Technicolor TC7200 Password Disclosure

Module exploits Technicolor TC7200 password disclosure vulnerability which allows fetching administration's password. !/usr/bin/env python3 -- coding: utf-8 -- """Technicolor TC7200 Password Disclosure""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Thomson TWG850 Password Disclosure

Module exploits Thomson TWG850 password disclosure vulnerability which allows fetching administration's password. !/usr/bin/env python3 -- coding: utf-8 -- """Thomson TWG850 Password Disclosure""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Default credentials

An issue was discovered on Humax Digital HG100R 2.0.6 devices. To download the backup file it's not necessary to use credentials, and the router credentials are stored in plaintext inside the backup, aka GatewaySettings.bin...

Design/Logic Flaw

An issue was discovered on Humax Digital HG100 2.0.6 devices. The attacker can find the root credentials in the backup file, aka GatewaySettings.bin...

CVE-2017-7317

An issue was discovered on Humax Digital HG100 2.0.6 devices. The attacker can find the root credentials in the backup file, aka GatewaySettings.bin...

CVE-2017-7317

Summary: CVE-2017-7317 affects Humax Digital HG100 router devices (HG100, firmware 2.0.6). The vulnerability arises because the root credentials can be found in the backup file GatewaySettings.bin, enabling an attacker to obtain credentials stored in plaintext. This impacts confidentiality, integ...

PT-2017-17661

Name of the Vulnerable Software and Affected Versions Humax Digital HG100 version 2.0.6 Description An issue was discovered where an attacker can obtain the root credentials from the backup file, specifically GatewaySettings.bin. Recommendations For Humax Digital HG100 version 2.0.6, consider...

CVE-2017-7315: Missing Authentication for Critical Function

An issue was discovered on Humax Digital HG100R 2.0.6 devices. To download the backup file it's not necessary to use credentials, and the router credentials are stored in plaintext inside the backup, aka GatewaySettings.bin...

CVE-2017-7317: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered on Humax Digital HG100 2.0.6 devices. The attacker can find the root credentials in the backup file, aka GatewaySettings.bin...

PT-2017-17659

Name of the Vulnerable Software and Affected Versions Humax Digital HG100R version 2.0.6 Description An issue was discovered where it is not necessary to use credentials to download the backup file. The router credentials are stored in plaintext inside the backup file, referred to as...