Disclosures

IOActive Security Advisory | CIRCUTOR – SGE-PLC1000/SGE-PLC50 v 0.9.2 / ServicePack 140411

IOActive Security Advisory | PLANET Networking – Vulnerabilities Identified

IOActive Security Advisory | Fortinet FortiGate – Cross-site Scripting in SSL VPN

IOActive Security Advisory | MásMóvil Comtrend Router –  Multiple Vulnerabilities

IOActive Security Advisory | KUNBUS Revolution Pi – Multiple Vulnerabilities

IOActive Security Advisory | Hikvision Camera Denial of Service

IOActive Security Advisory | Movistar 4G Router – Multiple Vulnerabilities

IOActive Security Advisory | Socomec NET VISION – Multiple Vulnerabilities

IOActive Security Advisory | Lamassu Douro Bitcoin ATM – Multiple Vulnerabilities

IOActive Advisory – ID TECH Disclosure

Microsoft Bluetooth Driver Spoofing Vulnerability

Explore the details of the Microsoft Bluetooth driver spoofing vulnerability and how it affects user safety and privacy.

CNJ PJeOffice Remote Code Execution in Update Mechanism

Verint PTZ Cameras Multiple Vulnerabilities

Explore the vulnerabilities of Verint PTZ cameras and understand the risks associated with their web-based configurations.

Moog EXO Series Multiple Vulnerabilities

Explore Moog EXO Series vulnerabilities that impact security and performance in network-based surveillance systems.

GE Grid Solutions Reason RT430 GNSS Precision-Time Clock Multiple Vulnerabilities

Explore the GE Time Clock multiple vulnerabilities found in the RT430 GNSS Precision-Time Clock web application.

GE Reason S20 Industrial Managed Ethernet Switch Multiple Vulnerabilities

pppd Vulnerable to Buffer Overflow Due to a Flaw in EAP Packet Processing (CVE-2020-8597)

Android (AOSP) TV Provider SQL Injection in Query Projection Parameter (CVE-2019-2211)

Android (AOSP) Download Provider SQL Injection in Query Selection Parameter (CVE-2019-2198)

Android (AOSP) Download Provider SQL Injection in Query Sort Parameter (CVE-2019-2196)

Buffer Overflow, Cross-Site Scripting / Request Forgery, URI Injection, Insecure SSH Key Exchange in Antaira LMX-0800AG

Explore the Antaira LMX-0800AG vulnerabilities affecting firmware version 3.0, including memory corruption and XSS issues.

Reflected Cross-site Scripting in Microsoft Power BI

Configuration Shell Escape injecting OS/IPV6 commands, and HTML Injection in LLDP Packet System Name Field Leading to Persistent Cross-site Scripting in Antaira LMX-0800AG

ASUS – ZenUI Messaging PrivateSmsProvider-PrivateMmsProvider | SmsReceiverService Exposed

ASUS – ZenUI Dialer & Contacts PrivateContactsProvider | BlockListProvider Exposed

ASUS – ZenUI Launcher AppLockReceiver | AppLockProvider Exposed

Android (AOSP) Download Provider SQL Injection (CVE-2018-9493)

Android (AOSP) Download Provider Permission Bypass (CVE-2018-9468)

Android (AOSP) Download Provider Request Headers Disclosure (CVE-2018-9546)

Synaptics TouchPad SynTP Driver Leaks Multiple Kernel Addresses

HooToo Security Advisory

Microsoft Kernel Graphic Driver Kernel Memory Address Disclosure

Physical and Authentication Bypass in Diebold Opteva ATM

Ninebot by Segway miniPRO Vulnerabilities

Secure Messaging Application Vulnerabilities Identified

Security Vulnerabilities in Routers

Multiple Vulnerabilities in D-Link DCS-5009L IP Camera

Authenticated OS Command Injection on TP-LINK Cloud Cameras

SimpliSafe Alarm System Replay Attack

Lenovo System Update Created an Insecure Random Administrator Password

Lenovo TVSUkernel Escalation of Privileges

Harman-Kardon UConnect Vulnerability

Admin ACL Bypass and Double Fetch Issue in F-Secure Internet Security 2015

CyberLock CyberKey-based Access Control Solutions

Lenovo System Update Multiple Privilege Escalations

Petcube Remote Wireless Pet Camera Vulnerabilities

X Font Service Protocol Handling Issues in libXfont Library

Facebook Access Token Sent in Plaintext

OpenBSD ≤ 5.5 Local Kernel Panic

OleumTech Wireless Sensor Network Vulnerabilites

Steam Client Creates World-writable Shell Script

Belkin WeMo Home Automation Vulnerabilities

Sielco Sistemi Winlog Multiple Vulnerabilities

Stay informed about the Sielco Sistemi Winlog vulnerabilities and their significance in industrial control systems.

ProSoft Technology RadioLinx ControlScape PRNG Vulnerability

DASDEC Vulnerabilities

Explore DASDEC vulnerabilities and their impact on the Emergency Alert System. Understand the risks involved today.

Protocol Handling Issues in X.Org X Window System Client Libraries

TURCK BL20/BL67 Programmable Gateways undocumented hardcoded accounts

SIEMENS Sipass Integrated 2.6 Ethernet Bus Arbitrary Pointer Dereference

Invensys Wonderware InTouch 10 DLL Hijack

Explore Invensys Wonderware InTouch 10 vulnerabilities, including critical DLL hijack risks and available upgrades to enhance secu

WellinTech KingView and KingHistorian Multiple Vulnerabilities

Explore the WellinTech KingView and KingHistorian vulnerabilities discovered by independent researchers and learn about the patche

Windows Kernel Library Filename Parsing Vulnerability

Learn about the Windows Kernel Library vulnerability that allows arbitrary code execution through user interaction on SMB shares.

IBM Informix XML functions overflows

Multiple Vulnerabilities in Fwknop

XBMC File Traversal Vulnerability

Explore the latest findings on XBMC vulnerability and learn how to protect your media from potential threats.

Wonderware Archestra ConfigurationAccessComponent ActiveX stack overflow

Authentication Bypass In Tranax Remote Management Software

SQL Injection and Cross-site Scripting at www.courts.wa.gov

Multiple Vulnerabilities in Accoria Web Server

Mach Exception Handling Privilege Escalation

Microsoft Windows CryptoAPI X.509 Spoofing Vulnerability

doc.export* Methods Allow Arbitrary File Creation

Recursive Stack Overflow in ClamAV

Heap Corruption in Tor

AppleTalk Response Packet Parsing Array Over-indexing Vulnerability

Pointer Dereference in OpenSolaris

QNX ker_msg_sendv System Call Integer Overflow

DNS TXT Record Parsing Bug in LibSPF2

Diskimages-helper band-size Vulnerability

Multiple Vulnerabilities in Apple’s MobileMe Service

Buffer Overflow in Mono BigInteger Montgomery Reduction Method

Multiple Total Remote Compromise Vulnerabilities in Mercury SiteScope Monitoring Software

Multiple Buffer Overflows in legacy mod_jk2 apache module 2.0.3-DEV and earlier

Static Microsoft Windows WPAD entries might allow interception of traffic

Learn about the Static Microsoft Windows WPAD entries vulnerability and how it can expose users to remote attacks.