CVE-2022-46338

g810-led 0.4.2, a LED configuration tool for Logitech Gx10 keyboards, contained a udev rule to make supported device nodes world-readable and writable, allowing any process on the system to read traffic from keyboards, including sensitive data...

PT-2022-27827 · G810-Led · G810-Led

Name of the Vulnerable Software and Affected Versions: g810-led version 0.4.2 Description: The issue allows any process on the system to read traffic from keyboards, including sensitive data, due to a udev rule that makes supported device nodes world-readable and writable. This affects a LED...

CVE-2022-46338

g810-led 0.4.2, a LED configuration tool for Logitech Gx10 keyboards, contained a udev rule to make supported device nodes world-readable and writable, allowing any process on the system to read traffic from keyboards, including sensitive data...

led-shop.lt Cross Site Scripting vulnerability OBB-3070085

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Autodeauth - A Tool Built To Automatically Deauth Local Networks

A tool built to automatically deauth local networks Tested on Raspberry Pi OS and Kali Linux Setup $ chmod +x setup.sh $ sudo ./setup.sh Reading package lists... Done Building dependency tree... Done Reading state information... Done 0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded...

CVE-2022-36570

Tenda AC9 V15.03.05.19 was discovered to contain a stack overflow via the time parameter at /goform/SetLEDCfg...

CVE-2022-36570

Tenda AC9 V15.03.05.19 was discovered to contain a stack overflow via the time parameter at /goform/SetLEDCfg...

Tenda AC9 缓冲区错误漏洞

Tenda AC9 is a wireless router from Tenda China. A security vulnerability exists in Tenda AC9 firmware version V15.03.05.19, which stems from its /goform/SetLEDCfg component's manipulation of the parameter time that allows a remote attacker to submit a special request resulting in a stack overflo...

PT-2022-23477 · Tenda · Tenda Ac9

Name of the Vulnerable Software and Affected Versions: Tenda AC9 version 15.03.05.19 Description: A stack overflow issue was discovered via the time parameter at the "/goform/SetLEDCfg" API endpoint. Recommendations: For Tenda AC9 version 15.03.05.19, avoid using the time parameter in the...

CVE-2022-37086

H3C H200 H200V100R004 was discovered to contain a stack overflow via the function AspSetTimingtimeWifiAndLed...

CVE-2022-37086

H3C H200 H200V100R004 was discovered to contain a stack overflow via the function AspSetTimingtimeWifiAndLed...

CVE-2022-36493

H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function SetAPWifiorLedInfoById...

CVE-2022-36498

H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function AspSetTimingtimeWifiAndLed...

CVE-2022-36493

H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function SetAPWifiorLedInfoById...

CVE-2022-36498

H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function AspSetTimingtimeWifiAndLed...

CVE-2022-36468

H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function AspSetTimingtimeWifiAndLed...

CVE-2022-36469

H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function SetAPWifiorLedInfoById...

CVE-2022-36469

H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function SetAPWifiorLedInfoById...

CVE-2022-36468

H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function AspSetTimingtimeWifiAndLed...

Microsoft Uncovers New Post-Compromise Malware Used by Nobelium Hackers

The threat actor behind the SolarWinds supply chain attack has been linked to yet another "highly targeted" post-exploitation malware that could be used to maintain persistent access to compromised environments. Dubbed MagicWeb by Microsoft's threat intelligence teams, the development reiterates...