377 matches found
Crayfish allows Remote Code Execution via Homarus Authorization header
Impact Remote code execution may be possible in web-accessible installations of Homarus in certain configurations. Patches The issue has been patched in islandora/crayfish:4.1.0 Workarounds The exploit requires making a request against the Homarus's /convert endpoint; therefore, the ability to...
CVE-2025-0355
CVE-2025-0355 concerns NEC Aterm devices with a Missing Authentication for Critical Function, allowing an unauthenticated attacker to obtain Wi‑Fi passwords over the network. Affected products and vulnerable versions (from connected JVN entries): WG2600HS (prior to 1.7.2), WF1200CRS (prior to 1.6...
CVE-2025-0355
Missing Authentication for Critical Function vulnerability in NEC Corporation Aterm WG2600HS Ver.1.7.2 and earlier, WF1200CRS Ver.1.6.0 and earlier, WG1200CRS Ver.1.5.0 and earlier, GB1200PE Ver.1.3.0 and earlier, WG2600HP4 Ver.1.4.2 and earlier, WG2600HM4 Ver.1.4.2 and earlier, WG2600HS2 Ver.1.3...
NEC Aterm WX1500HP 操作系统命令注入漏洞
The NEC Aterm WX1500HP is a wireless router from Nippon Electric NEC. An operating system command injection vulnerability exists in NEC Aterm WX1500HP Ver.1.4.2 and earlier and WX3600HP Ver.1.5.3 and earlier, which originates from allowing an attacker to execute arbitrary OS commands over the...
PT-2025-7069
Name of the Vulnerable Software and Affected Versions: Crayfish versions prior to 4.1.0 Description: Remote code execution may be possible in web-accessible installations of Homarus in certain configurations. The exploit requires making a request against the Homarus's "/convert" endpoint. To redu...
Zyxel VMG8825-T50K 安全漏洞
The Zyxel VMG8825-T50K is an Internet access device from China Hopkins Zyxel. A security vulnerability exists in Zyxel VMG8825-T50K V5.50 ABOM.8.4 version C0 and prior versions. An attacker can exploit the vulnerability by sending a specially crafted HTTP POST request to cause the program to deny...
CVE-2019-20461
An issue was discovered on Alecto IVM-100 2019-11-12 devices. The device uses a custom UDP protocol to start and control video and audio services. The protocol has been partially reverse engineered. Based upon the reverse engineering, no password or username is ever transferred over this protocol...
Akamai Secure Internet Access Enterprise ThreatAvert 安全漏洞
Akamai Secure Internet Access Enterprise ThreatAvert Akamai SIA ThreatAvert is a security and personalization service from Akamai, Inc. in the United States. A security vulnerability exists in Akamai Secure Internet Access Enterprise ThreatAvert that stems from incorrect authorization controls fo...
PT-2024-31447 · Akamai · Akamai Sia Threatavert +1
Name of the Vulnerable Software and Affected Versions: Akamai SIA Secure Internet Access Enterprise ThreatAvert versions prior to 19.2.0 Akamai SIA Secure Internet Access Enterprise Apps Portal versions prior to 19.2.0.3 Akamai SIA Secure Internet Access Enterprise Apps Portal versions prior to...
Bohemia and Cannabia Dark Web Markets Taken Down After Joint Police Operation
The Dutch police have announced the takedown of Bohemia and Cannabia, which has been described as the world's largest and longest-running dark web market for illegal goods, drugs, and cybercrime services. The takedown is the result of a collaborative investigation with Ireland, the United Kingdom...
Experts Warn of Critical Unpatched Vulnerability in Linear eMerge E3 Systems
Cybersecurity researchers are warning about an unpatched vulnerability in Nice Linear eMerge E3 access controller systems that could allow for the execution of arbitrary operating system OS commands. The flaw, assigned the CVE identifier CVE-2024-9441, carries a CVSS score of 9.8 out of a maximum...
CVE-2024-27795
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. A camera extension may be able to access the internet...
CVE-2024-27795
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. A camera extension may be able to access the internet...
Apple macOS 安全漏洞
Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS version 15, which originates from a camera extension that may be able to access the Internet...
CVE-2024-27795
CVE-2024-27795 affects macOS Sequoia 15 where a permissions issue could allow a camera extension to access the Internet. Apple fixed this with additional restrictions in Sequoia 15; multiple sources consistently describe it as a permissions restriction issue resolved by a patch. Connected documen...
CVE-2024-27795
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. A camera extension may be able to access the internet...
CVE-2024-27795
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. A camera extension may be able to access the internet...
PT-2024-22039 · Apple · Apple Macos
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15 Description: A permissions issue was addressed with additional restrictions. This issue allows a camera extension to potentially access the internet. Recommendations: For versions prior to 15, update to macOS Sequoi...