U.S. Arrests 13, Charges 36 in ‘Infraud’ Cybercrime Forum Bust

The U.S. Justice Department announced charges on Wednesday against three dozen individuals thought to be key members of 'Infraud," a long-running cybercrime forum that federal prosecutors say cost consumers more than a half billion dollars. In conjunction with the forum takedown, 13 alleged Infra...

The vulnerability of the Zivif PR115-204-P-RS webcam’s microprogramming software, related to errors in managing registration data, allows a hacker to obtain user login credentials.

The vulnerability of the Zivif PR115-204-P-RS webcam’s microprogramming software is related to errors in managing registration data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to obtain user credentials using an HTTP request...

The vulnerability of the Zivif PR115-204-P-RS webcam’s microprogramming software relates to the use of pre-installed credentials, allowing a intruder to gain access to the device with root privileges.

The vulnerability of the Zivif PR115-204-P-RS webcam’s microprogramming software is related to the use of pre-set credentials the password “cat1029” for the “root” user. Exploiting this vulnerability allows a malicious actor to gain access to the device with root privileges through a Telnet...

p-fab.com XSS vulnerability

Open Bug Bounty ID: OBB-550112 Description| Value ---|--- Affected Website:| p-fab.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

p-tech.com.my XSS vulnerability

Open Bug Bounty ID: OBB-549877 Description| Value ---|--- Affected Website:| p-tech.com.my Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

GNU Binutils Integer Overflow Vulnerability

GNU Binutils a.k.a. GNU Binary Utilities or binutils is a set of programming language utilities developed by the GNU Project to work with object files in a variety of formats, with connectors, assemblers, and other tools for object files and archives.The Binary File Descriptor BFD library a.k.a...

MC RSA Authentication Manager Security Console SQL Injection Vulnerability

EMC RSA Authentication Manager is a centralized binary authentication software from EMC. The software allows centralized management of binary authentication, security tokens, methods, and users across physical sites.Security Console is one of the security console programs. A SQL injection...

(0Day) ZyXEL P-870H-51 DSL Router Multiple Remote Code Execution Vulnerabilities

This vulnerability allows remote attackers to cause a denial-of-service condition on vulnerable installations of ZyXEL P-870H-51 DSL Router. Authentication is not required to exploit this vulnerability. The specific flaw exists within numerous exposed CGI endpoints. The vulnerability is caused by...

ZyXEL P-660HW Denial of Service Vulnerability (CNVD-2018-04321)

The ZyXEL P-660HW is a highly integrated router from ZyXEL Technology that is compatible with existing high-speed ADSL, ADSL2 and ADSL2+ interfaces over copper. A security vulnerability exists in the ZyXEL P-660HW version 3. A remote attacker can exploit this vulnerability to cause a denial of...

SUSE SLES12 Security Update : openssl (SUSE-SU-2018:0112-1)

This update for openssl fixes the following issues: Security issues fixed : - CVE-2016-7056: ECSDA P-256 timing attack key recovery bsc1019334 - CVE-2017-3731: Truncated packet could crash via OOB read bsc1022085 - CVE-2016-8610: remote denial of service in SSL alert handling bsc1005878 -...

CVE-2018-5330

ZyXEL P-660HW v3 devices allow remote attackers to cause a denial of service router unreachable/unresponsive via a flood of fragmented UDP packets...

Code injection

ZyXEL P-660HW v3 devices allow remote attackers to cause a denial of service router unreachable/unresponsive via a flood of fragmented UDP packets...

CVE-2018-5330

CVE-2018-5330 affects ZyXEL P-660HW v3 devices. Multiple connected sources (CNVD-2018-04321, NVD/NVD mirror) describe a remote denial of service caused by a flood of fragmented UDP packets that renders the router unreachable/unresponsive. The CNVD entry confirms vulnerability in ZyXEL P-660HW ver...

CVE-2018-5330

ZyXEL P-660HW v3 devices allow remote attackers to cause a denial of service router unreachable/unresponsive via a flood of fragmented UDP packets...

p-city.com XSS vulnerability

Open Bug Bounty ID: OBB-522671 Description| Value ---|--- Affected Website:| p-city.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ZyXEL P-660HW UDP Denial Of Service Exploit

Exploit for hardware platform in category dos / poc Exploit Title: ZyXEL P-660HW UDP fragmentation Denial of Service CVE: CVE-2018-5330 CWE: CWE-400 Exploit Author: Hosein Askari Vendor HomePage: https://www.zyxel.com/ Version : v3 Tested on: ZyXEL P-660HW Category: Network Appliance Author Mail ...

ZyXEL P-660HW UDP Denial Of Service

Exploit Title: ZyXEL P-660HW UDP fragmentation Denial of Service CVE: CVE-2018-5330 CWE: CWE-400 Exploit Author: Hosein Askari Vendor HomePage: https://www.zyxel.com/ Version : v3 Tested on: ZyXEL P-660HW Category: Network Appliance Author Mail : [email protected] description: ZyXEL P-660HW v...

p-city.com XSS vulnerability

Open Bug Bounty ID: OBB-503234 Description| Value ---|--- Affected Website:| p-city.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

p-a.paris-turf.com XSS vulnerability

Open Bug Bounty ID: OBB-481528 Description| Value ---|--- Affected Website:| p-a.paris-turf.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure...

Zivif PR115-204-P-RS Security Bypass Vulnerability

The Zivif PR115-204-P-RS is a webcam device. A security bypass vulnerability exists in the Zivif PR115-204-P-RS version 2.3.4.2103, which stems from the program's failure to perform sufficient authentication checks on requests sent to a CGI page. A remote attacker can exploit the vulnerability by...