CVE-2020-9526

Technical details about CVE-2020-9526 are not publicly available in the provided documents. Monitor for updates from vendors and vulnerability databases.

CVE-2020-9525

CS2 Network P2P through 3.x, as used in millions of Internet of Things devices, suffers from an authentication flaw that allows remote attackers to perform a man-in-the-middle attack, as demonstrated by eavesdropping on user video/audio streams, capturing credentials, and compromising devices...

CVE-2020-9525

CVE-2020-9525 affects CS2 Network P2P up through version 3.x used in IoT devices. The connected documents describe an authentication flaw that enables a man-in-the-middle attack, allowing eavesdropping on video/audio streams, credential capture, and device compromise. The root cause is an authent...

Airshare - Cross-platform Content Sharing In A Local Network

Airshare is a Python-based CLI tool and module that lets you transfer data between two machines in a local network, P2P, using Multicast-DNS. It also opens an HTTP gateway for other non-CLI external interfaces. It works completely offline! Built with aiohttp and zeroconf. Checkout the demo...

CVE-2020-9501

Attackers can obtain Cloud Key information from the Dahua Web P2P control in specific ways. Cloud Key is used to authenticate the connection between the client tool and the platform. An attacker may use the leaked Cloud Key to impersonate the client to connect to the platform, resulting in...

CVE-2020-9501

Attackers can obtain Cloud Key information from the Dahua Web P2P control in specific ways. Cloud Key is used to authenticate the connection between the client tool and the platform. An attacker may use the leaked Cloud Key to impersonate the client to connect to the platform, resulting in...

Information disclosure

Attackers can obtain Cloud Key information from the Dahua Web P2P control in specific ways. Cloud Key is used to authenticate the connection between the client tool and the platform. An attacker may use the leaked Cloud Key to impersonate the client to connect to the platform, resulting in...

CVE-2020-9501

Summary: CVE-2020-9501 concerns a vulnerability in the Dahua Web P2P control where attackers can obtain the Cloud Key, which authenticates the client–platform connection. A leaked Cloud Key could allow an attacker to impersonate the client and cause increased consumption of platform server resour...

Tendermint Denial of Service Vulnerability

Tendermint is a Byzantine Fault Tolerant BFT style middleware from Tendermint Inc. in the United States. A denial of service vulnerability exists in Tendermint versions prior to 0.33.3, 0.32.10, and 0.31.12, which stems from the program failing to limit the number of P2P connection requests. An...

CVE-2020-5303

Tendermint before versions 0.33.3, 0.32.10, and 0.31.12 has a denial-of-service vulnerability. Tendermint does not limit the number of P2P connection requests. For each p2p connection, it allocates XXX bytes. Even though this memory is garbage collected once the connection is terminated due to...

Design/Logic Flaw

Tendermint before versions 0.33.3, 0.32.10, and 0.31.12 has a denial-of-service vulnerability. Tendermint does not limit the number of P2P connection requests. For each p2p connection, it allocates XXX bytes. Even though this memory is garbage collected once the connection is terminated due to...

CVE-2020-5303 Denial of service in Tendermint

Tendermint before versions 0.33.3, 0.32.10, and 0.31.12 has a denial-of-service vulnerability. Tendermint does not limit the number of P2P connection requests. For each p2p connection, it allocates XXX bytes. Even though this memory is garbage collected once the connection is terminated due to...

CVE-2020-5303

CVE-2020-5303 affects Tendermint prior to 0.33.3, 0.32.10 and 0.31.12. The issues include a denial-of-service risk from unconstrained P2P connection attempts that allocates memory per connection, potentially causing temporary spikes and OOM, and a memory leak where activeIDs are not reclaimed aft...

Unique P2P Architecture Gives DDG Botnet 'Unstoppable' Status

The coin-mining botnet known as DDG has seen a flurry of activity since the beginning of the year, releasing 16 different updates over the course of the past three months. Most notably, its operators have adopted a proprietary peer-to-peer P2P mechanism that has turned the DDG into a highly...

kernel: rtl_p2p_noa_ie in drivers/net/wireless/realtek/rtlwifi/ps.c in the Linux kernel lacks a certain upper-bound check, leading to a buffer overflow

A flaw was found in the Linux kernel's implementation of the RealTek wireless drivers WiFi-direct or WiFi peer-to-peer driver implementation. When the RealTek wireless networking hardware is configured to accept WiFi-Direct or WiFi P2P connections, an attacker within the wireless network...

bitcoinq (=0.0.1), bitdust-p2p (>=0.0.2 <=0.0.3) +28 more potentially affected by CVE-2020-10108 via twisted (=20.3.0)

twisted PYPI version =20.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - bitcoinq =0.0.1 - bitdust-p2p =0.0.2, =0.3.4, =3.2.2, =0.3.0a0, =0.1.0, =0.2.0, =1.0.0, =0.5.0, =0.9.0, =2.1.0b2, =1.0.2, =1.0.9 - pade =2.2.4 a...

bitcoinq (=0.0.1), bitdust-p2p (>=0.0.2 <=0.0.3) +28 more potentially affected by CVE-2020-10109 via twisted (=20.3.0)

twisted PYPI version =20.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - bitcoinq =0.0.1 - bitdust-p2p =0.0.2, =0.3.4, =3.2.2, =0.3.0a0, =0.1.0, =0.2.0, =1.0.0, =0.5.0, =0.9.0, =2.1.0b2, =1.0.2, =1.0.9 - pade =2.2.4 a...

DDoS attacks in Q4 2019

News overview In the past quarter, DDoS organizers continued to harness non-standard protocols for amplification attacks. In the wake of WS-Discovery, which we covered in the previous report, cybercriminals turned to Apple Remote Management Service ARMS, part of the Apple Remote Desktop ARD...

P2PWIFICAM2 for iOS 10.4.1 - 'Camera ID' Denial of Service (PoC)

Exploit Title: P2PWIFICAM2 for iOS 10.4.1 - 'Camera ID' Denial of Service PoC Discovery by: Ivan Marmolejo Discovery Date: 2020-02-02 Vendor Homepage: https://apps.apple.com/mx/app/p2pwificam2/id663665207 Software Link: App Store for iOS devices Tested Version: 10.4.1 Vulnerability Type: Denial o...

P2PWIFICAM2 For iOS 10.4.1 Denial Of Service

Exploit Title: P2PWIFICAM2 for iOS 10.4.1 - 'Camera ID' Denial of Service PoC Discovery by: Ivan Marmolejo Discovery Date: 2020-02-02 Vendor Homepage: https://apps.apple.com/mx/app/p2pwificam2/id663665207 Software Link: App Store for iOS devices Tested Version: 10.4.1 Vulnerability Type: Denial o...