PT-2021-11373

Name of the Vulnerable Software and Affected Versions: Hamilton Medical AG T1-Ventillator versions 2.2.3 and prior Description: An information disclosure issue in the ventilator allows attackers with physical access to the configuration interface's logs to obtain valid checksums for tampered...

CVE-2020-27278: Use of Hard-coded Credentials

In Hamilton Medical AG,T1-Ventillator versions 2.2.3 and prior, hard-coded credentials in the ventilator allow attackers with physical access to obtain admin privileges for the device’s configuration interface...

CVE-2020-27282: Missing XML Validation

In Hamilton Medical AG,T1-Ventillator versions 2.2.3 and prior, an XML validation vulnerability in the ventilator allows privileged attackers with physical access to render the device persistently unusable by uploading specially crafted configuration files...

PT-2021-11362

Name of the Vulnerable Software and Affected Versions: Hamilton Medical AG T1-Ventillator versions 2.2.3 and prior Description: The issue allows attackers with physical access to obtain admin privileges for the device's configuration interface due to hard-coded credentials in the ventilator...

CVE-2020-27290: Exposure of Sensitive Information to an Unauthorized Actor

In Hamilton Medical AG,T1-Ventillator versions 2.2.3 and prior, an information disclosure vulnerability in the ventilator allows attackers with physical access to the configuration interface's logs to get valid checksums for tampered configuration files...

PT-2021-11366

Name of the Vulnerable Software and Affected Versions: Hamilton Medical AG T1-Ventillator versions 2.2.3 and prior Description: The issue is related to an XML validation vulnerability in the ventilator, allowing privileged attackers with physical access to render the device persistently unusable ...

Hamilton-medical Hamilton-T1 Security Vulnerability

The Hamilton-medical Hamilton-T1 is an industrial control device from Hamilton-medical USA. The Hamilton-medical Hamilton-T1 combines the functionality of a full-featured ICU ventilator with the compactness and ruggedness required for transport. A security vulnerability exists in the...

Hamilton-medical Hamilton-T1 Information Disclosure Vulnerability

The Hamilton-medical Hamilton-T1 is an industrial control device from Hamilton-medical USA. It combines the functionality of a full-featured ICU ventilator with the compactness and ruggedness required for transport Features. An information disclosure vulnerability exists in the Hamilton-T1...

Hamilton-medical Hamilton-T1 Trust Management Issues Vulnerability

The Hamilton-medical Hamilton-T1 is an industrial control device from Hamilton-medical USA. It combines the functionality of a full-featured ICU ventilator with the compactness and ruggedness required for transport Functionality. A trust management issue vulnerability exists in the Hamilton-medic...

OSV-2020-2249 Heap-buffer-overflow in grk::t1_part1::T1Part1::decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28328 Crash type: Heap-buffer-overflow READ Crash state: grk::t1part1::T1Part1::decompress grk::DecompressBlockExec::open grk::T1DecompressScheduler::decompressBlock...

OSV-2020-2228 Heap-buffer-overflow in grk::t1_part1::T1Part1::decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28227 Crash type: Heap-buffer-overflow READ Crash state: grk::t1part1::T1Part1::decompress grk::DecompressBlockExec::open grk::T1DecompressScheduler::decompressBlock...

PT-2020-22159

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow crash. Technical details about the crash include the crash type being a Heap-buffer-overflow WRITE 4. The...

Weak password vulnerability in P-660HW-T1 of Zongqin Communication Equipment Trading (Shanghai) Co.

P-660HW-T1 is a wireless router product of Zongqin Communication Equipment Trading Shanghai Co. The P-660HW-T1 has a weak password vulnerability that can be exploited by an attacker to gain access to the P-660HW-T1 v3 via a An attacker can use this vulnerability to gain access to sensitive...

D-Link DIR-615 T1 20.10 - CAPTCHA Bypass Vulnerability

Exploit for hardware platform in category web applications Exploit Title: D-Link DIR-615 T1 20.10 - CAPTCHA Bypass Exploit Author: huzaifa hussain Vendor Homepage: https://in.dlink.com/ Version: DIR-615 T1 ver:20.10 Tested on: D-LINK ROUTER "MODEL NO: DIR-615" with "FIRMWARE VERSION:20.10" &...

D-Link DIR-615 T1 20.10 - CAPTCHA Bypass

Exploit Title: D-Link DIR-615 T1 20.10 - CAPTCHA Bypass Date: 2019-10-12 Exploit Author: huzaifa hussain Vendor Homepage: https://in.dlink.com/ Version: DIR-615 T1 ver:20.10 Tested on: D-LINK ROUTER "MODEL NO: DIR-615" with "FIRMWARE VERSION:20.10" & "HARDWARE VERSION:T1 CVE: CVE-2019-17525 D-LIN...

CVE-2019-17525

The login page on D-Link DIR-615 T1 20.10 devices allows remote attackers to bypass the CAPTCHA protection mechanism and conduct brute-force attacks...

CVE-2019-17525

The login page on D-Link DIR-615 T1 20.10 devices allows remote attackers to bypass the CAPTCHA protection mechanism and conduct brute-force attacks...

CVE-2019-17525

CVE-2019-17525 concerns the login page of the D-Link DIR-615 T1 with firmware 20.10, where an issue allows remote attackers to bypass CAPTCHA protection and perform brute-force login attempts. The connected sources confirm a CAPTCHA bypass vulnerability on DIR-615 T1 20.10, enabling credential br...

CVE-2019-17525: Improper Restriction of Excessive Authentication Attempts

The login page on D-Link DIR-615 T1 20.10 devices allows remote attackers to bypass the CAPTCHA protection mechanism and conduct brute-force attacks...

PT-2020-9914

Name of the Vulnerable Software and Affected Versions D-Link DIR-615 T1 version 20.10 Description The issue allows remote attackers to bypass the CAPTCHA protection mechanism on the login page, enabling them to conduct brute-force attacks. Recommendations For D-Link DIR-615 T1 version 20.10,...