943 matches found
Buffer Overflow Vulnerability in D-Link DIR-842
The D-Link DIR-842 is a 2.4GHz & 5GHz dual band router. The D-Link DIR-842 suffers from a buffer overflow vulnerability that can be exploited by an attacker to cause a program crash...
Pen Testing Ships. A year in review
Partially driven by the upcoming inclusion of Cyber Security by the IMO International Maritime Organisation, 2019 was a really busy year for maritime security testing at PTP. What can we all learn from a year of evaluating the security of ships? We’ve been involved in all sorts of ship testing,...
Xiaozhi Dual Core Browser suffers from dll hijacking vulnerability
Xiaozhi Duo Browser, a secure dual-core browser with built-in Chromium and IE kernels. Xiaozhi Dual Core Browser suffers from a dll hijacking vulnerability, which can be exploited by attackers to gain server privileges...
2345 Accelerate Browser suffers from dll hijacking vulnerability
2345 Accelerated Browser is a dual-core browser Chromium and IE dual-core promoted by Shanghai 2,3,4,5 Network Technology Co. 2345 Accelerated Browser has a dll hijacking vulnerability, which can be exploited by attackers to load a malicious dll and execute malicious code...
Information disclosure
An issue was found in Philips Veradius Unity, Pulsera, and Endura Dual WAN Router, Veradius Unity 718132 with wireless option shipped between 2016-August 2018, Veradius Unity 718132 with ViewForum option shipped between 2016-August 2018, Pulsera 718095 and Endura 718075 with wireless option shipp...
CVE-2019-18263
Philips Veradius Unity, Pulsera, and Endura Dual WAN Routers (Veradius Unity 718132 with wireless or ViewForum options; Pulsera 718095 and Endura 718075 with wireless or ViewForum options; units shipped 2016–2018) are affected by CVE-2019-18263 due to an inadequately strong encryption scheme. The...
Denial of Service Vulnerability in USR-TCP232-410S
There are people networking to the Internet of Things communication technology as the core, the launch of industrial communications, LPWAN and gateway, Internet of Things module, industrial control machine, network IO controller and other networking communication equipment, including...
CVE-2019-5071
An exploitable command injection vulnerability exists in the /goform/WanParameterSetting functionality of Tenda AC9 Router AC1200 Smart Dual-Band Gigabit WiFi Route AC9V1.0 Firmware V15.03.05.16multiTRU. A specially crafted HTTP POST request can cause a command injection in the DNS1 post...
Cisco Small Business RV Series Routers CVE-2019-15990 Information Disclosure Vulnerability
Description Cisco Small Business RV Series Routers are prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks. This issue is being tracked by Cisco Bug ID CSCvq76840. Technologies Affected Cisco RV016...
Intel PROSet/Wireless WiFi Software Multiple Security Vulnerabilities
Description Intel PROSet/Wireless WiFi Software is prone to multiple security vulnerabilities. A local attacker can leverage these issues to gain elevated privileges, obtain sensitive information or cause denial-of-service conditions. Versions prior to Intel PROSet/Wireless WiFi Software 21.40 ar...
Cisco Small Business RV Series Routers CVE-2019-15957 Remote Command Injection Vulnerability
Description Cisco Small Business RV Series Routers are prone to a remote command injection vulnerability. Successfully exploiting this issue may allow an attacker to execute arbitrary commands with root privileges in the context of the affected device. This issue is being tracked by Cisco Bug IDs...
Logical flaws exist in the dual-control platform for production safety of Beijing Baixinan Technology Co.
Beijing Baixinan Technology Co., Ltd. is a high-tech enterprise dedicated to the construction of informationization, intelligentization and emergency management platform. A logic flaw exists in the dual-control platform of Beijing Baixin Security Technology Co., Ltd. that can be exploited by an...
SQL Injection Vulnerability in Dual-Control Platform for Safety Production of Beijing Baixinan Technology Co.
Beijing Baixinan Technology Co., Ltd. is a high-tech enterprise dedicated to the construction of informationization, intelligentization and emergency management platform. There is a SQL injection vulnerability in the dual-control platform of Beijing Baixin Security Technology Co., Ltd. that can b...
In Hong Kong, Which Side Is Technology On?
Both. Yes, authoritarians have co-opted tech. But the story is far from over...
Intel Dual Band Wireless-AC 8260 vulnerable to denial-of-service (DoS)
Overview Intel Dual Band Wireless-AC 8260 contains a denial-of-service DoS vulnerability CWE-400. Yusuke Ogawa of Cisco Systems G.K. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact An attacker may be able to...
CVE-2018-20812
An information exposure issue where IPv6 DNS traffic would be sent outside of the VPN tunnel when Traffic Enforcement was enabled exists in Pulse Secure Pulse Secure Desktop 9.0R1 and below. This is applicable only to dual-stack IPv4/IPv6 endpoints...
CVE-2018-20812
An information exposure issue where IPv6 DNS traffic would be sent outside of the VPN tunnel when Traffic Enforcement was enabled exists in Pulse Secure Pulse Secure Desktop 9.0R1 and below. This is applicable only to dual-stack IPv4/IPv6 endpoints...
Information disclosure
An information exposure issue where IPv6 DNS traffic would be sent outside of the VPN tunnel when Traffic Enforcement was enabled exists in Pulse Secure Pulse Secure Desktop 9.0R1 and below. This is applicable only to dual-stack IPv4/IPv6 endpoints...
