_enable” parameter in the /bsc_ipv6 microprogramming system of the D-Link DAP-2660 wireless access point allows a intruder to gain unauthorized access to protected information or cause service failure.

The vulnerability of the “fipv6enable” parameter in the /bscipv6 microprogramming software for the D-Link DAP-2660 wireless access point is related to buffer overflow vulnerabilities. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected...

PT-2023-26251 · Unknown · Spotcam Fhd 2

Name of the Vulnerable Software and Affected Versions: SpotCam FHD 2 affected versions not specified Description: The SpotCam FHD 2’s hidden Telnet function has a vulnerability of using hard-coded Telnet credentials. A remote unauthenticated attacker can exploit this vulnerability to access the...

CVE-2023-32757

e-Excellence U-Office Force file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker without logging the service can exploit this vulnerability to upload arbitrary files to perform arbitrary command or disrupt service...

CVE-2023-32757

e-Excellence U-Office Force file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker without logging the service can exploit this vulnerability to upload arbitrary files to perform arbitrary command or disrupt service...

CVE-2023-32757

CVE-2023-32757 affects e-Excellence U-Office Force, where the file uploading function does not restrict dangerous file types. The root cause is unrestricted file type handling, enabling an unauthenticated, remote attacker to upload arbitrary files and potentially perform arbitrary commands or dis...

CVE-2023-32757 e-Excellence U-Office Force - Arbitrary File Upload

e-Excellence U-Office Force file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker without logging the service can exploit this vulnerability to upload arbitrary files to perform arbitrary command or disrupt service...

CVE-2023-32756 e-Excellence U-Office Force - Path Traversal

e-Excellence U-Office Force has a path traversal vulnerability within its file uploading and downloading functions. An unauthenticated remote attacker can exploit this vulnerability to read arbitrary system files, but can’t control system or disrupt service...

PT-2023-24005 · Unknown · E-Excellence U-Office Force

Name of the Vulnerable Software and Affected Versions: e-Excellence U-Office Force affected versions not specified Description: The file uploading function in e-Excellence U-Office Force does not restrict the upload of files with dangerous types. An unauthenticated remote attacker can exploit thi...

e-Excellence U-Office Force 代码问题漏洞

e-Excellence U-Office Force is an e-Office platform from China's First Class Technology e-Excellence. A code issue vulnerability exists in e-Excellence U-Office Force, which originates from an unrestricted upload of a dangerous type of file, and can be exploited by an unauthenticated, remote...