CVE-2024-21780

CVE-2024-21780 affects HOME SPOT CUBE2 (V102 and earlier). The vulnerability is a stack-based buffer overflow triggered by processing a specially crafted command, leading to a denial of service (DoS). The available documents confirm the issue but do not provide explicit exploit details or a teste...

KDDI HOME SPOT CUBE2 Security Vulnerability

KDDI HOME SPOT CUBE2 is a home wireless router from KDDI Japan. A security vulnerability exists in KDDI HOME SPOT CUBE2 version V102 and prior versions. An attacker can exploit the vulnerability to remotely execute code...

KDDI HOME SPOT CUBE2 Security Vulnerability

KDDI HOME SPOT CUBE2 is a home wireless router from KDDI Japan. A security vulnerability exists in KDDI HOME SPOT CUBE2 version V102 and prior versions. An attacker has exploited the vulnerability to cause a denial of service on the system...

PT-2024-19053 · Unknown · Home Spot Cube2

Name of the Vulnerable Software and Affected Versions: HOME SPOT CUBE2 versions V102 and earlier Description: A stack-based buffer overflow vulnerability exists, which may result in a denial of service DoS condition when processing a specially crafted command. The affected products are no longer...

PT-2024-20215 · Unknown · Home Spot Cube2

Name of the Vulnerable Software and Affected Versions: HOME SPOT CUBE2 versions V102 and earlier Description: A heap-based buffer overflow issue exists, allowing arbitrary code execution by processing invalid values. The affected products are no longer supported. Recommendations: For HOME SPOT...

Forma SPOT-LMS 3.2.1 Cross Site Scripting

Title: Forma SPOT-LMS-3.2.1 Cross-site scripting reflected RCE - reset mail vulnerability Author: nu11secur1ty Date: 11.07.2022 Vendor: https://www.spotlms.us/indexmulti.php The software is applied in the demo account: https://www.spotlms-anca-001.ovh/ Reference:...

CVE-2022-33948

HOME SPOT CUBE2 V102 contains an OS command injection vulnerability due to improper processing of data received from DHCP server. An adjacent attacker may execute an arbitrary OS command on the product if a malicious DHCP server is placed on the WAN side of the product...

CVE-2022-33948

HOME SPOT CUBE2 V102 contains an OS command injection vulnerability due to improper processing of data received from DHCP server. An adjacent attacker may execute an arbitrary OS command on the product if a malicious DHCP server is placed on the WAN side of the product...

CVE-2022-33948

HOME SPOT CUBE2 V102 contains an OS command injection vulnerability due to improper processing of data received from DHCP server. An adjacent attacker may execute an arbitrary OS command on the product if a malicious DHCP server is placed on the WAN side of the product...

CVE-2022-33948

HOME SPOT CUBE2 V102 contains an OS command injection vulnerability due to improper processing of data received from DHCP server. An adjacent attacker may execute an arbitrary OS command on the product if a malicious DHCP server is placed on the WAN side of the product...

CVE-2022-33948

CVE-2022-33948 affects KDDI/HOME SPOT CUBE2 V102 and earlier, where an OS command injection arises from improper processing of data received from a DHCP server. An adjacent attacker on the WAN side could trigger arbitrary OS commands on affected devices. Root cause: DHCP data handling flaw leadin...

KDDI HOME SPOT CUBE OS Command Injection Vulnerability

KDDI HOME SPOT CUBE2 is a home wireless router from KDDI Japan. KDDI HOME SPOT CUBE2 is vulnerable to an operating system command injection vulnerability, which stems from data received from a DHCP server not being processed properly. An attacker could use this vulnerability to execute arbitrary...

HOME SPOT CUBE2 vulnerable to OS command injection

Overview HOME SPOT CUBE2 provided by KDDI CORPORATION contains an OS command injection vulnerability CWE-78 due to improper processing of data received from DHCP server. Alice Rose reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warnin...

JVN#41017328: HOME SPOT CUBE2 vulnerable to OS command injection

HOME SPOT CUBE2 provided by KDDI CORPORATION contains an OS command injection vulnerability CWE-78 due to improper processing of data received from DHCP server. Impact An arbitrary OS command may be executed on the product if a malicious DHCP server is placed on the WAN side of the product...

Malicious code in jitsi-spot-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f18e693e8f7db059c741352115c92a94d881931a0082e2a1a1648e43f74cb54 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4033 Malicious code in jitsi-spot-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f18e693e8f7db059c741352115c92a94d881931a0082e2a1a1648e43f74cb54 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

spot-video.it Cross Site Scripting vulnerability OBB-2525684

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

NonUSTStrategy invested assets can be manipulated

Handle cmichel Vulnerability details The NonUSTStrategy.investedAssets computes the value of the strategy by checking the output of a swap from the UST assets to underlying. This essentially uses Curve's UST/underlying spot price which can be manipulated. function investedAssets external view...

SynthVault rewards can be gamed

Handle cmichel Vulnerability details Vulnerability Details The SynthVault.deposit function adds weight for the user that depends on the spot value of the deposit synth amount in BASE. This spot price can be manipulated and the cost of manipulation is relative to the pool's liquidity. However, the...

CVE-2021-27408

The affected product is vulnerable to an out-of-bounds read, which can cause information leakage leading to arbitrary code execution if chained to the out-of-bounds write vulnerability on the Welch Allyn medical device management tools Welch Allyn Service Tool: versions prior to v1.10, Welch Ally...