EUVD-2018-4055

Malware in sbrugna...

CVE-2019-11561

The Chuango 433 MHz burglar-alarm product line is vulnerable to a Denial of Service attack. When the condition is triggered, the OV2 base station is unable to process sensor states and effectively prevents the alarm from setting off, as demonstrated by Chuango branded products, and non-Chuango...

Design/Logic Flaw

The Chuango 433 MHz burglar-alarm product line is vulnerable to a Denial of Service attack. When the condition is triggered, the OV2 base station is unable to process sensor states and effectively prevents the alarm from setting off, as demonstrated by Chuango branded products, and non-Chuango...

CVE-2019-11561

The Chuango 433 MHz burglar-alarm product line is vulnerable to a Denial of Service attack. When the condition is triggered, the OV2 base station is unable to process sensor states and effectively prevents the alarm from setting off, as demonstrated by Chuango branded products, and non-Chuango...

Design/Logic Flaw

The Chuango 433 MHz burglar-alarm product line uses static codes in the RF remote control, allowing an attacker to arm, disarm, or trigger the alarm remotely via replay attacks, as demonstrated by Chuango branded products, and non-Chuango branded products such as the Eminent EM8617 OV2 Wifi Alarm...

CVE-2019-9659

The Chuango 433 MHz burglar-alarm product line uses static codes in the RF remote control, allowing an attacker to arm, disarm, or trigger the alarm remotely via replay attacks, as demonstrated by Chuango branded products, and non-Chuango branded products such as the Eminent EM8617 OV2 Wifi Alarm...

CVE-2019-9659

CVE-2019-9659 affects the Chuango 433 MHz burglar-alarm product line, where static RF remote codes enable replay-based arming, disarming, or triggering the alarm. The NVD description confirms the vulnerability stems from fixed code sequences used by the remote controls, allowing an attacker to re...

Eminent EM4544 Cross-Site Scripting Vulnerability

The Eminent EM4544 is a wireless router product from the Dutch company Eminent. A security vulnerability exists in the Eminent EM4544 version 9.10, which originates from the program failing to request the user's current password when setting a new password. An attacker can exploit the vulnerabili...

CVE-2018-12073

An issue was discovered on Eminent EM4544 9.10 devices. The device does not require the user's current password to set a new one within the web interface. Therefore, it is possible to exploit this issue e.g., in combination with a successful XSS, or at an unattended workstation to change the admi...

CVE-2018-12073

An issue was discovered on Eminent EM4544 9.10 devices. The device does not require the user's current password to set a new one within the web interface. Therefore, it is possible to exploit this issue e.g., in combination with a successful XSS, or at an unattended workstation to change the admi...

Design/Logic Flaw

An issue was discovered on Eminent EM4544 9.10 devices. The device does not require the user's current password to set a new one within the web interface. Therefore, it is possible to exploit this issue e.g., in combination with a successful XSS, or at an unattended workstation to change the admi...

CVE-2018-12073

CVE-2018-12073 affects Eminent EM4544 9.10 devices. The web interface does not require the current password to set a new one, allowing an attacker to change the admin password to a chosen value. This can be exploited in conjunction with an XSS vulnerability or at an unattended workstation. Root c...

CVE-2018-12073

An issue was discovered on Eminent EM4544 9.10 devices. The device does not require the user's current password to set a new one within the web interface. Therefore, it is possible to exploit this issue e.g., in combination with a successful XSS, or at an unattended workstation to change the admi...

Multiple IoT Vendors – Multiple Vulnerabilities

Vulnerabilities summary The following advisory describes three 3 vulnerabilities found in the following vendors: Lorex StarVedia Eminent Kraun The vulnerabilities found: Hard-coded credentials Remote command injection 2 It is possible to chain the vulnerabilities and to achieve unauthenticated...

Break through the firewall of the KillFilter-vulnerability warning-the black bar safety net

Alas, the software firewall seems like no one my satisfaction, are relatively weak, consider not all. The domestic firewall is chilling to either DLL injection or not introduction of DLL pure code injection, or TDI Cilent, the domestic firewall get. NDIS hook not to mention that the.. To the poin...