287 matches found
Dell EMC ECS Exposes Resource Vulnerability
Dell EMC Elastic Cloud Storage ECS is a suite of scalable, software-defined object storage solutions from Dell, USA. An exposed resource vulnerability exists in Dell EMC ECS versions prior to 3.5, which arises from improper management of system resources e.g., memory, disk space, files, etc. by a...
dt-ssl.com Cross Site Scripting vulnerability OBB-1277110
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
dt-shop.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1157882 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
Unspecified Vulnerability in XIAOMI AI speaker MDZ-25-DT
Xiaomi AI speaker MDZ-25-DT is a smart speaker device from Chinese company Xiaomi Technology Xiaomi. A security vulnerability exists in XIAOMI AI speaker MDZ-25-DT version 1.34.36 and 1.40.14. An attacker can exploit this vulnerability by sending a UART interface to obtain a root shell, read the...
dt-shop.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1112760 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
CVE-2020-8994
An issue was discovered on XIAOMI AI speaker MDZ-25-DT 1.34.36, and 1.40.14. Attackers can get root shell by accessing the UART interface and then they can read Wi-Fi SSID or password, read the dialogue text files between users and XIAOMI AI speaker, use Text-To-Speech tools pretend XIAOMI...
CVE-2020-8994
The CVE-2020-8994 entry concerns Xiaomi AI Speaker MDZ-25-DT (firmware versions 1.34.36 and 1.40.14). A physical-access flaw allows an attacker to obtain a root shell by interfacing with UART, enabling reading of the Wi‑Fi SSID/password and dialogue text files, and using Text‑To‑Speech to imperso...
Linux kernel buffer overflow vulnerability (CNVD-2019-29640)
Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A buffer overflow vulnerability exists in the 'ad5755parsedt' function in the drivers/iio/dac/ad5755.c file in versions of Linux kernel prior to 4.8.6. The vulnerabili...
DEBIAN-CVE-2016-10907
An issue was discovered in drivers/iio/dac/ad5755.c in the Linux kernel before 4.8.6. There is an out of bounds write in the function ad5755parsedt...
CVE-2018-18852
Cerio DT-300N 1.1.6 through 1.1.12 devices allow OS command injection because of improper input validation of the web-interface PING feature's use of Save.cgi to execute a ping command, as exploited in the wild in October 2018...
Command injection
Cerio DT-300N 1.1.6 through 1.1.12 devices allow OS command injection because of improper input validation of the web-interface PING feature's use of Save.cgi to execute a ping command, as exploited in the wild in October 2018...
CVE-2018-18852
Cerio DT-300N 1.1.6 through 1.1.12 devices allow OS command injection because of improper input validation of the web-interface PING feature's use of Save.cgi to execute a ping command, as exploited in the wild in October 2018...
CVE-2018-18852
Cerio DT-300N devices, version 1.1.6–1.1.12, are affected by an OS command injection due to improper input validation in the web-interface PING feature (Save.cgi). The issue allows execution of arbitrary commands on the device; exploitation was observed in the wild in October 2018. CVSS details p...
Joomla DT Register 4.0.3 SQL Injection
Exploit Title : Joomla DT Register Components 4.0.3 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 14/02/2019 Vendor Homepage : dthdevelopment.com Software Download Link :...
CVE-2016-1000271
Joomla extension DT Register version before 3.1.12 Joomla 3.x / 2.8.18 Joomla 2.5 contains an SQL injection in "/index.php?controller=calendar&format=raw&cat0=SQLi&task=events". This attack appears to be exploitable if the attacker can reach the web server...
CVE-2016-1000271
Joomla extension DT Register version before 3.1.12 Joomla 3.x / 2.8.18 Joomla 2.5 contains an SQL injection in "/index.php?controller=calendar&format=raw&cat0=SQLi&task=events". This attack appears to be exploitable if the attacker can reach the web server...
Sql injection
Joomla extension DT Register version before 3.1.12 Joomla 3.x / 2.8.18 Joomla 2.5 contains an SQL injection in "/index.php?controller=calendar&format=raw&cat0=SQLi&task=events". This attack appears to be exploitable if the attacker can reach the web server...
CVE-2016-1000271
DT Register for Joomla (extensions DT Register) contains an SQL injection in the calendar events endpoint. Affected versions are Joomla 3.x: before 3.1.12 and Joomla 2.5: before 2.8.18. The vulnerability arises in the URL path /index.php?controller=calendar&format=raw&cat[0]=SQLi&task=events, whe...
CVE-2016-1000271
Joomla extension DT Register version before 3.1.12 Joomla 3.x / 2.8.18 Joomla 2.5 contains an SQL injection in "/index.php?controller=calendar&format=raw&cat0=SQLi&task=events". This attack appears to be exploitable if the attacker can reach the web server...
Denial of Service Vulnerability in Yuvision Network Cameras
YUVAD IP Camera IPC232S-IR3-HF40-C-DT is a network camera produced by Zhejiang YUVAD Technology Co. A denial-of-service vulnerability exists in the YUVE Network Camera IPC232S-IR3-HF40-C-DT, which can be exploited by an attacker to cause the device to go down by sending variant protocol signaling...