300 matches found
The vulnerability of microprogrammed network devices from Google Nest Wifi, related to the occurrence of operations outside the buffer in memory, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of microprogrammed network devices from Google Nest Wifi relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...
CVE-2024-40980 drop_monitor: replace spin_lock by raw_spin_lock
In the Linux kernel, the following vulnerability has been resolved: dropmonitor: replace spinlock by rawspinlock tracedropcommon is called with preemption disabled, and it acquires a spinlock. This is problematic for RT kernels because spinlocks are sleeping locks in this configuration, which...
WordPress Canvas-Nest.js plugin <= 1.0.1 - Malicious Polyfill.io Embed vulnerability
Malicious Polyfill.io Embed vulnerability discovered by Sansec.io in WordPress Plugin Canvas-Nest.js versions = 1.0.1...
GHSA-PMH2-WPJM-FJ45 mysql2 vulnerable to Prototype Pollution
Versions of the package mysql2 before 3.9.8 are vulnerable to Prototype Pollution due to improper user input sanitization passed to fields and tables when using nestTables...
Prototype Pollution
Overview mysql2 is a mostly API compatible with mysqljs and supports majority of features. Affected versions of this package are vulnerable to Prototype Pollution due to improper user input sanitization passed to fields and tables when using nestTables. PoC js const mysql = require'mysql2'; const...
SUSE CVE-2024-27025
In the Linux kernel, the following vulnerability has been resolved: nbd: null check for nlaneststart nlaneststart may fail and return NULL. Insert a check and set errno based on other call sites within the same source code...
UBUNTU-CVE-2024-27025
In the Linux kernel, the following vulnerability has been resolved: nbd: null check for nlaneststart nlaneststart may fail and return NULL. Insert a check and set errno based on other call sites within the same source code...
CVE-2024-22004 Unchecked length in Trusted Application on Google Nest Wifi Pro, leading to out of bounds read
Due to length check, an attacker with privilege access on a Linux Nonsecure operating system can trigger a vulnerability and leak the secure memory from the Trusted Application...
Google Nest 缓冲区错误漏洞
Google Nest is a smart home product by Google, an American company. A security vulnerability exists in Google Nest. An attacker exploited the vulnerability to leak the secure memory of a trusted application...
PT-2024-5006 · Google · Google Nest Wifi
Name of the Vulnerable Software and Affected Versions: Google Nest Wifi affected versions not specified Linux Nonsecure operating system affected versions not specified Description: The issue is related to a length check that allows an attacker with privilege access to trigger a vulnerability. Th...
Google Pays $10M in Bug Bounties in 2023
BleepingComputer has the details. Its $2M less than in 2022, but its still a lot. The highest reward for a vulnerability report in 2023 was $113,337, while the total tally since the programs launch in 2010 has reached $59 million. For Android, the worlds most popular and widely used mobile...
CVE-2023-6339
Google Nest WiFi Pro root code-execution & user-data compromise...
Remote code execution
Google Nest WiFi Pro root code-execution & user-data compromise...
CVE-2023-6339 Google Nest WiFi Pro root code-execution & user-data compromise
Google Nest WiFi Pro root code-execution & user-data compromise...
CVE-2023-6339
CVE-2023-6339 affects Google Nest WiFi Pro. The vulnerability allows remote root code execution and user-data compromise over the network with low attack complexity and no privileges required. Impacted by confidentiality, integrity, and availability being high. CVSS metrics show a critical risk (...
CVE-2023-6339 Google Nest WiFi Pro root code-execution & user-data compromise
Google Nest WiFi Pro root code-execution & user-data compromise...
Google Nest Security Breach
Google Nest is a smart home product from Google, Inc. in the United States. Google Nest has a security vulnerability that stems from root code execution and user data leakage...
Google Nest Security Breach
Google Nest is a smart home product from the American company Google Google. Google Nest version 2.58 suffers from a security vulnerability that stems from the ability of a malicious attacker to elevate privileges...
PT-2024-14935 · Google · Google Nest Wifi Pro
Name of the Vulnerable Software and Affected Versions: Google Nest WiFi Pro affected versions not specified Description: A severe issue has been disclosed for Google Nest WiFi Pro, allowing for root code-execution and user-data compromise. The estimated number of potentially affected devices...
