CVE-2018-20393

The CVE-2018-20393 entry applies to Technicolor devices (e.g., CGA0111 variants, CWA0101, DPC3928SL, TC7110, TC7200) and describes a credential-disclosure flaw exploitable via SNMP. Remote attackers can retrieve credentials by querying specific SNMP OIDs (iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and .....

PT-2018-15346

Name of the Vulnerable Software and Affected Versions Technicolor CGA0111 version CGA0111E-ES-13-E23E-c8000r5712-170217-0829-TRU Technicolor CWA0101 version CWA0101E-A23E-c7000r5712-170315-SKC Technicolor DPC3928SL version D3928SL-PSIP-13-A010-c3420r55105-170214a Technicolor TC7110.AR version...

PT-2018-2657

Name of the Vulnerable Software and Affected Versions Yokogawa CENTUM CS 3000 versions R3.05.00 through R3.09.50 Yokogawa CENTUM CS 3000 Entry Class versions R3.05.00 through R3.09.50 Yokogawa CENTUM VP versions R4.01.00 through R6.03.10 Yokogawa CENTUM VP Entry Class versions R4.01.00 through...

IBM SVC or IBM Storwize storage LUN can be deleted under specific circumstances

Challenge | Newly created LUNs on IBM storages that utilize the Spectrum Virtualize Software with Veeam B&RIBM SVC or IBM FlashSystem, under very specific circumstances, can be deleted by Veeam B&R. --- Cause | Spectrum Virtualize software has the ability to reuse LUN IDs, which are not set to be...

m-b-g.org XSS vulnerability

Open Bug Bounty ID: OBB-711966 Description| Value ---|--- Affected Website:| m-b-g.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until...

Schneider Electric BMX P34 CPU B Open Redirect

Exploit Title: Schneider Electric BMX P34 CPU B - Unvalidated Redirects and Forwards Date: 2018-07-21 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.schneider-electric.com/ Hardware Link : https://www.schneider-electric.com/en/product/BMXP342020/ Software : Schneider Electric...

PT-2018-2564

Name of the Vulnerable Software and Affected Versions D-Link DIR-822 C1 versions prior to v3.11B01Beta D-Link DIR-822-US C1 versions prior to v3.11B01Beta D-Link DIR-850L A versions prior to v1.21B08Beta D-Link DIR-850L B versions prior to v2.22B03Beta D-Link DIR-880L A versions prior to...

PT-2018-2565

Name of the Vulnerable Software and Affected Versions D-Link DIR-822 C1 versions prior to v3.11B01Beta D-Link DIR-822-US C1 versions prior to v3.11B01Beta D-Link DIR-850L A versions prior to v1.21B08Beta D-Link DIR-850L B versions prior to v2.22B03Beta D-Link DIR-880L A versions prior to...

a-b-s.de XSS vulnerability

Open Bug Bounty ID: OBB-685159 Description| Value ---|--- Affected Website:| a-b-s.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until...

Security Bulletin: Multiple vulnerabilities in Java SDK affect IBM b-type SAN directors and switches.

Summary There are multiple vulnerabilities in SDK Java™ Technology Edition used by IBM b-type SAN directors and switches. These issues were disclosed as part of the Java SDK updates in January 2018. Vulnerability Details CVEID: CVE-2018-2579 DESCRIPTION: An unspecified vulnerability in Oracle Jav...

Security Bulletin: Multiple vulnerabilities in Java SDK affect IBM b-type SAN directors and switches.

Summary There are multiple vulnerabilities in SDK Java™ Technology Edition used by IBM b-type SAN directors and switches. These issues were disclosed as part of the Java SDK updates in October 2017. Vulnerability Details CVEID: CVE-2017-10356 DESCRIPTION: An unspecified vulnerability related to t...

DNP3 Implementation Vulnerability (Update B)

OVERVIEW This updated advisory is a follow-up to the updated advisory titled ICSA-13-291-01A DNP3 Implementation Vulnerability that was published November 21, 2013, on the NCCIC/ICS-CERT web site. Adam Crain of Automatak and Chris Sistrunk, Sr. Consultant for Mandiant, reported an improper input...

Linux/ARM - read(0, buf, 0xff) stager + execve("/bin/sh", NULL, NULL) Shellcode 20 Bytes

/ Title: Linux/ARM - read0, buf, 0xff stager + execve"/bin/sh", NULL, NULL Shellcode 20 Bytes Tested: armv7l Raspberry Pi 3 Model B+ Author: Ken Kitahara System Information pi@raspberrypi: $ uname -a Linux raspberrypi 4.14.52-v7+ 1123 SMP Wed Jun 27 17:35:49 BST 2018 armv7l GNU/Linux...

Linux/ARM - read(0, buf, 0xff) stager + execve("/bin/sh", NULL, NULL) Shellcode (28 Bytes)

Linux/ARM - read0, buf, 0xff stager + execve"/bin/sh", NULL, NULL Shellcode 28 Bytes. Shellcode exploit for ARM platform / Title: Linux/ARM - read0, buf, 0xff stager + execve"/bin/sh", NULL, NULL Shellcode 28 Bytes Date: 2018-08-30 Tested: armv7l Raspberry Pi 3 Model B+ Author: Ken Kitahara...

Official Cardi B website plagued by spammers

We come bearing tidings of proper website maintenance and general housekeeping for singer Cardi B or rather, for her web development team. At first glance, it appeared as though her website had been hacked a few days ago. But a look under the hood told a different story. We were surprised to see...

Schneider Electric BMX P34 CPU B Open Redirect

Exploit Title: Schneider Electric BMX P34 CPU B - Unvalidated Redirects and Forwards Date: 2018-07-21 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.schneider-electric.com/ Hardware Link : https://www.schneider-electric.com/en/product/BMXP342020/ Software : Schneider Electric...

The Official Talos Guide to Security Summer Camp 2018

It is once again time for the week in the summer when many of us descend on Las Vegas for Black Hat, DEF CON, and B-Sides LasVegas. This is your official guide to what the Cisco Talos Threat Intelligence team is doing at these shows and what some of our colleagues around Cisco Security are doing,...

CVE-2018-14959

An issue was discovered in WeaselCMS v0.3.5. CSRF can create new pages via an index.php?b=pages&a=new URI...

PT-2018-12835

Name of the Vulnerable Software and Affected Versions WeaselCMS version 0.3.5 Description An issue was discovered that allows CSRF to create new pages via an "index.php?b=pages&a=new" URI. Recommendations For WeaselCMS version 0.3.5, consider implementing proper CSRF protection mechanisms to...

Sun Solaris 11.3 AVS Kernel - Local Privilege Escalation

Sun Solaris 11.3 AVS Kernel - Local Privilege Escalation / Exploit Title: Solaris/OpenSolaris AVS kernel code execution Google Dork: if applicable Date: 24/7/2018 Exploit Author: mu-b Vendor Homepage: oracle.com Software Link: Version: Solaris 10, Solaris Sun Opensolaris include include include...