Realistic Vulnerabilities of Decoy-State Quantum Key Distribution

We analyze realistic vulnerabilities of decoy-state quantum key distribution QKD arising from the combination of laser damage attack LDA and unambiguous state discrimination USD. While decoy-state QKD is designed to protect against photon-number-splitting and beam-splitting attacks by accurately...

Tenda i12 formSetCfm Buffer Overflow Vulnerability

The Tenda i12 is an enterprise commercial high power AP wireless access point. The Tenda i12 formSetCfm handles a buffer overflow vulnerability in the funcpara1 parameter, which can be exploited by a remote attacker to submit a special request that can crash the application and cause a denial of...

CVE-2024-43650

CVE-2024-43650 affects Iocharger firmware for AC models prior to 24120701. The vulnerability is an authenticated command injection caused by improper neutralization of a special element used in a command, enabling OS command execution as root. The attack can be conducted over the web interface vi...

alpitronic Hypercharger EV charger

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.3 ATTENTION: Exploitable remotely/Low attack complexity Vendor: alpitronic Equipment: Hypercharger EV charger Vulnerability: Use of Default Credentials 2. RISK EVALUATION Successful exploitation of this vulnerability could result in an attacker disabling...

D-Link DIR-2640 安全漏洞

The D-Link DIR-2640 is a high power Wi-Fi router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-2640 that stems from a PrefixLen command injection remote code execution vulnerability...

Electrolink FM/DAB/TV Transmitter Vertical Privilege Escalation

Summary Since 1990 Electrolink has been dealing with design and manufacturing of advanced technologies for radio and television broadcasting. The most comprehensive products range includes: FM Transmitters, DAB Transmitters, TV Transmitters for analogue and digital multistandard operation, Bandpa...

Siemens Energy PLUSCONTROL

1. EXECUTIVE SUMMARY CVSS v3 8.2 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Energy Equipment: PLUSCONTROL Vulnerabilities: Type Confusion, Improper Validation of Specified Quantity in Input, Buffer Access with Incorrect Length Value, Integer Underflow, Improper Handling...

Rockwell Automation PowerFlex 755HiP 20G... (High Power) PowerFlex 750-Series via Embedded EtherNet/IP

Binary data 754702.prm...

Aerotech Npaq 6U High-Power Servo Drives Detection

Binary data 763908.prm...

Aerotech Npaq 6U Servo Drives Detection

Binary data 763925.prm...

CERIO 11nbg 2.4Ghz High Power Wireless Router (pekcmd) Rootshell Backdoors

Summary CERIO's DT-300N A4 eXtreme Power 11n 2.4Ghz 2x2 High Power Wireless Access Point with built-in 10dBi patch antennas and also supports broadband wireless routing. DT-300N A4's wireless High Power design enhances the range and stability of the device's wireless signal in office and home...