FiberHome HG6245D devices 信任管理问题漏洞

The HG6245D is an FTTH ONT router from FiberHome. A hard-coded credentials vulnerability exists in the FiberHome HG6245D. The vulnerability stems from the web daemon containing hard-coded telecomadmin/nE7jA%5m credentials against an ISP. No detailed vulnerability details are available at this tim...

FiberHome HG6245D devices 信任管理问题漏洞

The HG6245D is an FTTH ONT router from FiberHome. A hard-coded credentials vulnerability exists in the FiberHome HG6245D. The vulnerability stems from the web daemon containing hardcoded rootmet/m3tr0r00t credentials against an ISP. No details of the vulnerability are provided at this time...

PT-2021-17265

Name of the Vulnerable Software and Affected Versions: FiberHome HG6245D versions through RP2613 Description: An issue was discovered where the web daemon contains hardcoded admin and CUadmin credentials for an ISP. Recommendations: For FiberHome HG6245D versions through RP2613, consider changing...

PT-2021-17274

Name of the Vulnerable Software and Affected Versions: FiberHome HG6245D versions through RP2613 Description: An issue was discovered in the web daemon of the affected devices, where hardcoded admin credentials are present, specifically the username admin and the password 3UJUh2VemEfUtesEchEC2d2e...

FiberHome HG6245D devices 信任管理问题漏洞

The HG6245D is an FTTH ONT router from FiberHome. A hard-coded credentials vulnerability exists in the FiberHome HG6245D. The vulnerability stems from the web daemon containing hard-coded admin/3UJUh2VemEfUtesEchEC2d2e credentials against an ISP. No detailed vulnerability details are provided at...

PT-2021-17281

Name of the Vulnerable Software and Affected Versions: FiberHome HG6245D versions through RP2613 Description: An issue was discovered where the web daemon contains hardcoded user credentials, specifically tattoo@home, for an ISP. Recommendations: For FiberHome HG6245D versions through RP2613,...

FiberHome HG6245D devices 信任管理问题漏洞

The HG6245D is an FTTH ONT router from FiberHome. A hard-coded credentials vulnerability exists in the FiberHome HG6245D. The vulnerability stems from the web daemon containing hardcoded admin/1234 credentials against an ISP. No details of the vulnerability are provided at this time...

FiberHome HG6245D devices 信任管理问题漏洞

The HG6245D is an FTTH ONT router from FiberHome. A hard-coded credentials vulnerability exists in the FiberHome HG6245D. The vulnerability stems from the web daemon containing hardcoded L1vt1m4eng/8888888 credentials against an ISP. No details of the vulnerability are provided at this time...

CVE-2020-36244

CVE-2020-36244 affects the GENIVI diagnostic log and trace (DLT) daemon, dlt-daemon, with a heap-based buffer overflow in versions prior to 2.18.6 that could enable remote code execution. The issue, assigned to DLT-Daemon, is documented across multiple feeds (NVD/NASL/OSV/Debian LTS) and is refle...

FiberHome HG6245D devices 信任管理问题漏洞

The HG6245D is an FTTH ONT router from FiberHome. A hardcoded credentials vulnerability exists in the FiberHome HG6245D. The vulnerability stems from the web daemon containing hardcoded user/tattoo@home credentials against an ISP. No details of the vulnerability are provided at this time...

PT-2021-17278

Name of the Vulnerable Software and Affected Versions: FiberHome HG6245D versions through RP2613 Description: An issue was discovered in the web daemon of the affected devices, where the hardcoded credentials useradmin / 888888 are used for an ISP. Recommendations: For FiberHome HG6245D versions...

CVE-2021-27151: Use of Hard-coded Credentials

An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded rootmet / m3tr0r00t credentials for an ISP...

sthttpd Denial of Service Vulnerability

sthttpd is an improved version of thttpd, a small, simple, fast and secure HTTP server implementation that supports HTTP/1.1. A denial of service vulnerability exists in sthttpd version 2.27.1 and earlier. The vulnerability is related to a memory error in the handling of the dedotdot function in...

com.github.spullara.redis:netty4 (0.4), com.github.spullara.redis:netty4-client (0.4) +3 more potentially affected by CVE-2021-21290 +1 more via io.netty:netty (4.0.0.alpha5)

io.netty:netty MAVEN version 4.0.0.alpha5 is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty and may be impacted: - com.github.spullara.redis:netty4 0.4 - com.github.spullara.redis:netty4-client 0.4 - com.github.spullara.redis:server 0.4 -...

Docker < 19.03.15, 20.x < 20.10.3 Multiple Vulnerabilities

Docker is prone to multiple vulnerabilities. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2021-26843

An issue was discovered in sthttpd through 2.27.1. On systems where the strcpy function is implemented with memcpy, the dedotdot function may cause a Denial-of-Service daemon crash due to overlapping memory ranges being passed to memcpy. This can triggered with an HTTP GET request for a crafted...

sthttpd 缓冲区错误漏洞

sthttpd is an improved version of thttpd, a small, simple, fast and secure HTTP server implementation that supports HTTP/1.1. A denial of service vulnerability exists in sthttpd version 2.27.1 and earlier. The vulnerability is related to a memory error in the handling of the dedotdot function in...

CVE-2021-26843: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered in sthttpd through 2.27.1. On systems where the strcpy function is implemented with memcpy, the dedotdot function may cause a Denial-of-Service daemon crash due to overlapping memory ranges being passed to memcpy. This can triggered with an HTTP GET request for a crafted...

[ASA-202102-12] docker: multiple issues

Arch Linux Security Advisory ASA-202102-12 ========================================== Severity: Medium Date : 2021-02-06 CVE-ID : CVE-2021-21284 CVE-2021-21285 Package : docker Type : multiple issues Remote : No Link : https://security.archlinux.org/AVG-1528 Summary ======= The package docker...

CVE-2020-8806

Electric Coin Company Zcashd before 2.1.1-1 allows attackers to trigger consensus failure and double spending. A valid chain could be incorrectly rejected because timestamp requirements on block headers were not properly enforced...