CVE-2019-16736

CVE-2019-16736 describes a stack-based buffer overflow in processCommandUploadSnapshot within libcommon.so used by Petwant PF-103 firmware (4.22.2.42) and Petalk AI (3.2.2.30). The flaw can allow remote attackers, without authentication or user interaction, to trigger denial of service or execute...

CVE-2019-16735

A stack-based buffer overflow in processCommandUploadLog in libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to cause denial of service or run arbitrary code as the root user...

CVE-2019-16735

The CVE-2019-16735 issue affects Petwant PF-103 firmware (4.22.2.42) and Petalk AI (3.2.2.30). It is a stack-based buffer overflow in libcommon.so::processCommandUploadLog, enabling remote attackers to cause denial of service or execute arbitrary code with root privileges. The available documents...

CVE-2019-17364

The processCommandUploadLog function of libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to execute arbitrary system commands as the root user...

CVE-2019-17364

CVE-2019-17364 affects Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30, where the function processCommandUploadLog() in libcommon.so allows remote attackers to execute arbitrary system commands as the root user. This yields a critical (CVSS v3.1: 9.8) impact with network access, no privi...

CVE-2019-16730

This CVE (CVE-2019-16730) affects Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30. The vulnerability resides in processCommandUpgrade() inside libcommon.so, which allows remote attackers to execute arbitrary system commands as root. The issue is network-exploitable, with high impact on c...

CVE-2019-16730

processCommandUpgrade in libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to execute arbitrary system commands as the root user...

CVE-2019-16733

The CVE-2019-16733 entry describes a root-level command injection in Petwant PF-103 firmware (4.22.2.42) and Petalk AI (3.2.2.30) via processCommandSetUid() in libcommon.so. Exploitation details are not publicly provided in the available documents, but NVD assigns a CVSSv3.1 base score of 9.8 (CR...

CVE-2019-16737

The processCommandSetMac function of libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to execute arbitrary system commands as the root user...

CVE-2019-16737

Affects Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30. The libcommon.so function processCommandSetMac() can be triggered remotely to execute arbitrary commands as root, due to a vulnerable implementation in the command handling. The CVE entry records high-severity impact (remote, no au...

CVE-2019-16731

CVE-2019-16731 affects Petwant PF-103 firmware (4.22.2.42) and Petalk AI (3.2.2.30) via the udpServerSys service, enabling remote attackers to initiate firmware upgrades and modify device settings. The Red Hat, NVD, CNVD, and CVE records consistently describe the same vulnerable component and imp...

CVE-2019-16731

The udpServerSys service in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to initiate firmware upgrades and alter device settings...

CVE-2019-16734

Use of default credentials for the TELNET server in Petwant PF-103 firmware 4.3.2.50 and Petalk AI 3.2.2.30 allows remote attackers to execute arbitrary system commands as the root user...

CVE-2019-16734

CVE-2019-16734 affects Petwant PF-103 and Petalk AI with firmware versions 4.3.2.50 / 3.2.2.30, where the TELNET server uses default credentials, enabling remote attackers to execute arbitrary commands as root. Red Hat and other feeds corroborate the default-credential issue, describing it as a t...

CVE-2019-16732

The CVE-2019-16732 entry describes an unencrypted HTTP channel for firmware upgrades in Petalk AI and PF-103, enabling a man-in-the-middle to inject and execute arbitrary code with root privileges. Affected components are the firmware upgrade process on Petalk AI and PF-103 devices; root cause is...

Information disclosure

SAP Portfolio and Project Management, before versions S4CORE 102, 103, EPPM 100 and CPRXRPM 500702, 600740, 610740; unintentionally allows a user to discover accounting information of the Projects in Project dashboard, leading to Information Disclosure...

macOS 127.0.0.1:4444 Reverse Shell Shellcode (103 bytes)

/ Title: macOS - Reverse 127.0.0.1:4444/TCP Shell /bin/sh + Null-Free Shellcode 103 bytes Tested: macOS 10.14.1 Author: Ken Kitahara Compilation: gcc -o loader loader.c dev:works devuser$ swvers ProductName: Mac OS X ProductVersion: 10.14.1 BuildVersion: 18B75 dev:works devuser$ cat ipv4rev.s...

Pan Am Flight 103: Robert Mueller’s 30-Year Search for Justice

Known as the Lockerbie bombing, in December 1988 a bomb downed a Pan Am jet, leaving 270 dead. It was the first mass killing of Americans by terrorists. As the head of the Justice Department’s criminal division, Robert Mueller oversaw the case. And for him, it was personal...

PYSEC-2018-103

ymlref allows code injection...

103.kz XSS vulnerability

Open Bug Bounty ID: OBB-708364 Description| Value ---|--- Affected Website:| 103.kz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until...