CVE-2021-38380

CVE-2021-38380 affects LIVE555 Media Server libraries (Live555 up to 1.08). The vulnerability arises from mishandling a large number of requests for the same MP3 stream, causing recursion and a stack-based buffer over-read, which can be exploited to launch a DoS. Reports in multiple feeds (NVD, C...

Cobham plc EXPLORER 710 has an unspecified vulnerability (CNVD-2019-35799)

The Cobham plc EXPLORER 710 is a portable satellite terminal from Cobham plc, UK. It provides features such as satellite communications and Internet access. A security vulnerability exists in the Cobham plc EXPLORER 710 that originates from the use of the same root password for devices using...

CVE-2019-9533

The root password of the Cobham EXPLORER 710 is the same for all versions of firmware up to and including v1.08. This could allow an attacker to reverse-engineer the password from available versions to gain authenticated access to the device...

D-Link DCS-825L Denial of Service Vulnerability

The D-Link DCS-825L is a wireless webcam from Terasic D-Link. A denial of service vulnerability exists in the D-Link DCS-825L with firmware version 1.08, which can be exploited by an attacker to affect device availability e.g., real-time online audio/video streaming with the help of the hping3...

Design/Logic Flaw

D-Link DCS-825L devices with firmware 1.08 do not employ a suitable mechanism to prevent denial-of-service DoS attacks. An attacker can harm the device availability i.e., live-online video/audio streaming by using the hping3 tool to perform an IPv4 flood attack. Verified attacks includes SYN...

CVE-2018-18442

D-Link DCS-825L devices with firmware 1.08 do not employ a suitable mechanism to prevent denial-of-service DoS attacks. An attacker can harm the device availability i.e., live-online video/audio streaming by using the hping3 tool to perform an IPv4 flood attack. Verified attacks includes SYN...

CVE-2018-18442

D-Link DCS-825L devices with firmware 1.08 do not employ a suitable mechanism to prevent denial-of-service DoS attacks. An attacker can harm the device availability i.e., live-online video/audio streaming by using the hping3 tool to perform an IPv4 flood attack. Verified attacks includes SYN...

CVE-2018-18442

CVE-2018-18442 affects the D-Link DCS-825L (firmware 1.08). The vulnerability is a DoS due to insufficient input validation in the firmware, enabling a remote attacker to disrupt device availability (e.g., live video/audio streaming) via crafted or flood-like network traffic (syn/udp/icmp, includ...

PT-2018-3876 · D Link · Dcs-825L

Name of the Vulnerable Software and Affected Versions: D-Link DCS-825L version 1.08 Description: The issue is related to insufficient input validation in the firmware of the D-Link DCS-825L network camera, which can be exploited by a remote attacker to cause a denial-of-service DoS condition. Thi...

Delta Electronics Delta Industrial Automation COMMGR 1.08 - Stack Buffer Overflow (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Delta Electronics Delta Industrial Automation COMMGR 1.08 Stack Buffer Overflow', 'Description' = %q This module exploits a stack based buffer...

Delta Industrial Automation COMMGR 1.08 - Stack Buffer Overflow (PoC)

Exploit Title: Delta Electronics Delta Industrial Automation COMMGR - Remote STACK-BASED BUFFER OVERFLOW Date: 02.07.2018 Exploit Author: t4rkd3vilz Vendor Homepage: http://www.deltaww.com/ Software Link:...

CVE-2014-2940

Cobham Sailor 900 and 6000 satellite terminals with firmware 1.08 MFHF and 2.11 VHF have hardcoded credentials for the administrator account, which allows attackers to obtain administrative control by leveraging physical access or terminal access...

WordPress blogVault Plugin <= 1.08 - BYPASS

This plugin is prone to a missing account empty secret key generation vulnerability. Solution Update the plugin to v1.0.9...

CVE-2014-3895

CVE-2014-3895 affects I-O DATA network cameras (TS-WLCAM 1.06 and earlier; TS-WLCAM/V 1.06 and earlier; TS-WPTCAM 1.08 and earlier; TS-PTCAM 1.08 and earlier; TS-PTCAM/POE 1.08 and earlier; TS-WLC2 1.02 and earlier) where an authentication bypass allows remote attackers to access configuration an...

dacio's cms 1.08 (xss/sql/dd) Multiple Vulnerabilities

No description provided by source. =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- = = XORON 2009C = = Dacio's PHP scripts CMS v1.08 Remote SQL Injection Vuln. = =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- = =...

TorrentTrader 1.08 - 'msg' Parameter HTML Injection Vulnerability

No description provided by source...

PT-2010-1186 · Michaelliao · Openid

Name of the Vulnerable Software and Affected Versions: michaelliao jopenid versions prior to 1.08 Description: The issue is related to a timing discrepancy in the getAuthentication function of the OpenIdManager.java file. This discrepancy can be exploited by a remote attacker to gain unauthorized...

New-CMS - Multiple Vulnerabilities

New-CMS - Multiple Vulnerabilities Multiple Vulnerability in New-CMS Vendor SW: New-CMS Version: 1.08 but possible all versions Vendor URL: www.new-cms.org Tested on: Ubuntu Server 9.10 Category: Webapps/0day Date: 17 Feb 2010 Author: Alberto "fulgur" Fontanella Author URL: ictsec.wordpress.com...

New-CMS 1.08 LFI / XSS / XSRF / Shell Upload

Multiple Vulnerability in New-CMS Vendor SW: New-CMS Version: 1.08 but possible all versions Vendor URL: www.new-cms.org Tested on: Ubuntu Server 9.10 Category: Webapps/0day Date: 17 Feb 2010 Author: Alberto "fulgur" Fontanella Author URL: ictsec.wordpress.com Author EMAIL: itsicurezzayahoo.it 1 ...

CVE-2008-5303

Race condition in the rmtree function in File::Path 1.08 lib/File/Path.pm in Perl 5.8.8 allows local users to to delete arbitrary files via a symlink attack, a different vulnerability than CVE-2005-0448, CVE-2004-0452, and CVE-2008-2827. NOTE: this is a regression error related to CVE-2005-0448. ...