CVE-2024-20810

Samsung Mobile devices with Smart Suggestions are affected by CVE-2024-20810 (implicit intent hijacking). The vulnerability arises in Smart Suggestions prior to the SMR Feb-2024 Release 1, enabling local attackers to obtain sensitive information. Affected version details are consistently reported...

Hardcoded credentials

D-LINK Go-RT-AC750 GORTAC750A1FWv101b03 has a hardcoded password for the Alphanetworks account, which allows remote attackers to obtain root access via a telnet session...

Buffer overflow

Buffer overflow in SLP attribute request process of Office Multifunction Printers and Laser Printers which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.: Satera LBP670C Series/Satera MF750C Series firmware v03.07 and...

Design/Logic Flaw

Hardy Barth cPH2 eCharge Ladestation v1.87.0 and earlier is vulnerable to Execution with Unnecessary Privileges...

Design/Logic Flaw

Intelbras Roteador ACtion RF 1200 1.2.2 esposes the Password in Cookie resulting in Login Bypass...

Sql injection

xmall v1.1 was discovered to contain a SQL injection vulnerability via the orderDir parameter...

Buffer overflow

Buffer overflow in CPCA PDL Resource Download process of Office Multifunction Printers and Laser Printers which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.: Satera LBP670C Series/Satera MF750C Series firmware v03.07...

Buffer overflow

Buffer overflow in CPCA Color LUT Resource Download process of Office Multifunction Printers and Laser Printers which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.: Satera LBP670C Series/Satera MF750C Series firmware...

Buffer overflow

Buffer overflow in CPCA PCFAX number process of Office Multifunction Printers and Laser Printers which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.:Satera MF750C Series firmware v03.07 and earlier sold in Japan. Colo...

Buffer overflow

Buffer overflow in WSD probe request process of Office Multifunction Printers and Laser Printers which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.: Satera LBP670C Series/Satera MF750C Series firmware v03.07 and...

CVE-2023-6230

CVE-2023-6230 describes a buffer overflow in the Address Book password process during authentication of Canon Office/Small Office Multifunction Printers and Laser Printers. Affected: Satera LBP670C Series, Satera MF750C Series, Color imageCLASS LBP674C/X LBP1333C, i-SENSYS LBP673Cdw/C1333P/ MF750...

CVE-2023-6229

CVE-2023-6229 corresponds to a buffer overflow in the CPCA PDL Resource Download path of Canon Office/MFP and Laser Printers. Affected firmware is v03.07 and earlier across multiple product lines (e.g., Satera MF750C, Color imageCLASS LBP674C, i-SENSYS MF750C series, MF1333 etc.) with regional va...

Information disclosure

An issue in the PowerOffWidgetReceiver function of Super Reboot Root Recovery v1.0.3 allows attackers to arbitrarily reset or power off the device via a crafted intent...

CVE-2023-47354

CVE-2023-47354 affects Super Reboot (Root) Recovery v1.0.3, where the PowerOffWidgetReceiver function can be triggered by a crafted Intent to arbitrarily reset or power off the device. Multiple connected sources (NVD, Red Hat, CVE listings) describe the issue and attribute an attack vector of LOC...

CVE-2024-24398

Stimulsoft Dashboard.JS contains a Directory Traversal vulnerability in the Save function’s fileName parameter, enabling remote arbitrary code execution. Affected versions include before 2024.1.2 (and variants noted in multiple advisories, e.g., before 2024.1.2/1.2 and before 2024.1.3 in separate...

CVE-2024-24001

CVE-2024-24001 affects jshERP v3.3 and is a SQL Injection in the internal API path com.jsh.erp.controller.DepotHeadController.findallocationDetail() via com.jsh.erp.utils.BaseResponseInfo. The vulnerability allows an attacker to craft a malicious payload to bypass protection mechanisms. Impact in...

CVE-2023-47353

IMOU GO v1.0.11 is affected by CVE-2023-47353 due to the com.oneed.dvr.service.DownloadFirmwareService component, which allows an attacker to force the download of arbitrary files. The CVE notes network exposure with low attack complexity, requiring user interaction, and impact on confidentiality...

CVE-2024-22520

CVE-2024-22520 affects Dronetag Drone Scanner 1.5.2. The issue allows an attacker to impersonate other drones by transmitting crafted data packets, per Red Hat, NVD, CNNVD and related sources. The CVSS v3.1 metrics indicate a NETWORK attack vector, LOW attack complexity, no privileges required, a...

CVE-2023-47022

CVE-2023-47022 affects NCR Terminal Handler v1.5.1: Insecure Direct Object Reference allows an unprivileged user to edit the audit logs and can lead to CSV injection. A PT-2024-13399 entry additionally indicates a remote attacker could execute arbitrary code via a crafted payload parameter. The d...

CVE-2024-24000

CVE-2024-24000 affects jshERP v3.3. The vulnerability arises in the jshERP-boot/systemConfig/upload endpoint, which does not validate the uploaded file type and allows the biz parameter to be spliced into the upload path, enabling arbitrary file uploads with controllable paths. Reported impact is...