CVE-2019-5061

An exploitable denial-of-service vulnerability exists in the hostapd 2.6, where an attacker could trigger AP to send IAPP location updates for stations, before the required authentication process has completed. This could lead to different denial of service scenarios, either by causing CAM table...

Intel PROSet/Wireless WiFi Software Failure Vulnerability

Intel PROSet/Wireless WiFi Software is a wireless network card driver from Intel USA. A security vulnerability exists in Intel PROSet/Wireless WiFi Software versions prior to 21.40, which can be exploited by a local attacker to cause a denial of service and disclose information, due to the...

Intel PROSet/Wireless WiFi Software Logic Error Vulnerability

Intel PROSet/Wireless WiFi Software is a wireless network card driver from Intel USA. A logic error vulnerability exists in Intel PROSet/Wireless WiFi Software versions prior to 21.40, which can be exploited by a local attacker to elevate privileges, cause a denial of service, and disclose...

Intel PROSet/Wireless WiFi Software Buffer Overflow Vulnerability

Intel PROSet/Wireless WiFi Software is a wireless network card driver from Intel USA. A buffer overflow vulnerability exists in Intel PROSet/Wireless WiFi Software versions prior to 21.40, which arises when a network system or product performs an operation in memory without properly validating th...

Amazon's Blink Smart Security Cameras Open to Hijack

Multiple high-severity vulnerabilities have been discovered in Amazon-owned Blink XT2 security camera systems, which if exploited could give attackers complete control over them. The internet of things IoT cameras not to be confused with the Blink open-source browser engine, consist of a wireless...

kernel: brcmfmac heap buffer overflow in brcmf_wowl_nd_results

If the Wake-up on Wireless LAN functionality is configured in the brcmfmac driver, which only works with Broadcom FullMAC chipsets, a malicious event frame can be constructed to trigger a heap buffer overflow in the brcmfwowlndresults function. This vulnerability can be exploited by compromised...

Unspecified Vulnerability in Intel PROSet/Wireless WiFi Software

Intel PROSet/Wireless WiFi Software is a wireless network card driver from Intel USA. An unspecified vulnerability exists in Intel PROSet/Wireless WiFi Software, which arises from the program not assigning the correct permissions to a directory. An attacker could use this vulnerability to cause a...

The vulnerability of the Cisco Wireless LAN Controller web interface allows a perpetrator to trigger a service failure.

The vulnerability of the Cisco Wireless LAN Controller web interface is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

The vulnerability of the Intel PROSet/Wireless WiFi connection utility is related to incorrect default access rights settings, which allow a malicious actor to trigger a service failure and expose protected information.

The vulnerability of the Intel PROSet/Wireless WiFi networking connection tool is related to incorrect default access rights settings. Exploiting this vulnerability could allow a hacker to cause service failures and expose sensitive information...

The vulnerability of the Intel PROSet/Wireless WiFi networking utility lies in the insecure management of privileges, allowing attackers to elevate their privileges, cause service failures, and expose sensitive information.

The vulnerability of the Intel PROSet/Wireless WiFi networking connectivity tool is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges, cause service failures, and expose sensitive information...

The vulnerability of Intel WIFI drivers, related to operations beyond the buffer in memory, allows attackers to escalate their privileges, cause service failures, and disclose sensitive information.

The vulnerability of Intel WIFI drivers is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to gain enhanced privileges, cause service failures, and expose sensitive information...

Linux Bug Opens Most VPNs to Hijacking

A vulnerability in most Linux distros has been uncovered that allows a network-adjacent attacker to hijack VPN connections and inject rogue data into the secure tunnels that victims are using to communicate with remote servers. According to researchers at University of New Mexico and Breakpointin...

USN-4210-1: Linux kernel vulnerabilities

It was discovered that a buffer overflow existed in the 802.11 Wi-Fi configuration interface for the Linux kernel when handling beacon settings. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2019-16746 Nicolas Waisman discovered...

The vulnerability of the CLI component of Cisco Wireless LAN Controller (WLC) software allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the CLI component of Cisco Wireless LAN Controller WLC software relates to incorrect restrictions on the path name to the restricted directory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Moxa AWK-3121

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit/public exploits available Vendor: Moxa Equipment: AWK-3121 Vulnerabilities: Cleartext Transmission of Sensitive Information, Improper Access Control, Sensitive Cookie without ‘HTTPONLY’ Flag, Improper...

Ubuntu 16.04 LTS / 18.04 LTS : Linux kernel vulnerabilities (USN-4210-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4210-1 advisory. It was discovered that a buffer overflow existed in the 802.11 Wi-Fi configuration interface for the Linux kernel when handling beacon...

Intelbras Router RF1200 1.1.3 Cross Site Request Forgery

Exploit Title: Intelbras Router RF1200 1.1.3 - Cross-Site Request Forgery Date: 2019-11-06 Exploit Author: Joas Antonio Vendor Homepage: intelbras.com.br Software Link: https://www.intelbras.com/pt-br/roteador-wireless-smart-dual-band-action-rf-1200 Version: 1.1.3 REQUIRED Tested on: Windows CVE ...

Intel® PROSet/Wireless WiFi Software Security Advisory

Summary: A potential security vulnerability in Intel® PROSet/Wireless WiFi Software may allow escalation of privilege, denial of service and information disclosure. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2019-11154...

USN-4208-1: Linux kernel vulnerabilities

Jann Horn discovered that the OverlayFS and ShiftFS Drivers in the Linux kernel did not properly handle reference counting during memory mapping operations when used in conjunction with AUFS. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary...

CVE-2019-12503

Due to unencrypted and unauthenticated data communication, the wireless barcode scanner Inateck BCST-60 is prone to keystroke injection attacks. Thus, an attacker is able to send arbitrary keystrokes to a victim's computer system, e.g., to install malware when the target system is unattended. In...