CVE-2020-7862

The CVE-2020-7862 issue concerns the HelpU remote control solution’s agent program, where insufficient input sanitization during communication with the customer process allows an authenticated remote attacker to execute arbitrary commands. Reported as a network-exploitable flaw, the vulnerability...

PT-2021-12683 · Helpu · Helpu

Name of the Vulnerable Software and Affected Versions: HelpU remote control solution affected versions not specified Description: A vulnerability in the agent program of the HelpU remote control solution could allow an authenticated remote attacker to execute arbitrary commands. This issue is due...

HelpU agent 输入验证错误漏洞

HelpU agent is a software from HelpU Korea that uses remote control technology to solve problems by allowing direct viewing of a customer's computer screen. It makes customer support easier and better. A security vulnerability exists in HelpU agent that originated from a vulnerability that could ...

CVE-2021-33530

In Weidmueller Industrial WLAN devices in multiple versions an exploitable command injection vulnerability exists in encrypted diagnostic script functionality of the devices. A specially crafted diagnostic script file can cause arbitrary busybox commands to be executed, resulting in remote contro...

CVE-2021-33532

In Weidmueller Industrial WLAN devices in multiple versions an exploitable command injection vulnerability exists in the iwwebs functionality. A specially crafted diagnostic script file name can cause user input to be reflected in a subsequent iwsystem call, resulting in remote control over the...

CVE-2021-33533

In Weidmueller Industrial WLAN devices in multiple versions an exploitable command injection vulnerability exists in the iwwebs functionality. A specially crafted iwserverip parameter can cause user input to be reflected in a subsequent iwsystem call, resulting in remote control over the device. ...

CVE-2020-7862

A vulnerability in agent program of HelpU remote control solution could allow an authenticated remote attacker to execute arbitrary commands This vulnerability is due to insufficient input santization when communicating customer process...

Advantech WebAccess/SCADA Open Redirect Vulnerability

Advantech WebAccess/SCADA is a suite of SCADA software from Advantech based on a browser architecture. The software supports dynamic graphical displays and real-time data control, and provides the ability to remotely control and manage automation equipment. An open redirection vulnerability exist...

Weak Password Vulnerability in SuperMicro IPMI/iKVM

Supermicro IPMI/iKVM is a management tool developed by Supermicro Computer Corporation for its on-board IPMI card, which can be used to boot up the system remotely, enter the BIOS, etc. for system control. Supermicro IPMI/iKVM suffers from a weak password vulnerability that can be exploited by an...

多款Hewlett Packard Enterprise产品跨站脚本漏洞

Hewlett Packard Enterprise Integrated Lights-Out 4 iLO 4, etc. are products of Hewlett Packard Enterprise. Hewlett Packard Enterprise Integrated Lights-Out 4 is a remote control solution. Hewlett Packard Enterprise Integrated Lights-Out 5 iLO 5 is a remote control solution. Hewlett Packard...

多款Hewlett Packard Enterprise产品跨站脚本漏洞

Hewlett Packard Enterprise Integrated Lights-Out 4 iLO 4 and Hewlett Packard Enterprise Integrated Lights-Out 5 iLO 5 are both products of Hewlett Packard Enterprise. Hewlett Packard Enterprise Integrated Lights-Out 4 iLO 4 and Hewlett Packard Enterprise Integrated Lights-Out 5 iLO 5 are both...

Stalkerware Apps Riddled with Security Bugs

Android stalkerware apps – used to surreptitiously track people’s movements and digital activities – turn out to themselves be rife with security holes that put victims in even danger. Stalkerware can track the GPS location of a victim’s device, record conversations, capture images and snoop on...

6 Unpatched Flaws Disclosed in Remote Mouse App for Android and iOS

As many as six zero-days have been uncovered in an application called Remote Mouse, allowing a remote attacker to achieve full code execution without any user interaction. The unpatched flaws, collectively named 'Mouse Trap,' were disclosed on Wednesday by security researcher Axel Persinger, who...

CVE-2021-30168

The sensitive information of webcam device is not properly protected. Remote attackers can unauthentically grant administrator’s credential and further control the devices...

Design/Logic Flaw

The sensitive information of webcam device is not properly protected. Remote attackers can unauthentically grant administrator’s credential and further control the devices...

CVE-2020-22001

HomeAutomation 3.3.2 suffers from an authentication bypass vulnerability when spoofing client IP address using the X-Forwarded-For header with the local loopback IP address value allowing remote control of the smart home solution...

CVE-2020-22001

HomeAutomation 3.3.2 suffers from an authentication bypass vulnerability when spoofing client IP address using the X-Forwarded-For header with the local loopback IP address value allowing remote control of the smart home solution...

Authentication flaw

HomeAutomation 3.3.2 suffers from an authentication bypass vulnerability when spoofing client IP address using the X-Forwarded-For header with the local loopback IP address value allowing remote control of the smart home solution...

CVE-2020-22001

HomeAutomation 3.3.2 suffers from an authentication bypass vulnerability when spoofing client IP address using the X-Forwarded-For header with the local loopback IP address value allowing remote control of the smart home solution...

Subreddit Home Automation 授权问题漏洞

Subreddit Home Automation is an automation device for the Subreddit community. An automated electric light. Subreddit Home Automation 3.3.2 suffers from a security vulnerability that stems from an authentication bypass vulnerability when spoofing a client IP address using the X-Forwarded-For head...