Beware! Connecting to This Wireless Network Can Break Your iPhone's Wi-Fi Feature

A wireless network naming bug has been discovered in Apple's iOS operating system that effectively disables an iPhone's ability to connect to a Wi-Fi network. The issue was spotted by security researcher Carl Schou, who found that the phone's Wi-Fi functionality gets permanently disabled after...

Huawei eCNS280_TD and ESE620X vESS out-of-bounds read vulnerability

Huawei eCNS280TD is a core network device for Huawei's wireless broadband trunking system. Huawei ESE620X vESS is a virtual enterprise service controller from Huawei, China. Huawei eCNS280TD and ESE620X vESS are vulnerable to an out-of-bounds read vulnerability. An attacker can exploit this...

SQL Injection Vulnerability in the Equipment Management System of Shenzhen Chaohenghui Technology Co.

LELIGHT is the brand of wireless network series products independently developed by Shenzhen Chaohanghui Network Technology Co., Ltd, which covers: intelligent gateway, digital bridge, intelligent wireless router, POE switch and so on. Shenzhen Chaohanghui Equipment Management System has a SQL...

Unauthorized Access Vulnerability in Wireless Signal Extender of Shenzhen Jixiang Tengda Technology Co.

Shenzhen Jixiang Tengda Technology Co., Ltd. is a high-tech enterprise integrating independent research and development, production and sales of network equipment. Shenzhen Jixiang Tengda Technology Co., Ltd Wireless Signal Extender has an unauthorized access vulnerability that can be exploited b...

SUSE-SU-2021:1977-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-33200: Enforcing incorrect limits for pointer arithmetic operations by the BPF verifier could be abused to perform out-of-bounds reads and writes in...

Unbreakable Enterprise kernel-container security update

4.14.35-2047.504.2.el7 - md/raid1: properly indicate failure when ending a failed write request Paul Clements Orabug: 32887159 - video: hypervfb: Add ratelimit on error message Michael Kelley Orabug: 32856879 - Drivers: hv: vmbus: Initialize unloadevent statically Andrea Parri Microsoft Orabug:...

TP-Link TL-WPA4220 信息泄露漏洞

Tp-link TP-Link TL-WPA4220 is a home wireless WiFi bridge that extends wireless signals from China's Tp-link. The device can transmit data at high speed over the line to extend the network to areas that are currently not covered. An information disclosure vulnerability exists in the TP-Link...

Unbreakable Enterprise kernel security update

4.14.35-2047.504.2 - md/raid1: properly indicate failure when ending a failed write request Paul Clements Orabug: 32887159 - video: hypervfb: Add ratelimit on error message Michael Kelley Orabug: 32856879 - Drivers: hv: vmbus: Initialize unloadevent statically Andrea Parri Microsoft Orabug:...

D-Link DIR-818LW has a weak password vulnerability

The D-Link DIR-818LW is a wireless router. A weak password vulnerability exists in the D-Link DIR-818LW. An attacker can use the weak password to log into the backend and obtain sensitive information...

Weak Password Vulnerability in D-Link DIR-600M

The D-Link DIR-600M is a wireless router. A weak password vulnerability exists in D-Link DIR-600M. An attacker can exploit this vulnerability to log into the backend and obtain sensitive information...

Samsung Watch Active2 PlugIn 日志信息泄露漏洞

Samsung Watch Active2 is a smartwatch from the South Korean company Samsung Samsung. Watch Active PlugIn prior to version 2.2.07.21033151 suffers from a security vulnerability that can be exploited by an attacker to disclose the Wi-Fi password of a connection to a user's smartphone in a log...

Samsung Watch Active2 PlugIn 日志信息泄露漏洞

Samsung Watch Active2 is a smartwatch from the South Korean company Samsung Samsung. The Watch Active2 PlugIn version 2.2.08.21033151 previously contained a security vulnerability that could be exploited by an attacker to disclose the Wi-Fi password of a user's smartphone connection via logs...

Command Execution Vulnerability in RG-EW1200G of Riptide Networks

The RG-EW1200G is a dual-band, dual-gigabit wireless router. A command execution vulnerability exists in the RG-EW1200G. An attacker can exploit this vulnerability to gain control of a web server...

Neurax - A Framework For Constructing Self-Spreading Binaries

A framework that aids in creation of self-spreading software Requirements go get -u github.com/redcode-labs/Coldfire go get -u github.com/yelinaung/go-haikunator New in v. 2.0 New wordlist mutators + common passwords by country Improvised passive scanning .FastScan option that makes active scans ...

Weak password vulnerability in D_Link DIR-850L

The DIR-850L is a wireless AC1200 dual-band Gigabit cloud router. DLink DIR-850L has a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

Check Point Response to Wi-Fi FragAttacks in Quantum Spark appliances

Cause Several CVEs were published on Wi-Fi devices under the name FragAttacks. More information about them can be found at: https://www.fragattacks.com/ The list of new CVEs related to wireless security flaws with fragmented and aggregated frames, is relevant to Check Point Quantum Spark wireless...

CVE-2021-0105

Insecure inherited permissions in some IntelR ProSet/Wireless WiFi drivers may allow an authenticated user to potentially enable information disclosure and denial of service via adjacent access...

CVE-2021-0105

Insecure inherited permissions in some IntelR ProSet/Wireless WiFi drivers may allow an authenticated user to potentially enable information disclosure and denial of service via adjacent access...

CVE-2021-0105

Insecure inherited permissions in some IntelR ProSet/Wireless WiFi drivers may allow an authenticated user to potentially enable information disclosure and denial of service via adjacent access...

CVE-2021-20730

Improper access control vulnerability in WSR-1166DHP3 firmware Ver.1.16 and prior and WSR-1166DHP4 firmware Ver.1.02 and prior allows an attacker to obtain configuration information via unspecified vectors...