Cisco Small Business 命令注入漏洞

Cisco Small Business is a switch from Cisco. Cisco Small Business suffers from a command injection vulnerability that stems from incorrect authentication provided to the user. An attacker could exploit this vulnerability to perform command injection in an attack on an affected device. The followi...

Ubuntu: Security Advisory (USN-4945-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-1553

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to perform command injection attacks against an affected device. These vulnerabilities are due to improper...

Cisco Small Business 100, 300, and 500 Series Wireless Access Points Command Injection Vulnerabilities

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to perform command injection attacks against an affected device. These vulnerabilities are due to improper...

CVE-2021-1554

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to perform command injection attacks against an affected device. These vulnerabilities are due to improper...

CVE-2021-1555

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to perform command injection attacks against an affected device. These vulnerabilities are due to improper...

CVE-2021-1547

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to perform command injection attacks against an affected device. These vulnerabilities are due to improper...

CVE-2021-1548

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to perform command injection attacks against an affected device. These vulnerabilities are due to improper...

Recycle Your Phone, Sure, But Maybe Not Your Number

Many online services allow users to reset their passwords by clicking a link sent via SMS, and this unfortunately widespread practice has turned mobile phone numbers into de facto identity documents. Which means losing control over one thanks to a divorce, job termination or financial crisis can ...

Bug Exposes Eufy Camera Private Feeds to Random Users

Owners of Eufy home security cameras were warned this week of an internal server bug that allowed strangers to view, pan and zoom in on their home-video feeds for approximately one day. Inversely, customers were also suddenly given access to do the same to other users. The SNAFU, according to...

The vulnerability in the web interface for managing microprogrammed software on Cisco Small Business 100, 300, 500 Series Wireless Access Points allows a attacker to obtain confidential information or execute arbitrary commands.

The vulnerability of the web-based management interface for Cisco Small Business 100, 300, 500 Series Wireless Access Points relates to the lack of measures taken to neutralize special elements used in the operating system teams. Exploiting this vulnerability can allow a remote attacker to obtain...

Stack Overflow Vulnerability in Multiple TPLINK Routers

The TP-Link TL-WDR5620 is a smart router.The TP-Link TL-WDR5650 is a dual-band wireless router.The TP-LINK TL-WR842N is a wireless router.The TP-link TL-WDR7660, TL-WDR7620, TL-WDR7661, TL-WDR7650 and the TL-R470P-AC are all gigabit version routers.TP-link TL-WA933RE is a cellular wireless...

The vulnerability in the web interface for managing microprogrammed software on Cisco Small Business 100, 300, 500 Series Wireless Access Points allows a hacker to obtain confidential information.

The vulnerability of the web-based management interface for Cisco Small Business 100, 300, 500 Series Wireless Access Points relates to the disclosure of information. Exploiting this vulnerability can allow an attacker to obtain confidential information remotely...

Moderate: Red Hat Security Advisory: NetworkManager and libnma security, bug fix, and enhancement update

An update for NetworkManager and libnma is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Moderate: NetworkManager and libnma security, bug fix, and enhancement update

NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its capabilities include managing Ethernet, wireless, mobile broadband WWAN, and PPPoE devices, as well as providing VPN integration with a varie...

TP-Link Archer C1200 Cross-Site Scripting Vulnerability (CNVD-2022-21173)

TP-Link Archer C1200 is a wireless dual-band Gigabit router. a cross-site scripting vulnerability exists in TP-Link Archer. A remote attacker can exploit this vulnerability to execute arbitrary code...

Weak Password Vulnerability in NBG-416N of Zhongqin Communication Equipment Trading (Shanghai) Co.

NBG-416N is a wireless router device launched by Zongqin Communication Equipment Trading Shanghai Co. Ltd. NBG-416N has a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

Multiple vulnerabilities in Cisco Small Business Series Wireless Access Points

Overview Cisco Small Business Series Wireless Access Points provided by Cisco Systems, Inc. contain multiple vulnerabilities listed below. Improper access control CWE-284 - CVE-2021-1400 Command injection CWE-78 - CVE-2021-1401 Shuto Imai of LAC Co., Ltd. reported this vulnerability to IPA...

Weak Password Vulnerability in NETGEAR DGN1000

The NETGEAR DGN1000 is a wireless router. A weak password vulnerability exists in the NETGEAR DGN1000. An attacker can use the weak password to log into the backend and obtain sensitive information...

Intel® PROSet/Wireless WiFi, Intel vPro® CSME WiFi and Killer™ WiFi May 2021 Security Updates

Intel has informed HP of potential security vulnerabilities identified in some Intel® PROSet/Wireless WiFi and Intel vPro® Converged Security and Management Engine CSME WiFi and Killer™ WiFi which may allow denial of service. Intel is releasing firmware and software updates to mitigate these...