5406 matches found
posti.ippnet.fi Cross Site Scripting vulnerability OBB-3762622
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Upgrading your Android device? Read this first
Last month, we wrote an article about what to do when upgrading your iPhone. Since then, we've received several requests to do a similar post about Android devices. Providing uniform and easy to follow instructions is a bit harder to do for Android, because there are many differences between make...
CVE-2023-30727
Improper access control vulnerability in SecSettings prior to SMR Oct-2023 Release 1 allows attackers to enable Wi-Fi and connect arbitrary Wi-Fi without User Interaction...
Improper access control
Improper access control vulnerability in SecSettings prior to SMR Oct-2023 Release 1 allows attackers to enable Wi-Fi and connect arbitrary Wi-Fi without User Interaction...
CVE-2023-30727
CVE-2023-30727 describes an improper access control vulnerability in Samsung SecSettings prior to SMR Oct-2023 Release 1. The issue allows an attacker to enable Wi‑Fi and connect to arbitrary networks without user interaction, affecting SecSettings components on affected Samsung mobile devices. T...
CVE-2023-30727
Improper access control vulnerability in SecSettings prior to SMR Oct-2023 Release 1 allows attackers to enable Wi-Fi and connect arbitrary Wi-Fi without User Interaction...
CVE-2023-30727
Improper access control vulnerability in SecSettings prior to SMR Oct-2023 Release 1 allows attackers to enable Wi-Fi and connect arbitrary Wi-Fi without User Interaction...
Design/Logic Flaw
Transient DOS in WLAN Firmware while parsing a NAN management frame...
PT-2023-22929 · Unknown · Secsettings
Name of the Vulnerable Software and Affected Versions: SecSettings versions prior to SMR Oct-2023 Release 1 Description: The issue is related to an improper access control vulnerability. This vulnerability allows attackers to enable Wi-Fi and connect to arbitrary Wi-Fi networks without any user...
CVE-2022-35908
Cambium Enterprise Wi-Fi System Software before 6.4.2 does not sanitize the ping host argument in device-agent...
CVE-2022-35908
Cambium Enterprise Wi-Fi System Software before 6.4.2 does not sanitize the ping host argument in device-agent...
CVE-2022-35908
Cambium Enterprise Wi-Fi System Software before 6.4.2 does not sanitize the ping host argument in device-agent...
Code injection
Cambium Enterprise Wi-Fi System Software before 6.4.2 does not sanitize the ping host argument in device-agent...
CVE-2022-35908
Cambium Enterprise Wi-Fi System Software before 6.4.2 does not sanitize the ping host argument in device-agent...
CVE-2022-35908
The CVE-2022-35908 affects Cambium Enterprise Wi‑Fi System Software prior to 6.4.2. Root cause: the device-agent does not sanitize the ping host argument. Impact is described as high (C, I, A all high) with Network attack vector and no user interaction required. Remediation: upgrade to version 6....
CVE-2022-35908
Cambium Enterprise Wi-Fi System Software before 6.4.2 does not sanitize the ping host argument in device-agent...
Amazon Linux 2 : microvm-kernel (ALASMICROVM-KERNEL-4.14-2023-003)
The version of microvm-kernel installed on the remote host is prior to 4.14.246-200.474. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2MICROVM-KERNEL-4.14-2023-003 advisory. A flaw was found in the Linux kernel's implementation of wireless drivers using the...
HP LaserJet Printers Multiple Vulnerabilities (HPSBPI03574)
The remote HP LaserJet printer is potentially affected by the following vulnerabilities: - Wi-Fi Protected Access WPA and WPA2 allows reinstallation of the Pairwise Transient Key PTK Temporal Key TK during the four-way handshake, allowing an attacker within radio range to replay, decrypt, or spoo...
ASUS RT-AX55 Command Injection Vulnerability
The ASUS RT-AX55 is a dual-band Wi-Fi router from the Chinese company ASUS. A command injection vulnerability exists in ASUS RT-AX55 version v3.0.0.4.386.51598, which stems from the application failing to properly filter construct command special characters, commands, etc. An attacker can exploit...