CVE-2014-9144

Technicolor Router TD5130 with firmware 2.05.C29GV allows remote attackers to execute arbitrary commands via shell metacharacters in the ping field setobjectip parameter...

PT-2014-8849

Name of the Vulnerable Software and Affected Versions Technicolor Router TD5130 version 2.05.C29GV Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the setobject ip parameter, specifically in the ping field. Recommendations For Technicolor...

CVE-2014-9144: Improper Neutralization of Special Elements used in a Command

Technicolor Router TD5130 with firmware 2.05.C29GV allows remote attackers to execute arbitrary commands via shell metacharacters in the ping field setobjectip parameter...

PT-2014-1984 · Trendnet +1 · Trendnet +1

Name of the Vulnerable Software and Affected Versions: D-Link devices affected versions not specified TRENDnet devices affected versions not specified Description: The issue is related to a remote code execution problem in the ping tool of multiple D-Link and TRENDnet devices. It is caused by...

Device42 Ping Command Injection

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'WAN Emulator v2.3 Command Execution', 'Description' = %q , 'License' = MSFLICENSE, 'Privileged' = true, 'Platform' = 'unix', 'Arch' =...

Device42 DCIM Appliance Manager Ping Command Injection Exploit

Device42 DCIM Appliance Manager versions 5.10 and 6.0 with WAN emulator version 2.3 remote command injection exploit for Metasploit that leverages ping. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core'...

Device42 DCIM Appliance Manager Traceroute Command Injection Exploit

Device42 DCIM Appliance Manager versions 5.10 and 6.0 with WAN emulator version 2.3 remote command injection exploit for Metasploit that leverages traceroute. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require...

Device42 WAN Emulator 2.3 - Ping Command Injection (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'WAN Emulator v2.3 Command Execution', 'Description' = %q , 'License' = MSFLICENSE, 'Privileged' = true, 'Platform' = 'unix', 'Arch' =...

Device42 WAN Emulator 2.3 - Ping Command Injection (Metasploit)

Device42 WAN Emulator 2.3 - Ping Command Injection Metasploit This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'WAN Emulator v2.3 Command Execution', 'Description' = %q , 'License' =...

Gather Kademlia Server Information

This module uses the Kademlia BOOTSTRAP and PING messages to identify and extract information from Kademlia speaking UDP endpoints, typically belonging to eMule/eDonkey/BitTorrent servers or other P2P applications. This module requires Metasploit: https://metasploit.com/download Current source:...

GNU libc 2.12.1 LD_AUDIT libpcprofile.so Local Root

!/bin/sh Exploit Title: GNU libc /tmp/libxpl.c /dev/null cat /tmp/libxpl.so /lib/libxpl.so rm -rf /tmp/libxpl.c /tmp/libxpl.so LDAUDIT="libxpl.so" ping...

PT-2014-8624

Name of the Vulnerable Software and Affected Versions Huawei S9300, S9303, S9306, S9312 versions V100R002 Huawei S7700, S7703, S7706, S7712 versions V100R003, V100R006, V200R001, V200R002, V200R003, V200R005 Huawei S9300E, S9303E, S9306E, S9312E version V200R001 Huawei S9700, S9703, S9706, S9712...

Security Advisory-Information Leakage Vulnerability via MPLS Ping in VRP Platform

VRP Versatile Routing Platform has been developed by Huawei to provide improved IP routing services. The VRP has been widely applied to network devices, including high-end and low-end switches and routers, wireless and transmission devices. Information leakage vulnerability exists in several...

PT-2014-4801

Name of the Vulnerable Software and Affected Versions Aruba Networks ClearPass Policy Manager version 6.3.0.60730 Description The issue allows local users to execute arbitrary commands via shell metacharacters in certain arguments of a valid command. This can be demonstrated by the system...

CVE-2014-2593: Undefined Security Weakness

The management console in Aruba Networks ClearPass Policy Manager 6.3.0.60730 allows local users to execute arbitrary commands via shell metacharacters in certain arguments of a valid command, as demonstrated by the 1 system status-rasession and 2 network ping commands...

kernel: net: ping: refcount issue in ping_init_sock() function

A use-after-free flaw was found in the way the pinginitsock function of the Linux kernel handled the groupinfo reference counter. A local, unprivileged user could use this flaw to crash the system or, potentially, escalate their privileges on the system...

Nmap 6.47 - Free Security Scanner For Network Exploration & Security Audits

Nmap is a utility for port scanning large networks, although it works fine for single hosts. Sometimes you need speed, other times you may need stealth. In some cases, bypassing firewalls may be required. Not to mention the fact that you may want to scan different protocols UDP, TCP, ICMP, etc...

kernel, perf, python security update

CentOS Errata and Security Advisory CESA-2014:0981 Updated kernel packages that fix multiple security issues, several bugs, and add one enhancement are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having Important security impact. Commo...

kernel: net: ping: refcount issue in ping_init_sock() function

A use-after-free flaw was found in the way the pinginitsock function of the Linux kernel handled the groupinfo reference counter. A local, unprivileged user could use this flaw to crash the system or, potentially, escalate their privileges on the system...

Netgear DGN1000B setup.cgi Remote Command Execution

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...