CVE-2021-30028

SOOTEWAY Wi-Fi Range Extender v1.5 was discovered to use default credentials the admin password for the admin account to access the TELNET service, allowing attackers to erase/read/write the firmware remotely...

CVE-2021-30028

SOOTEWAY Wi-Fi Range Extender v1.5 was discovered to use default credentials the admin password for the admin account to access the TELNET service, allowing attackers to erase/read/write the firmware remotely...

CVE-2021-30028

SOOTEWAY Wi-Fi Range Extender v1.5 is affected by an authorization issue caused by default admin credentials for the TELNET service, enabling remote erasure/reading/writing of firmware. Impact: unauthorized firmware access and modification. Root cause: use of default admin password for TELNET. Af...

SOOTEWAY Wi-Fi Range Extender 授权问题漏洞

SOOTEWAY Wi-Fi Range Extender is a Wi-Fi Range Extender from SOOTEWAY. SOOTEWAY Wi-Fi Range Extender v1.5 suffers from an authorization issue vulnerability that stems from the use of default credentials administrator password for an administrator account to have access to the TELNET service, whic...

The vulnerability of the cmdline_erase_chars() function in the Vim text editor allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the cmdlineerasechars function in the Vim text editor is related to the issue of writing operations beyond the buffer’s boundaries into memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a service failure using a specially created...

Trend Micro Maximum Security 后置链接漏洞

Trend Micro Maximum Security is a set of computer security protection software from Trend Micro. The software includes virus detection, malware protection, and authentication protection. Trend Micro Maximum Security suffers from a back-link vulnerability that originates from an insecure link trac...

AZL-9703 CVE-2022-1619 affecting package vim for versions less than 8.2.4925-1

Heap-based Buffer Overflow in function cmdlineerasechars in GitHub repository vim/vim prior to 8.2.4899. This vulnerabilities are capable of crashing software, modify memory, and possible remote execution...

ALPINE-CVE-2022-1619

Heap-based Buffer Overflow in function cmdlineerasechars in GitHub repository vim/vim prior to 8.2.4899. This vulnerabilities are capable of crashing software, modify memory, and possible remote execution...

DEBIAN-CVE-2022-1619

Heap-based Buffer Overflow in function cmdlineerasechars in GitHub repository vim/vim prior to 8.2.4899. This vulnerabilities are capable of crashing software, modify memory, and possible remote execution...

UBUNTU-CVE-2022-1619

Heap-based Buffer Overflow in function cmdlineerasechars in GitHub repository vim/vim prior to 8.2.4899. This vulnerabilities are capable of crashing software, modify memory, and possible remote execution...

CVE-2022-1619

Heap-based Buffer Overflow in function cmdlineerasechars in GitHub repository vim/vim prior to 8.2.4899. This vulnerabilities are capable of crashing software, modify memory, and possible remote execution...

Vim 缓冲区错误漏洞

Vim is a cross-platform text editor. A security vulnerability exists in Vim versions prior to 8.2, which stems from a heap-based buffer overflow in the cmdlineerasechars function...

New Variant of Chinese Gimmick Malware Targeting macOS Users

Researchers have disclosed details of a newly discovered macOS variant of a malware implant developed by a Chinese espionage threat actor known to strike attack organizations across Asia. Attributing the attacks to a group tracked as Storm Cloud, cybersecurity firm Volexity characterized the new...

Lexmark Printer Configuration Wipe Vulnerability (Jan 2022)

The initial admin account setup wizard on Lexmark devices allow unauthenticated access to the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-late...

CVE-2021-44736

The initial admin account setup wizard on Lexmark devices allow unauthenticated access to the “out of service erase” feature...

Design/Logic Flaw

The initial admin account setup wizard on Lexmark devices allow unauthenticated access to the “out of service erase” feature...

CVE-2021-44736

The initial admin account setup wizard on Lexmark devices allow unauthenticated access to the “out of service erase” feature...

Lexmark 授权问题漏洞

Lexmark is a family of printers in the United States. An authorization issue vulnerability exists in Lexmark devices, which arises from the product's initial administrative account setup wizard allowing an unauthenticated user's access to the out-of-service erase function...

PT-2022-12214 · Lexmark · Lexmark Devices

Name of the Vulnerable Software and Affected Versions: Lexmark devices affected versions not specified Description: The initial admin account setup wizard on Lexmark devices allows unauthenticated access to the "out of service erase" feature. This issue may be related to an unprotected API,...

Trend Micro Security 2020 (Consumer) is vulnerable to arbitrary file deletion

Overview Trend Micro Security 2020 Consumer provided by Trend Micro Incorporated contains an arbitrary file deletion vulnerability that could allow an unprivileged user to manipulate the product's secure erase feature to delete files with a higher set of privileges. Trend Micro Incorporated...