CVE-2022-22681

Session fixation vulnerability in access control management in Synology Photo Station before 6.8.16-3506 allows remote attackers to bypass security constraint via unspecified vectors...

SourceCodester Online Railway Reservation System SQL注入漏洞（CNVD-2022-53357）

Sourcecodester Online Railway Reservation system is a web-based application that provides an online platform for rail or train station passengers or would-be passengers to view their schedules and reserve seats. Online Railway Reservation System v1.0 version contains a SQL injection vulnerability...

GSD-2022-1003092 mt76: fix tx status related use-after-free race on station removal

mt76: fix tx status related use-after-free race on station removal This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by commit...

GSD-2022-1002761 mt76: fix tx status related use-after-free race on station removal

mt76: fix tx status related use-after-free race on station removal This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

QNAP Photo Station Multiple Vulnerabilities (NAS-201911-25)

The version of Photo Station running on the remote QNAP NAS is affected by multiple vulnerabilities, as follows: - This improper input validation vulnerability allows remote attackers to inject arbitrary code to the system. To fix the vulnerability, QNAP recommend updating QTS to their latest...

Russian Radio Station Hacked to Broadcast Ukrainian National Anthem

By Waqas The Kommersant FMs online bulletin was suddenly interrupted to play Ukraines anthem and anti-war songs by anti-war hackers… This is a post from HackRead.com Read the original post: Russian Radio Station Hacked to Broadcast Ukrainian National Anthem...

QNAP Photo Station Path Traversal Vulnerability

QNAP devices running Photo Station contain an external control of file name or path vulnerability allowing remote attackers to access or modify system files...

QNAP Photo Station Improper Access Control Vulnerability

QNAP NAS devices running Photo Station contain an improper access control vulnerability allowing remote attackers to gain unauthorized access to the system...

QNAP Photo Station Path Traversal Vulnerability

QNAP devices running Photo Station contain an external control of file name or path vulnerability allowing remote attackers to access or modify system files...

The vulnerability of the microprogramming software for the Desigo DXR2, PXC3, PXC4, and PXC5 station modules lies in the absence of authentication attempt limits, allowing a intruder to gain unauthorized access to protected information.

The vulnerability of the microprogramming software for the Desigo DXR2, PXC3, PXC4, and PXC5 station modules is related to the absence of authentication attempt limits. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information by...

BD Pyxis 安全漏洞

BD Pyxis is a medication management system from Biddy Medical BD. A security vulnerability exists in BD Pyxis that stems from the use of default credentials. The following products and versions are affected: BD Pyxis™ Anesthesia Station ES, BD Pyxis™ CIISafe, BD Pyxis™ Logistics, BD Pyxis™ MedBan...

QNAP QTS Multiple Vulnerabilities in File Station (QSA-20-01)

The version of QNAP QTS installed on the remote host is affected by multiple vulnerabilities, as follows: - A vulnerability that allows remote attackers to run arbitrary commands. CVE-2018-19949 - Two cross-site scripting XSS vulnerabilities that allow remote attackers to inject malicious code...

QNAP NAS File Station Cross-Site Scripting Vulnerability

A cross-site scripting vulnerability affecting QNAP NAS File Station could allow remote attackers to inject malicious code...

QNAP NAS File Station Command Injection Vulnerability

A command injection vulnerability affecting QNAP NAS File Station could allow remote attackers to run commands...

QNAP NAS File Station Cross-Site Scripting Vulnerability

A cross-site scripting vulnerability affecting QNAP NAS File Station could allow remote attackers to inject malicious code...

Rakuten Mobile Rakuten Casa Trust Management Issue Vulnerability

Rakuten Mobile Rakuten Casa is a small base station from Rakuten Mobile Japan, Inc. A trust management issue vulnerability exists in Rakuten Mobile Rakuten Casa APFV200 and APFV141 versions, which stems from the presence of hard-coded credentials in the application code. An unauthenticated, remot...

Rakuten Mobile Rakuten Casa Access Control Error Vulnerability

Rakuten Mobile Rakuten Casa is a small base station from Rakuten Mobile Japan, Inc. It is used to improve radio wave conditions for users.An access control error vulnerability exists in Rakuten Mobile Rakuten Casa APFV200 version and APFV141 version, which stems from improper access restrictions....

CVE-2022-20115

In broadcastServiceStateChanged of TelephonyRegistry.java, there is a possible way to learn base station information without location permission due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed...

CVE-2022-20115

In broadcastServiceStateChanged of TelephonyRegistry.java, there is a possible way to learn base station information without location permission due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed...

CVE-2022-20115

In broadcastServiceStateChanged of TelephonyRegistry.java, there is a possible way to learn base station information without location permission due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed...