πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25.8K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
β€Ό CVE-2022-1996 β€Ό

Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3.8.0.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-30790 β€Ό

Das U-Boot 2022.01 has a Buffer Overflow, a different issue than CVE-2022-30552.

πŸ“– Read

via "National Vulnerability Database".
⚠ SSNDOB Market servers seized, identity theft β€œbrokerage”” shut down ⚠

The online identity "brokerage" SSNDOB Market didn't want pople to be in any doubt what it was selling.

πŸ“– Read

via "Naked Security".
β€Ό CVE-2022-30919 β€Ό

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the Edit_BasicSSID_5G parameter at /goform/aspForm.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-30913 β€Ό

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the ipqos_set_bandwidth parameter at /goform/aspForm.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2020-14125 β€Ό

A denial of service vulnerability exists in some Xiaomi models of phones. The vulnerability is caused by out-of-bound read/write and can be exploited by attackers to make denial of service.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-30926 β€Ό

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the EditMacList parameter at /goform/aspForm.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-30925 β€Ό

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the AddMacList parameter at /goform/aspForm.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-30915 β€Ό

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the UpdateSnat parameter at /goform/aspForm.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-30910 β€Ό

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the GO parameter at /goform/aspForm.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-30914 β€Ό

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the UpdateMacClone parameter at /goform/aspForm.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-24296 β€Ό

Use of a Broken or Risky Cryptographic Algorithm vulnerability in Air Conditioning System G-150AD Ver. 3.21 and prior, Air Conditioning System AG-150A-A Ver. 3.21 and prior, Air Conditioning System AG-150A-J Ver. 3.21 and prior, Air Conditioning System GB-50AD Ver. 3.21 and prior, Air Conditioning System GB-50ADA-A Ver. 3.21 and prior, Air Conditioning System GB-50ADA-J Ver. 3.21 and prior, Air Conditioning System EB-50GU-A Ver. 7.10 and prior, Air Conditioning System EB-50GU-J Ver. 7.10 and prior, Air Conditioning System AE-200J Ver. 7.97 and prior, Air Conditioning System AE-200A Ver. 7.97 and prior, Air Conditioning System AE-200E Ver. 7.97 and prior, Air Conditioning System AE-50J Ver. 7.97 and prior, Air Conditioning System AE-50A Ver. 7.97 and prior, Air Conditioning System AE-50E Ver. 7.97 and prior, Air Conditioning System EW-50J Ver. 7.97 and prior, Air Conditioning System EW-50A Ver. 7.97 and prior, Air Conditioning System EW-50E Ver. 7.97 and prior, Air Conditioning System TE-200A Ver. 7.97 and prior, Air Conditioning System TE-50A Ver. 7.97 and prior and Air Conditioning System TW-50A Ver. 7.97 and prior allows a remote unauthenticated attacker to cause a disclosure of encrypted message of the air conditioning systems by sniffing encrypted communications.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-30916 β€Ό

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the Asp_SetTelnetDebug parameter at /goform/aspForm.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-30917 β€Ό

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the AddWlanMacList parameter at /goform/aspForm.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-1997 β€Ό

Cross-site Scripting (XSS) - Stored in GitHub repository francoisjacquet/rosariosis prior to 9.0.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-30921 β€Ό

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the SetMobileAPInfoById parameter at /goform/aspForm.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2021-36710 β€Ό

ToaruOS 1.99.2 is affected by incorrect access control via the kernel. Improper MMU management and having a low GDT address allows it to be mapped in userland. A call gate can then be written to escalate to CPL 0.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-30909 β€Ό

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the CMD parameter at /goform/aspForm.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-30923 β€Ό

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the Asp_SetTimingtimeWifiAndLed parameter at /goform/aspForm.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-30922 β€Ό

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the EditWlanMacList parameter at /goform/aspForm.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-30920 β€Ό

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the Edit_BasicSSID parameter at /goform/aspForm.

πŸ“– Read

via "National Vulnerability Database".