PT-2021-11180

Name of the Vulnerable Software and Affected Versions: Accfly Wireless Security IR Camera 720P System versions v3.10.73 through v4.15.77 Description: An issue was discovered in the Accfly Wireless Security IR Camera 720P System, where there is an unauthenticated stack-based buffer overflow in the...

PT-2021-11183

Name of the Vulnerable Software and Affected Versions: Accfly Wireless Security IR Camera System 720P versions v3.10.73 through v4.15.77 Description: An issue was discovered in the Accfly Wireless Security IR Camera System 720P, where there is an unauthenticated stack-based buffer overflow in the...

CVE-2020-25785: Out-of-bounds Write

An issue was discovered on Accfly Wireless Security IR Camera System 720P with software versions v3.10.73 through v4.15.77. There is an unauthenticated stack-based buffer overflow in the function CFtpProtocol::FtpLogin during the update procedure...

CVE-2020-25784: Out-of-bounds Write

An issue was discovered on Accfly Wireless Security IR Camera System 720P with software versions v3.10.73 through v4.15.77. There is an unauthenticated stack-based buffer overflow in the function CNetClientGuard::SubOprMsg during incoming message handling...

CVE-2020-25783: Out-of-bounds Write

An issue was discovered on Accfly Wireless Security IR Camera System 720P with software versions v3.10.73 through v4.15.77. There is an unauthenticated heap-based buffer overflow in the function CNetClientTalk::OprMsg during incoming message handling...

PT-2021-11181

Name of the Vulnerable Software and Affected Versions: Accfly Wireless Security IR Camera System 720P versions v3.10.73 through v4.15.77 Description: An issue was discovered in the Accfly Wireless Security IR Camera System 720P, where there is an unauthenticated heap-based buffer overflow in the...

PT-2021-11182

Name of the Vulnerable Software and Affected Versions: Accfly Wireless Security IR Camera System 720P versions v3.10.73 through v4.15.77 Description: The issue is related to an unauthenticated stack-based buffer overflow in the CNetClientGuard::SubOprMsg function during incoming message handling...

Accfly Wireless Security IR Camera System 720P Software Buffer Overflow Vulnerability

Accfly Wireless Security IR Camera System 720P Software is an application from Accfly USA for controlling this camera. A buffer overflow vulnerability exists in Accfly Wireless Security IR Camera System 720P Software versions v3.10.73 through v4.15.77, which stems from an unauthenticated...

Exploit for Out-of-bounds Write in Accfly 720P_Firmware

PoC exploit for CVE-2020-25782, CVE-2020-25783, CVE-2020-25784,...

CVE-2019-3405

The CVE-2019-3405 issue affects 360F5 firmware 3.1.3.64296 and lower. A third party can craft and send a specific illegal 802.11 Null Data Frame to cause the AP to transmit a deauthentication frame, disconnecting wireless clients and enabling a DoS against the router’s wireless. The available sou...

Kr00k vulnerability (CVE-2019-15126) in Broadcom and Cypress Wi-Fi chips

During the RSA conference of February 26th 2020, researchers Štefan Svorencík and Robert Lipovsky disclosed a vulnerability in the implementation of the wireless egress packet processing of certain Broadcom Wi-Fi chipsets. This vulnerability is referenced as CVE-2019-15126 and could allow an...

This One Time on a Pen Test: Thanks for Sharing Your Wi-Fi

Each year, Rapid7 penetration testers complete hundreds of internally and externally based penetration testing service engagements. This post is part of an ongoing series featuring testimonials of what goes on beneath the hoodie. For more insights, check out our 2020 Under the Hoodie report. For...

Edimax Technology EW-7438RPn-v3 Mini 1.27 - Remote Code Execution Vulnerability

Exploit for hardware platform in category web applications Exploit Title: Edimax Technology EW-7438RPn-v3 Mini 1.27 - Remote Code Execution Exploit Author: Wadeek Hardware Version: EW-7438RPn-v3 Mini Firmware Version: 1.23 / 1.27 Vendor Homepage:...

DEBIAN-CVE-2012-2736

In NetworkManager 0.9.2.0, when a new wireless network was created with WPA/WPA2 security in AdHoc mode, it created an open/insecure network...

CVE-2012-2736

In NetworkManager 0.9.2.0, when a new wireless network was created with WPA/WPA2 security in AdHoc mode, it created an open/insecure network...

Open redirect

In NetworkManager 0.9.2.0, when a new wireless network was created with WPA/WPA2 security in AdHoc mode, it created an open/insecure network...

Amazon's Ring Video Doorbell Lets Attackers Steal Your Wi-Fi Password

Security researchers at Bitdefender have discovered a high-severity security vulnerability in Amazon's Ring Video Doorbell Pro devices that could allow nearby attackers to steal your WiFi password and launch a variety of cyberattacks using MitM against other devices connected to the same network...

SUSE-SU-2019:2859-1 Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP1)

This update for the Linux Kernel 4.12.14-19718 fixes several issues. The following security issues were fixed: - CVE-2019-10220: Fixed a relative path escape in the Samba client module bsc1144903, bsc1153108. - CVE-2019-17133: Fixed a buffer overflow in cfg80211mgdwextgiwessid in...

Eaphammer v1.9.0 - Targeted Evil Twin Attacks Against WPA2-Enterprise Networks

by Gabriel Ryan s0lst1c3gryanatspecterops.io EAPHammer is a toolkit for performing targeted evil twin attacks against WPA2-Enterprise networks. It is designed to be used in full scope wireless assessments and red team engagements. As such, focus is placed on providing an easy-to-use interface tha...

Null pointer dereference

drivers/net/wireless/intel/iwlwifi/pcie/trans.c in the Linux kernel 5.2.14 does not check the allocworkqueue return value, leading to a NULL pointer dereference...