CVE-2024-23973 Silicon Labs Gecko OS HTTP GET Request Handling Stack-based Buffer Overflow

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Silicon Labs Gecko OS. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of HTTP GET requests. The issue results from the lack of...

CVE-2024-23973

CVE-2024-23973 affects Silicon Labs Gecko OS. The vulnerability stems from improper validation of the length of user-supplied data during HTTP GET handling, leading to a stack-based buffer overflow. This flaw enables network-adjacent attackers to execute arbitrary code in the device’s context wit...

CVE-2024-24731 Silicon Labs Gecko OS http_download Stack-based Buffer Overflow

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Silicon Labs Gecko OS. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the httpdownload command. The issue results from t...

CVE-2024-24731 Silicon Labs Gecko OS http_download Stack-based Buffer Overflow

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Silicon Labs Gecko OS. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the httpdownload command. The issue results from t...

CVE-2024-24731

CVE-2024-24731 affects Silicon Labs Gecko OS. The vulnerability is a stack-based buffer overflow in the http_download command caused by insufficient validation of user-supplied data length, enabling network-adjacent attackers to execute arbitrary code with device context and no authentication. Do...

CVE-2024-46506: Unauthenticated RCE in NetAlertx

The post CVE-2024-46506: Unauthenticated RCE in NetAlertx appeared first on Rhino Security Labs...

CVE-2024-46507: Yeti Platform Server-Side Template Injection (SSTI)

The post CVE-2024-46507: Yeti Platform Server-Side Template Injection SSTI appeared first on Rhino Security Labs...

Lumma Stealer Found in Fake Crypto Tools and Game Mods on GitHub

McAfee Labs uncovers malicious GitHub repositories distributing Lumma Stealer malware disguised as game hacks and cracked software. Learn…...

CVE-2025-24593

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WisdmLabs Edwiser Bridge allows Reflected XSS. This issue affects Edwiser Bridge: from n/a through 3.0.8...

CVE-2025-24701

Server-Side Request Forgery SSRF vulnerability in Bob Chained Quiz chained-quiz allows Server Side Request Forgery.This issue affects Chained Quiz: from n/a through = 1.3.2.9...

CVE-2025-24701

CVE-2025-24701 describes a Server-Side Request Forgery (SSRF) in the Kiboko Labs Chained Quiz WordPress plugin (affecting Chained Quiz versions up to 1.3.2.9). The CVSS 3.1 base score is 4.4 (Medium) with Network attack vector, high attack complexity and high privileges required, no user interact...

CVE-2024-9490

DLL hijacking vulnerabilities, caused by an uncontrolled search path in Silicon Labs 8-bit IDE installer can lead to privilege escalation and arbitrary code execution when running the impacted installer...

CVE-2024-9490

CVE-2024-9490 concerns DLL hijacking due to an uncontrolled search path in Silicon Labs (8‑bit) IDE installer. The vulnerability allows privilege escalation and arbitrary code execution when running the impacted installer. Affected software is the Silicon Labs IDE installer (8‑bit). Root cause is...

CVE-2024-9490 Uncontrolled search path can lead to DLL hijacking in Silicon Labs IDE installer

DLL hijacking vulnerabilities, caused by an uncontrolled search path in Silicon Labs 8-bit IDE installer can lead to privilege escalation and arbitrary code execution when running the impacted installer...

Silicon CP210x VCP Windows installer 代码问题漏洞

Silicon CP210x VCP Windows installer is a CP210x VCP Windows installer from Silicon Corporation. A security vulnerability exists in Silicon CP210x VCP Windows installer that originates from an uncontrolled search path. An attacker could exploit the vulnerability to escalate privileges and execute...

PT-2025-3715 · Silicon · Silicon Labs (8-Bit) Ide Installer

Name of the Vulnerable Software and Affected Versions: Silicon Labs 8-bit IDE installer affected versions not specified Description: The issue is caused by an uncontrolled search path in the Silicon Labs 8-bit IDE installer, leading to DLL hijacking vulnerabilities. These vulnerabilities can resu...

Custom Backdoor Exploiting Magic Packet Vulnerability in Juniper Routers

Enterprise-grade Juniper Networks routers have become the target of a custom backdoor as part of a campaign dubbed J-magic. According to the Black Lotus Labs team at Lumen Technologies, the activity is so named for the fact that the backdoor continuously monitors for a "magic packet" sent by the...

Silicon Labs EmberZNet 访问控制错误漏洞

Silicon Labs EmberZNet is a complete Zigbee protocol package from Silicon Labs, Inc. that contains all the elements required for robust and reliable mesh networking applications on the Silicon Labs Ember platform. An access control error vulnerability exists in Silicon Labs EmberZNet, which stems...

Terraform Labs Founder Do Kwon Extradited to US, Faces 130-Year Sentence

SUMMARY: Do Hyeong Kwon Do Kwon, the 33-year-old co-founder and former CEO of Terraform Labs, has been extradited…...

LDAPNightmare PoC Exploit Crashes LSASS and Reboots Windows Domain Controllers

A proof-of-concept PoC exploit has been released for a now-patched security flaw impacting Windows Lightweight Directory Access Protocol LDAP that could trigger a denial-of-service DoS condition. The out-of-bounds reads vulnerability is tracked as CVE-2024-49113 CVSS score: 7.5. It was addressed ...