CVE-2023-31594

CVE-2023-31594 IC Realtime ICIP-P2012T には、不適切なアクセス制御の脆弱性があります。 IC Realtime IP PTZ ドームカメラ ICIP-P2012 ソフトウェアバージョン: 2.420 における認証なしストリーミングチャンネル。 ライブフィード MJPEG は、公開された HTTP チャンネルを介して VLC ネットワークストリームを使用してストリーミングできます。この脆弱性は、顧客の機密性に重大な影響を与え、偵察段階（人物、資産、パスワードなどの特定）で悪用される可能性があります。 概念実証（POC） HTTP...

CVE-2023-31595

CVE-2023-31595 IC Realtime ICIP-P2012T は、オープンポートを介した不適切なアクセス制御（Incorrect Access Control）に対して脆弱です。 IC Realtime IP PTZ ドームカメラ ICIP-P2012 ソフトウェアバージョン: 2.420...

nfc-ic-keys-dict

nfc-ic-keys-dict 2021-05-31 nfcPro.exe 旧バージョンのダウンロード http://www.nsccn.com/web/soft/win/20210531/nfcPro.exe keys for ic: 1D14130D1A0B/000000000000 iCカードのタイプを検出する方法： Google Play ストア = MIFARE Classic Tool = ツール = タグ情報を表示 UID: xxxxx 4 byte RF 技术：ISO/IEC 14443, Type A ATQA: 0004 SAK: 08 ATS: -...

CVE-2026-68214

In the Linux kernel, the following vulnerability has been resolved: media: rtl2832: fix use-after-free in rtl2832remove canceldelayedworksync is called before i2cmuxdeladapters in rtl2832remove. While the cancel waits for any running instance of i2cgatework to finish, it does not prevent the time...

CVE-2026-59776

Missing Cryptographic Step CWE-325 vulnerability exists in certain FeliCa IC chips shipped in or before 2017. If the vulnerability is exploited, information stored in the IC chip may be read or tampered with...

CVE-2026-59776

Missing Cryptographic Step CWE-325 vulnerability exists in certain FeliCa IC chips shipped in or before 2017. If the vulnerability is exploited, information stored in the IC chip may be read or tampered with...

CVE-2026-59776: Missing Cryptographic Step

Missing Cryptographic Step CWE-325 vulnerability exists in certain FeliCa IC chips shipped in or before 2017. If the vulnerability is exploited, information stored in the IC chip may be read or tampered with...

CVE-2026-9838

The ICS Calendar plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'htmltagtitle' parameter in all versions up to, and including, 12.0.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from a race condition in the handling of ICReq requests and queue removal in nvmet-tcp. This...

CVE-2026-43170

A flaw was found in the Linux kernel's USB DWC3 gadget driver. This vulnerability occurs when the dwc3gadgetvbusdraw function is called from an atomic context, which then invokes power management integrated circuit PMIC APIs that may cause the system to sleep. An attacker could exploit this...

CVE-2026-43170

CVE-2026-43170 affects the Linux kernel USB DWC3 gadget driver. The vulnerability arises when dwc3_gadget_vbus_draw() is called from atomic context and may invoke PMIC APIs that sleep, risking kernel panic. The fix moves vbus_draw to a workqueue context, mitigating sleep in atomic operations. Aff...

CVE-2026-31425

In the Linux kernel, the following vulnerability has been resolved: rds: ib: reject FRMR registration before IB connection is established rdsibgetmr extracts the rdsibconnection from conn-ctransportdata and passes it to rdsibregfrmr for FRWR memory registration. On a fresh outgoing connection, ic...

The vulnerability of the Power Management IC microprogramming software in Qualcomm’s embedded chips allows a hacker to trigger memory corruption.

The vulnerability of the Power Management IC microprogramming software in Qualcomm’s embedded chips lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow attackers to cause memory corruption...

CVE-2026-21382 Buffer Copy Without Checking Size of Input in Power Management IC

Memory Corruption when handling power management requests with improperly sized input/output buffers...

CVE-2020-36980 SAntivirus IC 10.0.21.61 - 'SAntivirusIC' Unquoted Service Path

SAntivirus IC 10.0.21.61 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted executable path to inject malicious files in the service binary path, enabling...

CVE-2020-36980

SAntivirus IC 10.0.21.61 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted executable path to inject malicious files in the service binary path, enabling...

PT-2026-5003

SAntivirus IC 10.0.21.61 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted executable path to inject malicious files in the service binary path, enabling...

CVE-2020-36980: Unquoted Search Path or Element

SAntivirus IC 10.0.21.61 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted executable path to inject malicious files in the service binary path, enabling...

CVE-2023-31594

IC Realtime ICIP-P2012T 2.420 is vulnerable to Incorrect Access Control via an exposed HTTP channel using VLC network...

The vulnerability of the software for BLU-IC2 and BLU-IC4 network controllers stems from the presence of a vulnerability in the borrowed component. This vulnerability allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the BLU-IC2 and BLU-IC4 network controllers’ software is related to the presence of vulnerabilities in the borrowed components. Exploiting these vulnerabilities allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected informati...