CVE-2023-22960

Lexmark products through 2023-01-10 have Improper Control of Interaction Frequency...

CVE-2023-22960

Lexmark products through 2023-01-10 have Improper Control of Interaction Frequency...

Design/Logic Flaw

Lexmark products through 2023-01-10 have Improper Control of Interaction Frequency...

CVE-2023-22960

Lexmark products through 2023-01-10 have Improper Control of Interaction Frequency...

CVE-2023-22960

CVE-2023-22960 : Lexmark printer firmware prior to 2023-01-10 is affected by Improper Control of Interaction Frequency, enabling bypass of login brute-force protections. Connected sources indicate exploitation involves the Embedded Web Server interface; impact is limited to authentication bypass ...

Lexmark 安全漏洞

Lexmark is a line of printers in the United States. A security vulnerability exists in Lexmark products version 2023-01-10 and prior versions, which stems from improper control of interaction frequency...

CVE-2020-22662

In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway 200 SCG200 before 3.6.2.0.795, SmartZone 100 SZ-100 before 3.6.2.0.795, SmartZone 300 SZ300 before 3.6.2.0.795, Virtua...

Command injection

In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway 200 SCG200 before 3.6.2.0.795, SmartZone 100 SZ-100 before 3.6.2.0.795, SmartZone 300 SZ300 before 3.6.2.0.795, Virtua...

Design/Logic Flaw

Discourse is an option source discussion platform. Prior to version 2.8.14 on the stable branch and version 3.0.0.beta16 on the beta and tests-passed branches, the number of times a user posted in an arbitrary topic is exposed to unauthorized users through the /u/username.json endpoint. The issue...

CVE-2023-22453 Discourse vulnerable to exposure of user post counts per topic to unauthorized users

Discourse is an option source discussion platform. Prior to version 2.8.14 on the stable branch and version 3.0.0.beta16 on the beta and tests-passed branches, the number of times a user posted in an arbitrary topic is exposed to unauthorized users through the /u/username.json endpoint. The issue...

Groupe Renault ZOE Keyless System 安全漏洞

The Groupe Renault ZOE Keyless System is a vehicle remote keyless system from Groupe Renault France. A security vulnerability exists in the Groupe Renault ZOE Keyless System that stems from the fact that its remote keyless system sends a 433.92 MHz RF signal from the same rolling code set for eac...

81% Increase in Large-Volume DDoS Attacks

Since 2021, distributed denial of service DDoS attacks have trended upwards, both in volume and frequency. Layer 7 DDoS attacks of at least 500,000 requests per second RPS increased 81% in the past year. In addition to greater frequency, attack sizes were larger in 2022 than in 2021. The largest...

multimon-ng 格式化字符串错误漏洞

multimon-ng is a library from the personal developer Elias Önal. It can decode various digital transmission modes commonly found on VHF/UHF radios. A format string error vulnerability exists in multimon-ng, which stems from a problem with the function addch in the file demodflex.c, where...

Electronic Shelf Label 安全漏洞

Electronic Shelf Tags Electronic Shelf Label is a digital label management software from Electronic Shelf Tags, Inc. A security vulnerability exists in the Electronic Shelf Label protocol that stems from its lack of authentication, which allows an attacker to change the value of a label via a 433...

CVE-2022-32592

In cpu dvfs, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07139405; Issue ID: ALPS07139405...

PT-2022-7366 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a possible overflow in the amu fie setup function. The cpufreq get hw max freq function returns the maximum frequency in kHz as an unsigned int, while the freq...

ETHERLED and GAIROSCOPE Attacks Allow Data Exfiltration from Air-gapped PC

By Deeba Ahmed Researchers have demonstrated possibilities in which attackers can use resonance frequency in Gyroscope and network card LEDs to exfiltrate data from air-gapped PC. This is a post from HackRead.com Read the original post: ETHERLED and GAIROSCOPE Attacks Allow Data Exfiltration from...

Bad rhythm: Janet Jackson song resonates poorly with some old hard drives

Janet Jacksons Rhythm Nation music video would have caused quite the commotion back in the old Windows XP days. If youre still running a certain model of an OEM hard drive from the Windows XP days, you may still be liable to experience the same thing today. However, said commotion was not solely...

CVE-2022-38392

Certain 5400 RPM hard drives, for laptops and other PCs in approximately 2005 and later, allow physically proximate attackers to cause a denial of service device malfunction and system crash via a resonant-frequency attack with the audio signal from the Rhythm Nation music video. A reported produ...

CVE-2022-38392

Certain 5400 RPM hard drives, for laptops and other PCs in approximately 2005 and later, allow physically proximate attackers to cause a denial of service device malfunction and system crash via a resonant-frequency attack with the audio signal from the Rhythm Nation music video. A reported produ...