CVE-2019-20463

CVE-2019-20463 affects Sannce Smart HD Wifi Security Camera EAN 2 950004 595317. A crash and reboot can be triggered by crafted IP traffic, for example sending the string 111111 to UDP port 20188, potentially denying service with repeated traffic. Multiple sources corroborate a network‑level deni...

PT-2021-9028 · Sannce · Sannce Smart Hd Wifi Security Camera

Name of the Vulnerable Software and Affected Versions: Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 affected versions not specified Description: An issue was discovered that allows a crash and reboot to be triggered by crafted IP traffic, as demonstrated by the Nikto vulnerability...

de Consumentenbond Sannce Smart HD Baby Monitor 安全漏洞

The de Consumentenbond Sannce Smart HD Baby Monitor is a webcam from de Consumentenbond in the Netherlands. It provides monitoring functionality. A security vulnerability exists in de Consumentenbond Sannce Smart HD Baby Monitor, which originates from the use of TELNET to control the pan zoom til...

WiZ Connected WiZ Colors A60 安全漏洞

WiZ Connected WiZ Colors A60 is a smart LED light from China-based WiZ Connected. A security vulnerability exists in WiZ Colors A60 1.14.0 that stems from API credentials being logged locally...

de Consumentenbond Sannce Smart HD Baby Monitor 授权问题漏洞

The de Consumentenbond Sannce Smart HD Baby Monitor is a webcam from de Consumentenbond in the Netherlands. It provides monitoring functionality. A security vulnerability exists in the Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices, which can be exploited by an attacker to gain...

de Consumentenbond Sannce Smart HD Baby Monitor 安全漏洞

The de Consumentenbond Sannce Smart HD Baby Monitor is a webcam from de Consumentenbond in the Netherlands. It provides monitoring functionality. A security vulnerability exists in de Consumentenbond Sannce Smart HD Baby Monitor, which can be exploited by attackers to cause the program to crash a...

de Consumentenbond Sannce Smart HD Baby Monitor 安全漏洞

The de Consumentenbond Sannce Smart HD Baby Monitor is a webcam from de Consumentenbond in the Netherlands. It provides monitoring functionality. A security vulnerability exists in the de Consumentenbond Sannce Smart HD Baby Monitor, which can be exploited by a local attacker with a "default"...

ManageEngine OpManager Smart Update Manager RCE

Binary data manageengineopmanagercve-2020-28653.nbin...

SUSE-SU-2021:0998-1 Security update for opensc

This update for opensc fixes the following issues: - CVE-2020-26571: gemsafe GPK smart card software driver stack-based buffer overflow bsc1177380 - CVE-2019-15946: out-of-bounds access of an ASN.1 Octet string in asn1decodeentry bsc1149747 - CVE-2019-15945: out-of-bounds access of an ASN.1...

Security Advisory - Arbitrary Memory Write Vulnerability in Huawei Smart Phone

There is an arbitrary memory write vulnerability in Huawei smart phone when processing file parsing. Due to insufficient validation of the input files, successful exploit could cause certain service abnormal. Vulnerability ID: HWPSIRT-2020-04031 This vulnerability has been assigned a Common...

CVE-2021-3457

An improper authorization handling flaw was found in Foreman. The Shellhooks plugin for the smart-proxy allows Foreman clients to execute actions that should be limited to the Foreman Server. This flaw allows an authenticated local attacker to access and delete limited resources and also causes a...

CVE-2021-20290

An improper authorization handling flaw was found in Foreman. The OpenSCAP plugin for the smart-proxy allows foreman clients to execute actions that should be limited to the Foreman Server. This flaw allows an authenticated local attacker to access and delete limited resources and also causes a...

OpenSC 安全漏洞

OpenSC is an open source smart card tool and middleware. A security vulnerability exists in OpenSC that allows an authenticated, local attacker to access and delete limited resources...

Unauthorized Access Vulnerability in Jinwei Smart Restaurant

Jinwei Smart Restaurant is a free restaurant management software for all kinds of large and small restaurants, as well as fast food, Chinese food, western food, hot pot restaurant and other kinds of catering business. Jinwei Smart Restaurant has an unauthorized access vulnerability that can be...

Linksys EA7500 2.0.8.194281 Cross Site Scripting

Exploit Title: Linksys EA7500 2.0.8.194281 - Cross-Site Scripting Date: 3/24/21 Exploit Author: MiningOmerta Vendor Homepage: https://www.linksys.com/ Version: EA7500 Firmware Version: 2.0.8.194281 CVE: CVE-2012-6708 Tested On: Linksys EA7500 jQuery version 1.7.1 Cross-Site Scripting Vulnerabilit...

Linksys EA7500 2.0.8.194281 - Cross-Site Scripting

Exploit Title: Linksys EA7500 2.0.8.194281 - Cross-Site Scripting Date: 3/24/21 Exploit Author: MiningOmerta Vendor Homepage: https://www.linksys.com/ Version: EA7500 Firmware Version: 2.0.8.194281 CVE: CVE-2012-6708 Tested On: Linksys EA7500 jQuery version 1.7.1 Cross-Site Scripting Vulnerabilit...

Linksys EA7500 2.0.8.194281 - Cross-Site Scripting Vulnerability

Exploit Title: Linksys EA7500 2.0.8.194281 - Cross-Site Scripting Exploit Author: MiningOmerta Vendor Homepage: https://www.linksys.com/ Version: EA7500 Firmware Version: 2.0.8.194281 CVE: CVE-2012-6708 Tested On: Linksys EA7500 jQuery version 1.7.1 Cross-Site Scripting Vulnerability on modern...

ActivIdentity 8.2 - 'ac.sharedstore' Unquoted Service Path

Exploit Title: ActivIdentity 8.2 - 'ac.sharedstore' Unquoted Service Path Exploit Author : SamAlucard Exploit Date: 2021-03-21 Software Version : ActivIdentity 8.2 Vendor Homepage : https://www.hidglobal.com/ Tested on OS: Windows 7 Pro ActivIdentity was Acquired by HID Global in Octuber 2010...

A week in security (March 15 – 21)

Last week on Malwarebytes Labs, our podcast featured Adam Kujawa, who talked us through our 2021 State of Malware report. We cover our own research on: Royal mail parcel scam How your iPhone can tell you if you’re being stalked Careers in cybersecurity ProxyLogon PoC whack-a-mole Teen behind 2020...

[SECURITY] Fedora 34 Update: gnome-disk-utility-40~rc-1.fc34

This package contains the Disks and Disk Image Mounter applications. Disks supports partitioning, file system creation, encryption, fstab/crypttab editing, ATA SMART and other features...