Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2021-9452)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9452 advisory. - KVM: do not allow mapping valid but non-reference-counted pages Nicholas Piggin Orabug: 33054089 CVE-2021-22543 CVE-2021-22543 - Input: joydev -...

CVE-2023-30708

Improper authentication in SecSettings prior to SMR Sep-2023 Release 1 allows attacker to access Captive Portal Wi-Fi in Reactivation Lock status...

Authentication flaw

Improper authentication in SecSettings prior to SMR Sep-2023 Release 1 allows attacker to access Captive Portal Wi-Fi in Reactivation Lock status...

CVE-2023-30708

Improper authentication in SecSettings prior to SMR Sep-2023 Release 1 allows attacker to access Captive Portal Wi-Fi in Reactivation Lock status...

CVE-2023-30708

CVE-2023-30708 concerns Samsung devices’ SecSettings prior to SMR Sep-2023 Release 1. The issue is described as an improper authentication flaw that allows an attacker to access the Captive Portal Wi‑Fi while the device is in Reactivation Lock status. Concrete details across connected sources ind...

CVE-2023-30708

Improper authentication in SecSettings prior to SMR Sep-2023 Release 1 allows attacker to access Captive Portal Wi-Fi in Reactivation Lock status...

FreeBSD -- Wi-Fi encryption bypass

Problem Description: The net80211 subsystem would fallback to the multicast key for unicast traffic in the event the unicast key was removed. This would result in buffered unicast traffic being exposed to any stations with access to the multicast key. Impact: As described in the "Framing Frames:...

FreeBSD-SA-23:11.wifi

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-23:11.wifi Security Advisory The FreeBSD Project Topic: Wi-Fi encryption bypass Category: core Module: net80211 Announced: 2023-09-06 Credits: See the paper...

PT-2023-22908 · Unknown · Secsettings

Name of the Vulnerable Software and Affected Versions: SecSettings versions prior to SMR Sep-2023 Release 1 Description: The issue is related to improper authentication in SecSettings, allowing an attacker to access Captive Portal Wi-Fi even when it is in Reactivation Lock status. Recommendations...

NETGEAR Orbi 760 SOAP API Authentication Bypass Vulnerability

The NETGEAR Orbi 760 is a router for NETGEAR's tri-band Wi-Fi Mesh system. The NETGEAR Orbi 760 suffers from an authentication bypass vulnerability for which no detailed vulnerability details have been provided...

A week in security (August 21 - August 27)

Last week on Malwarebytes Labs: Teenage members of Lapsus$ ransomware gang convicted Update now! Google Chrome's first weekly update has arrived Smart lightbulb and app vulnerability puts your Wi-Fi password at risk Malwarebytes acquires Cyrus Security Ivanti Sentry critical vulnerability--don't...

Smart lightbulb and app vulnerability puts your Wi-Fi password at risk

New research highlights another potential danger from IoT devices, with a popular make of smart light bulbs placing your Wi-Fi network password at risk. Researchers from the University of London and Universita di Catania produced a paper explaining the dangers of common IoT products. In this case...

New "Whiffy Recon" Malware Triangulates Infected Device Location via Wi-Fi Every Minute

The SmokeLoader malware is being used to deliver a new Wi-Fi scanning malware strain called Whiffy Recon on compromised Windows machines. "The new malware strain has only one operation. Every 60 seconds it triangulates the infected systems' positions by scanning nearby Wi-Fi access points as a da...

CVE-2023-39405

Vulnerability of out-of-bounds parameter read/write in the Wi-Fi module. Successful exploitation of this vulnerability may cause other apps to be executed with escalated privileges...

CVE-2023-39405

Vulnerability of out-of-bounds parameter read/write in the Wi-Fi module. Successful exploitation of this vulnerability may cause other apps to be executed with escalated privileges...

Design/Logic Flaw

Vulnerability of out-of-bounds parameter read/write in the Wi-Fi module. Successful exploitation of this vulnerability may cause other apps to be executed with escalated privileges...

CVE-2023-39405

Vulnerability of out-of-bounds parameter read/write in the Wi-Fi module. Successful exploitation of this vulnerability may cause other apps to be executed with escalated privileges...

CVE-2023-39405

CVE-2023-39405 is described as an out-of-bounds parameter read/write vulnerability in the Wi‑Fi module of Huawei HarmonyOS. The issue, when exploited, may allow escalation of privileges and cause other apps to be executed with higher privileges. The provided documents identify the affected platfo...

CVE-2023-39405

Vulnerability of out-of-bounds parameter read/write in the Wi-Fi module. Successful exploitation of this vulnerability may cause other apps to be executed with escalated privileges...

PT-2023-26933 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns an out-of-bounds parameter read/write vulnerability in the Wi-Fi module. Successful exploitation of this vulnerability may cause othe...