πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25.8K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
β€Ό CVE-2023-40896 β€Ό

Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter list and bindnum at /goform/SetIpMacBind.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-40902 β€Ό

Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter list and bindnum at /goform/SetIpMacBind.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-40897 β€Ό

Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter mac at /goform/GetParentControlInfo.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-40894 β€Ό

Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter list at /goform/SetStaticRouteCfg.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-40892 β€Ό

Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter schedStartTime and schedEndTime at /goform/openSchedWifi.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-40904 β€Ό

Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter macFilterType and parameter deviceList at /goform/setMacFilterCfg.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-31412 β€Ό

The LMS5xx uses weak hash generation methods, resulting in the creation of insecure hashs. If an attacker manages to retrieve the hash, it could lead to collision attacks and the potential retrieval of the password.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-40891 β€Ό

Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter firewallEn at /goform/SetFirewallCfg.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-40901 β€Ό

Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter macFilterType and parameter deviceList at url /goform/setMacFilterCfg.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-39834 β€Ό

PbootCMS below v3.2.0 was discovered to contain a command injection vulnerability via create_function.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-4418 β€Ό

A remote unprivileged attacker can sent multiple packages to the LMS5xx to disrupt its availability through a TCP SYN-based denial-of-service (DDoS) attack. By exploiting this vulnerability, an attacker can flood the targeted LMS5xx with a high volume of TCP SYN requests, overwhelming its resources and causing it to become unresponsive or unavailable for legitimate users.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-40898 β€Ό

Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter timeZone at /goform/SetSysTimeCfg.

πŸ“– Read

via "National Vulnerability Database".
πŸ•΄ US Space Industry More Prone to Foreign Espionage, US Agencies Warn πŸ•΄

Foreign intelligence entities have the US space industry in their sights, posing serious threats to US national security, multiple federal agencies say.

πŸ“– Read

via "Dark Reading".
πŸ‘1
🦿 Major US Energy Company Hit by QR Code Phishing Campaign 🦿

This QR code phishing campaign is targeting multiple industries and using legitimate services such as Microsoft Bing to increase its efficiency and bypass security.

πŸ“– Read

via "Tech Republic".
β€Ό CVE-2023-39801 β€Ό

A lack of exception handling in the Renault Easy Link Multimedia System Software Version 283C35519R allows attackers to cause a Denial of Service (DoS) via supplying crafted WMA files when connecting a device to the vehicle's USB plug and play feature.

πŸ“– Read

via "National Vulnerability Database".