An attacker sending a malformed HTTP POST request over LAN to a TP-Link Smart camera device can trigger the vulnerability described here.
This report describes an authentication bypass vulnerability in the HTTP server implementation.
The vulnerability we are disclosing in this advisory affected a wi...
Summary Following our hacking of Xiaomi home security cameras, we have decided to look at another market dominating vendor in our region, TP-LINK. In this post, we describe the major findings from our review of new generation TAPO security cameras:
a pre-auth RCE stack BOF that can be exploited not...
Vérifier une fuite de données avec ZATAZ : moteurs France et monde, veille premium et risques cyber.
An attacker sending a malformed HTTP POST request over LAN to a TP-Link Smart camera device can trigger the vulnerability described here.
This report describes a stack buffer overflow, which leads to denial of service and may potentially lead to remote code execution.
The vulnerability we are disclo...
An attacker sending a malformed HTTP POST request over LAN to a TP-Link Smart camera device can trigger the vulnerability described here.
This report describes an authentication bypass vulnerability in the HTTP server implementation.
The vulnerability we are disclosing in this advisory affected a wi...
Avril noir pour les forums pirates : HexDex risque 10 ans de prison, DarkForums visé par une fuite de données !
An attacker sending a malformed HTTP POST request over LAN to a TP-Link Smart camera device can trigger the vulnerability described here.
This report describes a heap buffer overflow, which leads to remote code execution.
The vulnerability we are disclosing in this advisory affected a wide range of...
An attacker sending a malformed HTTP POST request over LAN to a TP-Link Smart camera device can trigger the vulnerability described here.
This report describes a heap buffer overflow, which leads to remote code execution.
The vulnerability we are disclosing in this advisory affected a wide range of...
Vendor confirms repo data exposure after Lapsus$ claims source code, secrets dump
An attacker sending a malformed HTTP POST request over LAN to a TP-Link Smart camera device can trigger the vulnerability described here.
This report describes a heap buffer overflow, which leads to remote code execution.
The vulnerability we are disclosing in this advisory affected a wide range of...
An attacker sending a malformed HTTP POST request over LAN to a TP-Link Smart camera device can trigger the vulnerability described here.
This report describes a path traversal which can lead to leaking secrets.
The vulnerability we are disclosing in this advisory affected a wide range of TP-Link de...
Vendor confirms repo data exposure after Lapsus$ claims source code, secrets dump Software security testing outfit Checkmarx has become the latest organization caught up in an ongoing attack on security-tool providers. The biz said data posted online appears to have come from one of its GitHub repos...
An attacker sending a malformed ONVIF request over LAN to a TP-Link Smart camera device can trigger the vulnerability described here.
This report describes a stack buffer overflow, which leads to pre-auth remote code execution via LAN or WAN (through browser).
The vulnerability we are disclosing in...
Lawmakers in Congress are moving quickly on the GUARD Act, an age-gating bill restricting minors’ access to a wide range of online tools, with a key vote expected this week. The proposal is framed as a response to alarming cases involving “AI companions” and vulnerable young users. But the text of t...
Online trading platform Robinhood's account creation process was exploited by threat actors to inject phishing messages into legitimate emails, tricking users into believing their accounts had suspicious activity. [...]
New proftpd packages are available for Slackware 15.0 and -current to fix a security issue.
In April 2026, the hacking collective ShinyHunters claimed to have obtained data from Pitney Bowes as part of a broader extortion campaign that also named several other organisations. After negotiations allegedly failed, the group publicly released the data which included 8.2M unique email addresses...
Faux site Lens-Nice : ZATAZ révèle une fausse billetterie et un abonnement caché derrière la finale de la coupe de France de football : Lens-Nice.
Speaker Johnson has introduced a new fig leaf over the American surveillance state, the Foreign Intelligence Accountability Act. Introduced with only days to go before Section 702 of the Foreign Intelligence Surveillance Act (FISA) expires and the U.S. government loses one of its most invasive surve...
A new wave of the Glassworm campaign is targeting the OpenVSX ecosystem with 73 "sleeper" extensions that turn malicious after an update. [...]