Researcher Reveals How Hackers Can Remotely Unlock/Start Honda Cars

By Deeba Ahmed A cybersecurity researcher using the alias Kevin2600 has revealed how hackers can exploit a vulnerability to unlock Honda vehicles. According… This is a post from HackRead.com Read the original post: Researcher Reveals How Hackers Can Remotely Unlock/Start Honda Cars...

Nautilus treadmills security vulnerabilities

Nautilus treadmills is a series of treadmills from Nautilus USA. A security vulnerability exists in Nautilus treadmills versions T616 S/N 100672PRO21140001 through 100672PRO21171980 and T618 S/N 100647PRO21130111 through 100647PRO21183960. An attacker could exploit the vulnerability to cause a...

PT-2022-22939

Name of the Vulnerable Software and Affected Versions Nautilus T616 versions 100672PRO21140001 through 100672PRO21171980 Nautilus T618 versions 100647PRO21130111 through 100647PRO21183960 Description The issue allows physically proximate attackers to cause a denial of service, potentially leading...

Google Android security vulnerabilities

Google Android is a Linux-based open source operating system from Google, Inc. A security vulnerability exists in Google Android, which is caused by an obfuscation proxy in AppRestrictionsFragment.java. The vulnerability is caused by an obfuscated proxy in assertSafeToStartCustomActivity. An...

PT-2022-21076 · Totolink · Totolink T6

Name of the Vulnerable Software and Affected Versions: TOTOLINK T6 version 4.1.9cu.5179 B20201015 Description: A stack overflow issue was discovered in the TOTOLINK T6, affecting the desc, week, sTime, and eTime parameters within the FUN 004133c4 function. Recommendations: For TOTOLINK T6 version...

PT-2022-31777

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.122 Description The issue is related to the ip gre module, where the test checks csum start instead of the transport header. This is an automated ID intended to aid in discovery of potential security...

PT-2022-32114

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.247 Description The issue is related to the ip gre module, where the test checks csum start instead of the transport header. The actual impact and attack plausibility have not yet been proven. Recommendatio...

Espressif ESP-IDF Memory Corruption Vulnerability

Espressif ESP-IDF is an IoT development framework from China Lexin Information Technology Espressif.A memory corruption vulnerability exists in Espressif ESP-IDF, which stems from not checking the SegN field of the Transaction Start PDU, and can be exploited by an attacker during configuration to...

PT-2022-31981

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.198 Description The issue is related to the ip gre module, where it tests csum start instead of the transport header. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-31202

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.15 through v5.17.14 Description The issue is related to the ip gre module, where the test checks csum start instead of the transport header. This is an automated ID intended to aid in the discovery of potential securit...

PT-2022-31521

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.47 Description The issue is related to the ip gre module, where the test checks csum start instead of the transport header. The actual impact and attack plausibility have not yet been proven. Recommendation...

PT-2022-30852

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.4 Description The issue is related to the ip gre module, where the test checks csum start instead of the transport header. This potential security issue was introduced in version v5.15 and is fixed in versi...

CVE-2022-24893

ESP-IDF is the official development framework for Espressif SoCs. In Espressif’s Bluetooth Mesh SDK "ESP-BLE-MESH", a memory corruption vulnerability can be triggered during provisioning, because there is no check for the "SegN" field of the Transaction Start PDU. This can result in memory...

CVE-2022-24893 Espressif Bluetooth Mesh Stack Vulnerable to Out-of-bounds Write leading to memory buffer corruption

ESP-IDF is the official development framework for Espressif SoCs. In Espressif’s Bluetooth Mesh SDK ESP-BLE-MESH, a memory corruption vulnerability can be triggered during provisioning, because there is no check for the SegN field of the Transaction Start PDU. This can result in memory corruption...

Espressif ESP-IDF buffer error vulnerability

Espressif ESP-IDF is an IoT development framework from China Lexin Information Technology Espressif.A memory corruption vulnerability exists in Espressif ESP-IDF, which stems from not checking the SegN field of the Transaction Start PDU, and can be exploited by an attacker during configuration to...

CVE-2022-24893: Out-of-bounds Write

ESP-IDF is the official development framework for Espressif SoCs. In Espressif’s Bluetooth Mesh SDK ESP-BLE-MESH, a memory corruption vulnerability can be triggered during provisioning, because there is no check for the SegN field of the Transaction Start PDU. This can result in memory corruption...

com.jfinal:jfinal-undertow (2.6), com.jfinal:jfinal-weixin (>=3.2, <=3.3) +2 more potentially affected by CVE-2022-33113 via com.jfinal:jfinal (4.9.15)

com.jfinal:jfinal MAVEN version 4.9.15 is affected by a known vulnerability. The following packages have a transitive dependency on com.jfinal:jfinal and may be impacted: - com.jfinal:jfinal-undertow 2.6 - com.jfinal:jfinal-weixin =3.2, =1.0, =1.6.2 - net.dreamlu:mica-weixin 2.1.1 Source cves:...

Malicious code in launcher-start-page (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c26fefa43c2e6dbcc8f19f621f71b06602f1dee3deb4bfa27a4eaad60561d4dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4262 Malicious code in launcher-start-page (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c26fefa43c2e6dbcc8f19f621f71b06602f1dee3deb4bfa27a4eaad60561d4dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in whistle-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a0c9dd0fea7a98b0162f806f87792c62435fd62609fff1b5d05a70e2cc0a777 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...