646 matches found
CVE-2020-26558
Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 through 5.2 may permit a nearby man-in-the-middle attacker to identify the Passkey used during pairing in the Passkey authentication procedure by reflection of the public key and the authentication evidence of the initiati...
SQL Injection Vulnerability in Le Hou Hou House Furnishing Enterprise Marketing System
Ltd. is a professional Internet company focusing on enterprise and business website construction, Baidu promotion, software development, network marketing. There is a SQL injection vulnerability in Le Hou Hou House Decoration and Enterprise Marketing System. Attackers can use the vulnerability to...
SQL Injection Vulnerability in Lucky Dental Management System
Le Yan Ltd. is a company that provides consulting services for dentist opening consultants throughout Taiwan, administrative agency for dentist opening applications, medical space design and decoration, and digital registration system for dentists. A SQL injection vulnerability exists in the Le...
CVE-2020-21588
Buffer overflow in Core FTP LE v2.2 allows local attackers to cause a denial or service crash via a long string in the Setup-Users-Username editbox...
Buffer overflow
Buffer overflow in Core FTP LE v2.2 allows local attackers to cause a denial or service crash via a long string in the Setup-Users-Username editbox...
CVE-2020-21588
CVE-2020-21588 affects Core FTP LE v2.2. The issue is a buffer overflow in the Setup->Users->Username editbox that allows a local attacker to cause a denial of service (crash) by supplying a long string. The vulnerability is documented across multiple sources (NVD, Red Hat, CVE lists, CNNVD...
Rubeus - C# Toolset For Raw Kerberos Interaction And Abuses
Rubeus is a C toolset for raw Kerberos interaction and abuses. It is heavily adapted from Benjamin Delpy's Kekeo project CC BY-NC-SA 4.0 license and Vincent LE TOUX's MakeMeEnterpriseAdmin project GPL v3.0 license. Full credit goes to Benjamin and Vincent for working out the hard components of...
ProCaster LE-32F430 GStreamer souphttpsrc libsoup/2.51.3 Stack Overflow Exploit
ProCaster LE-32F430 SmartTV remote code execution exploit that leverages a stack overflow vulnerability in GStreamer souphttpsrc libsoup version 2.51.3. !/bin/sh ProCaster LE-32F430 NotSoSmartTV remote code execution exploit through GStreamer souphttpsrc libsoup/2.51.3 HTTP stack overflow...
architectes-le-havre.com Cross Site Scripting vulnerability OBB-1462959
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
le-souvenir-francais.fr Cross Site Scripting vulnerability OBB-1421682
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
le-strade.com Improper Access Control vulnerability OBB-1391307
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
vr-surlepouceinc.com Cross Site Scripting vulnerability OBB-1367523
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
le-guide-loi-duflot.fr Cross Site Scripting vulnerability OBB-1336376
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
le-coin-salon.fr Cross Site Scripting vulnerability OBB-1298440
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
le-beau.co.uk Cross Site Scripting vulnerability OBB-1296374
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2020-15486
An issue was discovered on Dr Trust ECG Pen 2.00.08 devices. Because the Bluetooth LE support is implemented without a requirement for pairing or security, any attacker can access the GATT server of the device and can sniff the data being broadcasted while a measurement is being done. Also, saved...
CVE-2020-15486
CVE-2020-15486 impacts Dr Trust ECG Pen 2.00.08, where Bluetooth LE is implemented without pairing or security. The device’s GATT server is accessible to attackers, who can sniff data broadcast during measurement, extract saved data over Bluetooth, and perform a man-in-the-middle attack to compro...
CVE-2020-15531
Silicon Labs Bluetooth Low Energy SDK before 2.13.3 has a buffer overflow via packet data. This is an over-the-air remote code execution vulnerability in Bluetooth LE in EFR32 SoCs and associated modules running Bluetooth SDK, supporting Central or Observer roles...
Remote code execution
Silicon Labs Bluetooth Low Energy SDK before 2.13.3 has a buffer overflow via packet data. This is an over-the-air remote code execution vulnerability in Bluetooth LE in EFR32 SoCs and associated modules running Bluetooth SDK, supporting Central or Observer roles...
CVE-2020-15531
CVE-2020-15531 : Silicon Labs Bluetooth Low Energy SDK (pre-2.13.3) contains a buffer overflow in packet data, enabling an over-the-air remote code execution on EFR32 SoCs/modules running the Bluetooth SDK in Central/Observer roles. Documents confirm a remote-exec impact via crafted Bluetooth LE ...