14570 matches found
Denial of Service Vulnerability in TP-Link TL-WDR8690 Easy Show Edition
The TL-WDR8690 Easy Show Edition is a wireless router. A denial of service vulnerability exists in the TP-Link TL-WDR8690 Easy Show Edition. An attacker can exploit the vulnerability to cause a denial of service to the target router and its upper tier operator's router by sending a carefully...
Denial of Service Vulnerability in TP-Link TL-WDR8670 Easy Show Edition
The TL-WDR8670 Easy Show Edition is a wireless router. A denial of service vulnerability exists in the TP-Link TL-WDR8670 Easy Show Edition. An attacker can exploit the vulnerability to cause a denial of service to the target router and its upper tier operator's router by sending a carefully...
Denial of Service Vulnerability in DD-WRT
DD-WRT is a Linux-based wireless routing software released under GPLV2. DD-WRT suffers from a denial of service vulnerability that can be exploited by an attacker to cause a denial of service...
Linux kernel arbitrary code execution vulnerability
The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. An arbitrary code execution vulnerability exists in mwifiexcmd80211adhocstart in...
CVE-2020-36158
mwifiexcmd80211adhocstart in drivers/net/wireless/marvell/mwifiex/join.c in the Linux kernel through 5.10.4 might allow remote attackers to execute arbitrary code via a long SSID value, aka CID-5c455c5ab332...
CVE-2020-36158
mwifiexcmd80211adhocstart in drivers/net/wireless/marvell/mwifiex/join.c in the Linux kernel through 5.10.4 might allow remote attackers to execute arbitrary code via a long SSID value, aka CID-5c455c5ab332...
CVE-2020-36158
mwifiexcmd80211adhocstart in drivers/net/wireless/marvell/mwifiex/join.c in the Linux kernel through 5.10.4 might allow remote attackers to execute arbitrary code via a long SSID value, aka CID-5c455c5ab332...
Qualcomm Wlan Firmware Buffer Error Vulnerability
Qualcomm Wlan Firmware is a Wlan support firmware from Qualcomm Incorporated USA. A buffer error vulnerability exists in Qualcomm WLAN Firmware that originates from a buffer over-read that occurs if the length of the IE is less than the length of the accessed frame pointer when processing a...
Qualcomm Wlan Firmware Input Validation Error Vulnerability
Qualcomm Wlan Firmware is a Wlan support firmware from Qualcomm Incorporated. The Qualcomm Wlan Firmware suffers from an input validation error vulnerability that arises from time bitmap length and bit duration fields not being properly validated...
Qualcomm Qualcomm Wlan Firmware Buffer Error Vulnerability
Qualcomm Wlan Firmware is a Bluetooth support firmware from Qualcomm, Inc. A buffer error vulnerability exists in Qualcomm WLAN Firmware, which results in a buffer over-read due to a failure to check the length of incoming messages. The following products and versions are affected: AQT1000, AR803...
Qualcomm Wlan Firmware Buffer Error Vulnerability
Qualcomm Wlan Firmware is a Wlan support firmware from Qualcomm Incorporated USA. A buffer error vulnerability exists in Qualcomm WLAN Firmware, which arises from a lack of checking of body and header lengths during WLAN frame parsing, which could result in out-of-bounds reads. The following...
Qualcomm Wlan Hal Input Validation Error Vulnerability
Qualcomm Wlan Hal is a Bluetooth support firmware from Qualcomm Incorporated. APQ8096AU, AQT1000, AR7420, AR8031, AR8035, AR8151, AR9380, CSR6030, CSR8811, CSRA6620, CSRA6640, CSRB31024, IPQ4018, IPQ4019, IPQ4028, IPQ4029. ipq5010, ipq5018, ipq6000, ipq6005, ipq6010, ipq6018, ipq6028, ipq8064,...
Cross-Site Scripting Vulnerability in Multiple Netgear Products
Netgear NETGEAR R8900 and others are products of Netgear, Inc.NETGEAR R8900 is a wireless router.NETGEAR R9000 is a wireless router.NETGEAR XR500 is a wireless router. A cross-site scripting vulnerability exists in Certain NETGEAR devices and affects the following products and versions: D7800...
Mimosa Cloud. Invite friends, not hackers
TL;DR Global wireless network provider had an IDOR in their cloud management platform Anyone can create an account, anyone can upgrade that account to take control of anyone else’s devices Excellent VDP, responded to promptly Fixed in ONE WORKING DAY! Other vendors can learn from Mimosa Who? Mimo...
Cisco IOS XE Software Wireless Controller for the Catalyst 9000 Family WLAN Local Profiling DoS (cisco-sa-dclass-dos-VKh9D8k3)
According to its self-reported version, Cisco IOS XE is affected by a Denial of Service vulnerability in the WLAN Local Profiling feature of Cisco IOS XE Wireless Controller Software for the Cisco Catalyst 9000 Family. This vulnerability is due to incorrect parsing of HTTP packets while performin...
Additional Analysis into the SUNBURST Backdoor | McAfee Blogs
ARCHIVED STORY Additional Analysis into the SUNBURST Backdoor Christiaan Beek · DEC 17, 2020 Executive Summary There has been considerable focus on the recent disclosures associated with SolarWinds, and while existing analysis on the broader campaign has resulted in detection against specific IoC...
Security Advisory 0058
Security Advisory 0058 PDF Date: December 16th, 2020 Version: 1.0 Revision | Date | Changes ---|---|--- 1.0 | December 16th, 2020 | Initial Release The CVE-ID tracking this issue is: CVE-2020-3702 CVSSv3.1 Base Score: 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Description This advisory...
CVE-2020-27053
In broadcastWifiCredentialChanged of ClientModeImpl.java, there is a possible location permission bypass due to a missing permission check. This could lead to local information disclosure of the WiFi network name with System execution privileges needed. User interaction is not needed for...
Exfiltrating Data from Air-Gapped Computers via Wi-Fi Signals (Without Wi-Fi Hardware)
A security researcher has demonstrated that sensitive data could be exfiltrated from air-gapped computers via a novel technique that leverages Wi-Fi signals as a covert channel—surprisingly, without requiring the presence of Wi-Fi hardware on the targeted systems. Dubbed "AIR-FI," the attack hing...
