WordPress Flash & HTML5 Video Plugin <= 2.5.34 is vulnerable to Broken Access Control

Software Flash & HTML5 Video Type Plugin Vulnerable versions = 2.5.34 Fixed in 2.5.35 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-7721 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 692106c3e036 Credits Lucio Sá Required...

CVE-2024-44815

Vulnerability in Hathway Skyworth Router CM5100 v.4.1.1.24 allows a physically proximate attacker to obtain user credentials via SPI flash Firmware W25Q64JV...

CVE-2024-44815

Vulnerability in Hathway Skyworth Router CM5100 v.4.1.1.24 allows a physically proximate attacker to obtain user credentials via SPI flash Firmware W25Q64JV...

Skyworth Router CM5100 安全漏洞

The Skyworth Router CM5100 is a single-band router with N300 speed from Skyworth China. A security vulnerability exists in the Hathway Skyworth Router CM5100 version 4.1.1.24, which originates from a vulnerability that allows a physically proximate attacker to obtain user credentials via SPI flas...

CVE-2024-44815

Vulnerability in Hathway Skyworth Router CM5100 v.4.1.1.24 allows a physically proximate attacker to obtain user credentials via SPI flash Firmware W25Q64JV...

CVE-2024-44815

CVE-2024-44815 affects Hathway Skyworth Router CM5100 v4.1.1.24. The issue allows a physically proximate attacker to obtain user credentials through the SPI flash memory (W25Q64JV). According to the sources, the vulnerability exposes credentials via firmware storage exposed on the SPI flash, with...

CVE-2024-44815

Vulnerability in Hathway Skyworth Router CM5100 v.4.1.1.24 allows a physically proximate attacker to obtain user credentials via SPI flash Firmware W25Q64JV...

PT-2024-31263 · Hathway +1 · Hathway Skyworth Router Cm5100 +1

Name of the Vulnerable Software and Affected Versions: Hathway Skyworth Router CM5100 version 4.1.1.24 Description: The issue allows a physically proximate attacker to obtain user credentials via SPI flash Firmware W25Q64JV. This can lead to the exposure of sensitive information. Recommendations:...

OESA-2024-2109 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: f2fs: let's avoid panic if extenttree is not created This patch avoids the below panic. pc : lookupextenttree+0xd8/0x760 lr : f2fsdowritedatapage+0x104/0x87c sp ...

CVE-2024-39278

Credentials to access device configuration information stored unencrypted in flash memory. These credentials would allow read-only access to network configuration information and terminal configuration data...

CVE-2024-39278

Credentials to access device configuration information stored unencrypted in flash memory. These credentials would allow read-only access to network configuration information and terminal configuration data...

CVE-2024-39278

CVE-2024-39278 affects Hughes WL3000 Fusion Software (versions prior to 2.7.0.10). The issue arises from credentials used to access device configuration information being stored unencrypted in flash memory, allowing read-only access to network and terminal configuration data. According to connect...

CVE-2024-39278 Hughes Network Systems Insufficiently Protected Credentials

Credentials to access device configuration information stored unencrypted in flash memory. These credentials would allow read-only access to network configuration information and terminal configuration data...

CVE-2024-39278 Hughes Network Systems Insufficiently Protected Credentials

Credentials to access device configuration information stored unencrypted in flash memory. These credentials would allow read-only access to network configuration information and terminal configuration data...

PT-2024-28417 · Hughes Network Systems +1 · Wl3000 Fusion +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves credentials to access device configuration information being stored unencrypted in flash memory. These credentials allow read-only...

Hughes WL3000 Fusion Software 安全漏洞

Hughes WL3000 Fusion Software is a hardware software system from Hughes Corporation, USA. A security vulnerability exists in Hughes WL3000 Fusion Software versions prior to 2.7.0.10 that originates from credentials used to access device configuration information stored unencrypted in flash memory...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a deadlock during an update RTC in the scsi: ufs component...

Flash Rosetta JSONP GET/POST Response Disclosure

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'uri' class MetasploitModule 'Flash "Rosetta" JSONP GET/POST Response Disclosure', 'Description' = %q A website that serves a JSONP endpoint that accepts a custo...

Exploit for Out-of-bounds Write in Crucial Mx500_Firmware

CVE-2024-42642 Introduction The device in question is any...

SUSE CVE-2024-44942

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on F2FSINLINEDATA flag in inode during GC syzbot reports a f2fs bug as below: ------------ cut here ------------ kernel BUG at fs/f2fs/inline.c:258! CPU: 1 PID: 34 Comm: kworker/u8:2 Not tainted...