CVE-2020-16139

A denial-of-service in Cisco Unified IP Conference Station 7937G 1-4-4-0 through 1-4-5-7 allows attackers restart the device remotely through sending specially crafted packets. Note: We cannot prove this vulnerability exists. Out of an abundance of caution, this CVE is being assigned to better...

CVE-2020-16139

A denial-of-service in Cisco Unified IP Conference Station 7937G 1-4-4-0 through 1-4-5-7 allows attackers restart the device remotely through sending specially crafted packets. Note: We cannot prove this vulnerability exists. Out of an abundance of caution, this CVE is being assigned to better...

CVE-2020-16139

Cisco Unified IP Conference Station 7937G versions 1-4-4-0 through 1-4-5-7 are affected by a denial-of-service vulnerability that lets an attacker remotely restart the device by sending specially crafted packets. The issue is described across CVE-2020-16139 sources, including PT-2020-14771, which...

CVE-2020-16138

A denial-of-service issue in Cisco Unified IP Conference Station 7937G 1-4-4-0 through 1-4-5-7 allows attackers to remotely disable the device until it is power cycled. Note: We cannot prove this vulnerability exists. Out of an abundance of caution, this CVE is being assigned to better serve our...

CVE-2020-16138

CVE-2020-16138 concerns Cisco Unified IP Conference Station 7937G (versions 1-4-4-0 to 1-4-5-7). The core issue is a denial-of-service condition that allows remote disruption of the device, potentially disabling it until a power cycle. The connected records corroborate a DoS/offline impact and sh...

CVE-2020-16137

CVE-2020-16137 affects Cisco Unified IP Conference Station 7937G (versions 1-4-4-0 through 1-4-5-7). The connected advisories describe a privilege-escalation vulnerability that could allow an attacker to reset the SSH administrative console credentials or create new elevated-privilege users. Publ...

PT-2020-14770 · Cisco · Cisco Unified Ip Conference Station 7937G

Name of the Vulnerable Software and Affected Versions: Cisco Unified IP Conference Station 7937G versions 1-4-4-0 through 1-4-5-7 Description: A denial-of-service issue allows attackers to remotely disable the device until it is power cycled. The product is end of life and users are advised to...

PT-2020-14771 · Cisco · Cisco Unified Ip Conference Station 7937G

Name of the Vulnerable Software and Affected Versions: Cisco Unified IP Conference Station 7937G versions 1-4-4-0 through 1-4-5-7 Description: A denial-of-service issue allows attackers to restart the device remotely by sending specially crafted packets. The product is end of life and users are...

Black Hat 2020: Satellite Comms Globally Open to $300 Eavesdropping Hack

Satellite internet communications are susceptible to eavesdropping and signal interception by far-flung attackers located in a different continent or country from their victims. And all they need is $300 worth of off-the-shelf equipment to pull it off. That’s the word from James Pavur, an academi...

Hackers Are Building an Army of Cheap Satellite Trackers

NyanSat is an open source ground station that lets you listen in on low-orbit transmissions for about $100 worth of gear...

The vulnerability of the LoRa Basics Station software lies in the use of memory after it is freed, allowing a intruder to execute arbitrary code.

The vulnerability of the LoRa Basics Station software relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code in the MITM Man-In-The-Middle scenario, either through the compromised CUPS server or by modifying settings using...

Credit-Card Skimmer Has Unlikely Target: Microsoft ASP.NET Sites

Researchers have identified a credit-card skimming campaign that’s been active since mid-April that has a rather specific and unusual target: ASP.NET-based websites running on Microsoft Internet Information Services IIS servers. New research from Malwarebytes Labs recently uncovered the campaign,...

Huawei ChangXiang 8 Plus Input Validation Error Vulnerability

Huawei ChangXiang 8 Plus is a smartphone from Chinese company Huawei Huawei. A security vulnerability exists in previous versions of Huawei ChangXiang 8 Plus 9.1.0.136 C00E121R1P6T8, which stems from the program failing to properly handle messages from the base station. An attacker could exploit...

CVE-2020-1837

ChangXiang 8 Plus with versions earlier than 9.1.0.136C00E121R1P6T8 have a denial of service vulnerability. The device does not properly handle certain message from base station, the attacker could craft a fake base station to launch the attack. Successful exploit could cause a denial of signal...

CVE-2020-1837

ChangXiang 8 Plus with versions earlier than 9.1.0.136C00E121R1P6T8 have a denial of service vulnerability. The device does not properly handle certain message from base station, the attacker could craft a fake base station to launch the attack. Successful exploit could cause a denial of signal...

Race condition

ChangXiang 8 Plus with versions earlier than 9.1.0.136C00E121R1P6T8 have a denial of service vulnerability. The device does not properly handle certain message from base station, the attacker could craft a fake base station to launch the attack. Successful exploit could cause a denial of signal...

CVE-2020-1837

ChangXiang 8 Plus with versions earlier than 9.1.0.136C00E121R1P6T8 have a denial of service vulnerability. The device does not properly handle certain message from base station, the attacker could craft a fake base station to launch the attack. Successful exploit could cause a denial of signal...

Henan Zhongyu Network Technology Co., Ltd. station building system SQL injection vulnerability

Henan Zhongyu Network Technology Co., Ltd. is a high-tech company that provides informatization and networking solutions for enterprises, government agencies and individuals. Henan Zhongyu Network Technology Co., Ltd. station building system there are SQL injection vulnerabilities, attackers can...

QNAP QTS Multiple Vulnerabilities (QSA-20-01)

QNAP QTS is prone to multiple vulnerabilities in File Station. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qts"; if...

SQL Injection Vulnerability in Jilin Andu Culture Communication Co.

Jilin Andu Culture Communication Co., Ltd. is a company that provides cultural and artistic exchange planning; computer technology development, technology transfer, technology consulting and technical services. Jilin Andu Culture Communication Co., Ltd. station building system there is a SQL...