A mitigation bypass / privilege escalation flaw has been discovered in Apple's iOS Screen Time functionality, granting one access to modify the restrictions. It allows a local attacker to acquire the Screen Time Passcode by bypassing the anti-bruteforce protections on the four-digit Passcode, and in consequence gaining total control over Screen Time (Parental Control) settings. Versions lower than 18 are affected.
75666d1dc71fb63eadc1180b8fde8bebebfa673977a37f948bb5e8bd009bd6f8Netgear DGN2200v1 unauthenticated remote command execution exploit.
1ecbaf2097c374710f40e0f0861c5a5aca3c5c497d1e5561b2a10e77d2248061MyBB version 1.8.25 suffers from a remote SQL injection vulnerability.
0119b2998f019b8c5412b0ca92b7781e14084a1c91c356608140589745767688MyBB version 1.8.25 chain remote command execution exploit that leverages cross site scripting and SQL injection vulnerabilities.
346cb7b2b76354697b6dad56b74d10e2a918ecc58d1255b8e981d570c996ec5aVLC Media Player/Kodi/PopcornTime versions prior to 2.2.5 Red Chimera memory corruption proof of concept exploit.
073a715dedfca9fc8d37477886c92074525cfc2bbaa16ec36747c4c85515e2acThis Metasploit module exploits a command injection vulnerability in NETGEAR DGN2200v1/v2/v3/v4 routers by sending a specially crafted post request with valid login details.
1fec4e5211012852df5a0c5522fb686d79ac9dee14476e919180c9eb884159d8Netgear DGN2200 versions 1, 2, 3, and 4 suffer from a non-administrative authenticated remote command execution vulnerability via dnslookup.cgi.
99c9ae06ec4806b61f395324ca46e61fb502eec55131c4cf088ceadb4d9636e2Netgear DGN2200 versions 1, 2, 3, and 4 suffer from a non-administrative authenticated remote command execution vulnerability.
1bdcdf872682c6a8e387d635635f411aae430a4d02c2aab5cdda9cc98c8bcdd4
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed