SQL Injection Vulnerability in the APP of Temperature and Humidity Management Platform of Beijing Guoshangxin Technology Co.

Temperature and humidity management platform APP is a smart hardware application, presenting customers with a convenient and fast natural environment temperature and humidity manipulation role. Ltd. Temperature and humidity management platform APP exists SQL injection vulnerability, attackers can...

GSD-2022-1006969 iio: temperature: ltc2983: allocate iio channels once

iio: temperature: ltc2983: allocate iio channels once This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.77 by commit...

GSD-2022-1006665 iio: temperature: ltc2983: allocate iio channels once

iio: temperature: ltc2983: allocate iio channels once This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.7 by commit...

PT-2022-35224 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.77 Description: The issue is related to the allocation of IIO channels in the Linux Kernel, specifically in the ltc2983 temperature driver. The actual impact and attack plausibility have not yet been prove...

ZKSecurity BIO 3.0.5.0_R Privilege Escalation

ADVISORY INFORMATION Product: ZKSecurity BIO Vendor: ZKTeco Version Affected: 3.0.5.0R CVE: CVE-2022-36634 Vulnerability: User privilege escalation CREDIT This vulnerability was discovered and researched by Caio Burgardt and Silton Santos. INTRODUCTION Based on the hybrid biometric technology and...

Exploit for Authentication Bypass by Capture-replay in Sinilink Xy-Wft1_Firmware

CVE-2022-43704 - Channel Accessible by Non-Endpoint/Authentica...

Bluetooth Signals Can Be Used to Track Smartphones, Say Researchers

Researchers warn Bluetooth signals can be used to track device owners via a unique fingerprinting of the radio signal. The technique was presented via a paper presented at IEEE Security and Privacy conference last month by researchers at the University of California San Diego. The paper suggests...

GUI temperature control software Buffer Overflow

The vulnerability of GUI temperature control software relates to the possibility of writing beyond the buffer boundaries when processing configuration files in the .gd1 format. Exploiting this vulnerability allows an attacker to execute arbitrary code...

GUI temperature control software Configuration File Error

The vulnerability of GUI temperature control software is related to errors in processing configuration files .gd1. Exploiting this vulnerability can allow an attacker to gain access to protected information or cause service failures...

GUI temperature control software Memory Use After Free

The vulnerability of GUI temperature control software relates to the use of memory after release, during the processing of configuration files in the .gd1 format. Exploiting this vulnerability allows an attacker to execute arbitrary code...

Friday Squid Blogging: Squid Eating Maine Shrimp

Squid are eating Maine shrimp, causing a collapse of the ecosystem. This seems to be a result of climate change. Maines shrimp fishery has been closed for nearly a decade since the stocks collapse in 2013. Scientists are now saying a species of squid that came into the Gulf of Maine during a...

is designed for calculating Code Execution

The vulnerability of the software is designed for calculating and selecting devices that control the temperature settings of ProClima. This vulnerability is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ProClima Buffer Overflow Code Execution

The vulnerability of the software is designed for calculating and selecting devices that can control the temperature settings of ProClima. This vulnerability is related to the operation of the function that goes beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker t...

ProClima Code Execution

The vulnerability of the software is designed for calculating and selecting control devices for ProClima temperature settings. This is related to an uncontrollable element in the search process. Exploiting this vulnerability can allow a perpetrator to execute arbitrary code...

Fuji Electric Tellus Lite V-Simulator and Fuji Electric V-Server Lite have buffer error vulnerabilities

Fuji Electric Tellus Lite V-Simulator and Fuji Electric V-Server Lite are both products of Fuji Electric Japan.Fuji Electric Tellus Lite V-Simulator is a remote monitoring software for industrial environments. Fuji Electric V-Server Lite is a remote monitoring software for industrial environments...

Vulnerability Spotlight: Multiple vulnerabilities in NZXT computer monitoring software

Carl Hurd of Cisco Talos discovered this vulnerability. Blog by Jon Munshaw. NZXT’s CAM computer monitoring software contains multiple vulnerabilities an attacker could use to carry out a range of malicious actions. CAM provides users information on their machines, such as fan speeds, temperature...

SpeedFan elevation of privilege vulnerability

SpeedFan is a system monitor for Microsoft Windows that reads the temperature, voltage, and fan speed of computer components. speedFan 4.52 is vulnerable to a local elevation of privilege vulnerability. An attacker could exploit this vulnerability to elevate privileges via a specially crafted...

Intel Data Center Manager Console Installer Privilege Escalation

The vulnerability of the software installer for collecting and analyzing data on the performance, power consumption, and temperature of various Intel Data Center Manager Console devices is related to errors in saving permissions. Exploiting this vulnerability can allow attackers to increase their...

Heat Metering and Temperature Control Integration Analysis System suffers from SQL Injection Vulnerability

Shandong Lichuang Technology Co., Ltd, founded in 2001, is a national key high-tech enterprise integrating R&D, production and sales of series of ultrasonic water meters, ultrasonic flow meters, ultrasonic heat meters, smart meters and other energy measuring instruments and intelligent management...

IoT Part 3: Fire!

When we left off in Part 2 of our blog series, we had just identified the max temperature variable and set it to a much higher number. Our celebrations quickly ended, however. Upon flashing the firmware with the new edited max temperature variable, we realized that the printer would get up to...