Lucene search
+L

319 matches found

Packet Storm News
Packet Storm News
added 2025/05/13 12:0 a.m.8 views

Cryptologic Techniques and Associated Risks in Public and Private Security. an Italian and European Union Perspective with an Overview of the Current Legal Framework

This article examines the evolution of cryptologic techniques and their implications for public and private security, focusing on the Italian and EU legal frameworks. It explores the roles of cryptography, steganography, and quantum technologies in countering cybersecurity threats, emphasising th...

6.9AI score
Exploits0
RedhatCVE
RedhatCVE
added 2025/04/25 8:57 p.m.11 views

CVE-2025-1050

Sonos Era 300 Out-of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Sonos Era 300 speakers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of...

8.8CVSS7.9AI score0.00391EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/04/25 8:57 p.m.10 views

CVE-2025-1049

Sonos Era 300 Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Sonos Era 300 speakers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...

8.8CVSS7.9AI score0.00389EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/04/25 8:54 p.m.11 views

CVE-2025-1048

Sonos Era 300 Speaker libsmb2 Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos Era 300 speakers. Authentication is not required to exploit this vulnerability. The specific flaw...

8.8CVSS7.8AI score0.00523EPSS
Exploits0References3
OSV
OSV
added 2025/04/23 5:16 p.m.5 views

CVE-2025-1050

Sonos Era 300 Out-of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Sonos Era 300 speakers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of...

8.8CVSS7.7AI score0.00391EPSS
Exploits0References1
NVD
NVD
added 2025/04/23 5:16 p.m.7 views

CVE-2025-1050

Sonos Era 300 Out-of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Sonos Era 300 speakers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of...

8.8CVSS0.00391EPSS
Exploits0References1
OSV
OSV
added 2025/04/23 5:16 p.m.3 views

CVE-2025-1049

Sonos Era 300 Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Sonos Era 300 speakers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...

8.8CVSS7.7AI score0.00389EPSS
Exploits0References1
OSV
OSV
added 2025/04/23 5:16 p.m.7 views

CVE-2025-1048

Sonos Era 300 Speaker libsmb2 Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos Era 300 speakers. Authentication is not required to exploit this vulnerability. The specific flaw...

8.8CVSS7.7AI score0.00523EPSS
Exploits0References1
NVD
NVD
added 2025/04/23 5:16 p.m.9 views

CVE-2025-1048

Sonos Era 300 Speaker libsmb2 Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos Era 300 speakers. Authentication is not required to exploit this vulnerability. The specific flaw...

8.8CVSS0.00523EPSS
Exploits0References1
NVD
NVD
added 2025/04/23 5:16 p.m.8 views

CVE-2025-1049

Sonos Era 300 Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Sonos Era 300 speakers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...

8.8CVSS0.00389EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/04/23 4:44 p.m.7 views

CVE-2025-1050 Sonos Era 300 Out-of-Bounds Write Remote Code Execution Vulnerability

Sonos Era 300 Out-of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Sonos Era 300 speakers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of...

8.8CVSS7.9AI score0.00391EPSS
Exploits0References1
CVE
CVE
added 2025/04/23 4:44 p.m.53 views

CVE-2025-1050

CVE-2025-1050 describes a remote code execution via an out-of-bounds write in the Sonos Era 300 when processing HLS playlist data. The flaw arises from improper validation of user-supplied data, allowing a network-adjacent attacker (no authentication required) to write past the end of an allocate...

8.8CVSS7.9AI score0.00391EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2025/04/23 4:44 p.m.19 views

CVE-2025-1050 Sonos Era 300 Out-of-Bounds Write Remote Code Execution Vulnerability

Sonos Era 300 Out-of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Sonos Era 300 speakers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of...

8.8CVSS0.00391EPSS
Exploits0References1
CVE
CVE
added 2025/04/23 4:44 p.m.58 views

CVE-2025-1049

CVE-2025-1049 affects Sonos Era 300 speakers. A heap-based buffer overflow in ID3 data processing allows network-adjacent attackers (no authentication) to execute code in the context of the anacapa user. Root cause: insufficient validation of user-supplied data length before heap copy. Public det...

8.8CVSS9.1AI score0.00389EPSS
Exploits0References1Affected Software2
Vulnrichment
Vulnrichment
added 2025/04/23 4:44 p.m.9 views

CVE-2025-1049 Sonos Era 300 Heap-based Buffer Overflow Remote Code Execution Vulnerability

Sonos Era 300 Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Sonos Era 300 speakers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...

8.8CVSS7.9AI score0.00389EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/04/23 4:44 p.m.17 views

CVE-2025-1049 Sonos Era 300 Heap-based Buffer Overflow Remote Code Execution Vulnerability

Sonos Era 300 Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Sonos Era 300 speakers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...

8.8CVSS0.00389EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/04/23 4:44 p.m.23 views

CVE-2025-1048 Sonos Era 300 Speaker libsmb2 Use-After-Free Remote Code Execution Vulnerability

Sonos Era 300 Speaker libsmb2 Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos Era 300 speakers. Authentication is not required to exploit this vulnerability. The specific flaw...

8.8CVSS0.00523EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/04/23 4:44 p.m.9 views

CVE-2025-1048 Sonos Era 300 Speaker libsmb2 Use-After-Free Remote Code Execution Vulnerability

Sonos Era 300 Speaker libsmb2 Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos Era 300 speakers. Authentication is not required to exploit this vulnerability. The specific flaw...

8.8CVSS7.8AI score0.00523EPSS
Exploits0References1
CVE
CVE
added 2025/04/23 4:44 p.m.61 views

CVE-2025-1048

CVE-2025-1048 pertains to Sonos Era 300 speakers, where the/libsmb2 Use-After-Free vulnerability allows network-adjacent attackers to execute arbitrary code without authentication. The flaw arises in SMB data processing due to not validating the existence of an object before operations, enabling ...

8.8CVSS9.1AI score0.00523EPSS
Exploits0References1Affected Software2
CNNVD
CNNVD
added 2025/04/23 12:0 a.m.6 views

Sonos Era 300 缓冲区错误漏洞

Sonos Era 300 is a spatial audio speaker with Dolby Atmos Dolby Atmos from Sonos USA. The Sonos Era 300 suffers from a buffer error vulnerability that stems from unvalidated user data during HLS playlist data processing, which could lead to out-of-bounds writes and remote code execution...

8.8CVSS9AI score0.00391EPSS
Exploits0References2
Rows per page
Query Builder