CVE-2013-3541: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in cgi-bin/admin/fileread in AirLive WL2600CAM and possibly other camera models allows remote attackers to read arbitrary files via a .. dot dot in the READ.filePath parameter...

CVE-2013-5701

Watchguard Server Center 11.7.4/11.7.3 are affected by CVE-2013-5701 due to insecure library loading via wgpr.dll, enabling local privilege escalation when a Trojan horse wgpr.dll is loaded from the application bin directory. This involves the Watchguard Server Center components wlcollector.exe a...

PT-2013-4566

Name of the Vulnerable Software and Affected Versions TP-Link IP Cameras versions prior to beta firmware LM.1.6.18P12 sign6 Description The issue allows remote attackers to cause a denial of service. This can be achieved in two ways: by sending a request to "cgi-bin/reboot" which causes the devic...

PT-2013-4568

Name of the Vulnerable Software and Affected Versions Brickcom FB-100Ap versions 3.1.0.8 and earlier Brickcom WCB-100Ap versions 3.1.0.8 and earlier Brickcom MD-100Ap versions 3.1.0.8 and earlier Brickcom WFB-100Ap versions 3.1.0.8 and earlier Brickcom OB-100Ae versions 3.1.0.8 and earlier Brickc...

CVE-2013-3690: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in cgi-bin/users.cgi in Brickcom FB-100Ap, WCB-100Ap, MD-100Ap, WFB-100Ap, OB-100Ae, OSD-040E, and possibly other camera models with firmware 3.1.0.8 and earlier, allows remote attackers to hijack the authentication of administrators for requests that...

CVE-2013-3688: Undefined Security Weakness

The TP-Link IP Cameras TL-SC3171, TL-SC3130, TL-SC3130G, TL-SC3171G, and possibly other models before beta firmware LM.1.6.18P12sign6, does not properly restrict access to certain administrative functions, which allows remote attackers to 1 cause a denial of service device reboot via a request to...

ZeroShell cgi-binkerbynet - Local File Disclosure

ZeroShell cgi-binkerbynet - Local File Disclosure Introduction to the PoC : ====================================================================== In this distribution, the managment website is a binary file named "kerbynet" interpreted in cgi-bin directory here :...

Linux Command Shell, Bind TCP Random Port Inline

Listen for a connection in a random port and spawn a command shell. Use nmap to discover the open port: 'nmap -sS target -p-'. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 57...

PT-2013-5315

Name of the Vulnerable Software and Affected Versions Sophos Web Appliance versions prior to 3.7.9.1 Sophos Web Appliance version 3.8 before 3.8.1.1 Description The issue allows local users to gain privileges via shell metacharacters in the second argument passed to the close connections function...

Oracle Java java.awt.image.ByteComponentRaster Memory Corruption (CVE-2013-2473)

A code execution vulnerability has been reported in Oracle Java Runtime. The vulnerability is due to a memory corruption error in the ByteComponentRaster class from jre/bin/awt.dll. A remote attacker can exploit this vulnerability by enticing a user to open a malicious webpage. Successful...

IKE and AuthIP IPsec Keyring Modules Service (IKEEXT) Missing DLL

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'msf/core/post/common' require...

Linux/ARM execve("/bin/sh", [], [0 vars]) shellcode 35 bytes

35 bytes small Linux/ARM execve"/bin/sh", , 0 vars shellcode. / Title : Linux/ARM - execve"/bin/sh", , 0 vars - 35 bytes Date : 2013-09-04 Author : gunslinger yuda at cr0security dot com Tested on : ARM1176 rev6 v6l An ARM Hardcoded Shellcode without 0x20, 0x0a, and 0x00. Cr0security.com / includ...

CVE-2013-3368: Improper Link Resolution Before File Access

bin/rt in Request Tracker RT 3.8.x before 3.8.17 and 4.0.x before 4.0.13 allows local users to overwrite arbitrary files via a symlink attack on a temporary file with predictable name...

PT-2013-4326

Name of the Vulnerable Software and Affected Versions Request Tracker RT versions 3.8.x through 3.8.16 Request Tracker RT versions 4.0.x through 4.0.12 Description The issue allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name. This is...

MIPS Little Endian Shellcode

MIPS Little Endian Shellcode. CVE-2013-4659. Shellcode exploit for mips platform Disassembled MIPS Little Endian Shellcode Shellcode was designed for ACSD exploit on the ASUS RT-AC66U SOHO router. CVE: CVE-2013-4659 Written by Jacob Holcomb, Security Analyst @ Independent Security Evaluators Blog...

Linux/x86 - execve(/bin/sh) + Obfuscated Shellcode (30 bytes)

Linux/x86 - execve/bin/sh + Obfuscated Shellcode 30 bytes. Shellcode exploit for Linuxx86 platform / Title : Obfuscated execve /bin/sh 30 bytes Date : 3rd July 2013 Author : Russell Willis System : Linux/x86 SMP Debian 3.2.41-2 i686 To build: gcc -fno-stack-protector -z execstack -o shellcode...

PT-2013-2129

Name of the Vulnerable Software and Affected Versions QNAP VioStor NVR devices version 4.0.3 QNAP NAS affected versions not specified, specifically in the Surveillance Station Pro component Description The issue allows remote authenticated users to execute arbitrary commands. This is achieved by...

PT-2013-2130

Name of the Vulnerable Software and Affected Versions QNAP VioStor NVR devices with firmware 4.0.3 Description A cross-site request forgery CSRF issue affects the cgi-bin/create user.cgi endpoint, allowing remote attackers to hijack administrator authentication for creating administrative account...

CVE-2013-0144: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in cgi-bin/createuser.cgi on QNAP VioStor NVR devices with firmware 4.0.3 allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts via a NEW USER action...

CVE-2013-0143: Improper Control of Generation of Code

cgi-bin/pingping.cgi on QNAP VioStor NVR devices with firmware 4.0.3, and in the Surveillance Station Pro component in QNAP NAS, allows remote authenticated users to execute arbitrary commands by leveraging guest access and placing shell metacharacters in the query string...