CVE-2017-10718

CVE-2017-10718 affects the Shekar Endoscope firmware. A vulnerability lets any malicious user connecting to the device change the default SSID and password, denying the owner access. This can enable an attacker to access the video feed and images; it also could facilitate footholds in air‑gapped ...

CVE-2017-10719

The CVE-2017-10719 entry concerns the Shekar Endoscope device. The connected documents indicate the vulnerability stems from default Wi‑Fi credentials that are identical across devices, enabling potential unauthorized access to video feeds and stored images and possibly facilitating footholds in ...

CVE-2017-10719

Recently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope that the device has default Wi-Fi credentials that are exactly the same for every device. This device acts as an Endoscope camera that allows its users to use it in various...

CVE-2017-10721

Technical details about CVE-2017-10721 are not publicly provided in the connected documents. The description notes default Telnet but no specifics on versions, impact, or remediation; monitor for updates.

CVE-2017-10719: Exposure of Sensitive Information to an Unauthorized Actor

Recently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope that the device has default Wi-Fi credentials that are exactly the same for every device. This device acts as an Endoscope camera that allows its users to use it in various...

CVE-2017-10721: Improper Access Control

Recently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope that the device has Telnet functionality enabled by default. This device acts as an Endoscope camera that allows its users to use it in various industrial systems and settings, car...

PT-2019-7865

Name of the Vulnerable Software and Affected Versions Shekar Endoscope affected versions not specified Description The Shekar Endoscope device has Telnet functionality enabled by default in its most recent firmware. This device is used in various industrial systems, car garages, and medical clini...

PT-2019-7863

Name of the Vulnerable Software and Affected Versions Shekar Endoscope affected versions not specified Description The Shekar Endoscope device has default Wi-Fi credentials that are the same for every device, allowing an attacker to access the video feed and pictures viewed by the user. This coul...

PT-2019-7862

Name of the Vulnerable Software and Affected Versions Shekar Endoscope affected versions not specified Description The issue concerns the Shekar Endoscope, a device used in various industrial settings, car garages, and medical clinics to access hard-to-reach areas. A malicious user connecting to...

Exim MTA Vulnerability (The Return of the WIZard – CVE-2019-10149)

Last week, Qualys issued a security advisory for a vulnerability we discovered during a code review of Exim. This vulnerability can lead to Remote Command Injection, and is currently being actively attacked in the wild. This blog will show you how to quickly identify assets that are impacted by...

CVE-2017-15123

A flaw was found in the CloudForms web interface, versions 5.8 - 5.10, where the RSS feed URLs are not properly restricted to authenticated users only. An attacker could use this flaw to view potentially sensitive information from CloudForms including data such as newly created virtual machines...

Design/Logic Flaw

A flaw was found in the CloudForms web interface, versions 5.8 - 5.10, where the RSS feed URLs are not properly restricted to authenticated users only. An attacker could use this flaw to view potentially sensitive information from CloudForms including data such as newly created virtual machines...

CVE-2017-15123

CVE-2017-15123 affects Red Hat CloudForms web interface versions 5.8–5.10, where RSS feed URLs are not properly access-restricted to authenticated users, enabling disclosure of potentially sensitive data (e.g., newly created virtual machines). The entry is supported by NVD (CVSS v2 base 5.0, CVSS...

CVE-2010-5330

creationtimestamp| type| source ---|---|--- 2019-06-12 00:30:28+00:00| seen| https://t.me/cibsecurity/4851 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24 20:30:35+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971521 2025-02-23 02:10:01+00:00| see...

CVE-2017-15123: Missing Authentication for Critical Function

A flaw was found in the CloudForms web interface, versions 5.8 - 5.10, where the RSS feed URLs are not properly restricted to authenticated users only. An attacker could use this flaw to view potentially sensitive information from CloudForms including data such as newly created virtual machines...

PT-2019-8017

Name of the Vulnerable Software and Affected Versions CloudForms versions 5.8 through 5.10 Description A flaw was found in the CloudForms web interface where the RSS feed URLs are not properly restricted to authenticated users only. An attacker could use this flaw to view potentially sensitive...

GHSA-6CC5-2VG4-CC7M Twisted CRLF Injection

In Twisted before 19.2.1, twisted.web did not validate or sanitize URIs or HTTP methods, allowing an attacker to inject invalid characters such as CRLF...

DEBIAN-CVE-2019-12387

In Twisted before 19.2.1, twisted.web did not validate or sanitize URIs or HTTP methods, allowing an attacker to inject invalid characters such as CRLF...

PYSEC-2019-128

In Twisted before 19.2.1, twisted.web did not validate or sanitize URIs or HTTP methods, allowing an attacker to inject invalid characters such as CRLF...

CVE-2017-15123

A flaw was found in the CloudForms web interface where the RSS feed URLs are not properly restricted to authenticated users only. An attacker could use this flaw to view potentially sensitive information from CloudForms including data such as newly created virtual machines...