CVE-2013-1602

CVE-2013-1602 describes an information-disclosure and authentication-bypass vulnerability in several D-Link IP cameras (e.g., DCS-5635, DCS-1100/1130/1100L/1130L, DCS-2102/2121, DCS-3410/5230/5610, WCS-1100, etc.). The root cause is insufficient validation of RTSP authentication cookies, enabling...

CVE-2013-1600

CVE-2013-1600 is an Authentication Bypass affecting multiple D-Link IP cameras (notably DCS-2102/2121 series with firmware such as 1.05_TESCO, 1.05_RU, 1.06, 1.06_FR, etc.). The vulnerability allows remote attackers to access live video streams without authentication via HTTP by exploiting the up...

CVE-2013-2714

Cross-site Scripting XSS in WordPress podPress Plugin 8.8.10.13 could allow remote attackers to inject arbitrary web script or html via the 'playerID' parameter...

CVE-2013-3093

Microsoft-style CVE-2013-3093 is an ASUS router CSRF in the web UI that can be abused via forged requests to perform admin actions. Affected devices include RT-N56U, RT-N16, RT-N10U, RT-AC66U, RT-N15U, RT-N53 (firmware families around 3.0.0.4.374.x). The underlying issues combine CSRF with a rela...

CVE-2013-3074

The CVE-2013-3074 entry concerns NetGear WNDR4700 Media Server devices running firmware 1.0.0.34. A remote attacker can cause a denial of service, resulting in a device crash. The vulnerability is network-exploitable with no privileges required and no user interaction, and the impact is limited t...

CVE-2013-3071

CVE-2013-3071 affects NETGEAR Centria WNDR4700 routers (firmware 1.0.0.34). The vulnerability is an authentication bypass that permits remote administrative actions without credentials. Impact as described: unauthorized access with potential control over device; CVSS metrics indicate high/critica...

CVE-2013-3071

NETGEAR Centria WNDR4700 devices with firmware 1.0.0.34 allow authentication bypass...

CVE-2013-1599

A Command Injection vulnerability exists in the /var/www/cgi-bin/rtpd.cgi script in D-Link IP Cameras DCS-3411/3430 firmware 1.02, DCS-5605/5635 1.01, DCS-1100L/1130L 1.04, DCS-1100/1130 1.03, DCS-1100/1130 1.04US, DCS-2102/2121 1.05RU, DCS-3410 1.02, DCS-5230 1.02, DCS-5230L 1.02, DCS-6410 1.00,...

CVE-2013-1599

CVE-2013-1599 is a remote OS command-injection vulnerability in the D-Link IP cameras’ web interface, specifically in /var/www/cgi-bin/rtpd.cgi. A remote attacker can craft a request to trigger arbitrary command execution on affected devices. Affected devices include DCS-3411/3430 (1.02), DCS-560...

CVE-2013-2748

Summary: CVE-2013-2748 affects Belkin Wemo Switch firmware prior to WeMo_US_2.00.2176.PVT (and WW version) and allows remote attackers to upload arbitrary files onto the system via firmwareupdate handling. The vulnerability is demonstrated by publicly available PoCs/exploits showing an UpdateFirm...

CVE-2013-0294

creationtimestamp| type| source ---|---|--- 2020-01-28 19:37:45+00:00| seen| https://t.me/cveNotify/517...

CVE-2013-6451

creationtimestamp| type| source ---|---|--- 2020-01-28 19:37:41+00:00| seen| https://t.me/cveNotify/513...

CVE-2013-1895

creationtimestamp| type| source ---|---|--- 2020-01-28 19:37:39+00:00| seen| https://t.me/cveNotify/511...

CVE-2013-1437

creationtimestamp| type| source ---|---|--- 2020-01-28 19:37:38+00:00| seen| https://t.me/cveNotify/510...

CVE-2013-2714

CVE-2013-2714 concerns a cross-site scripting (XSS) vulnerability in the WordPress podPress plugin (version 8.8.10.13 and prior). The flaw resides in the SWF-based player at /wp-content/plugins/podpress/players/1pixelout/1pixelout_player.swf, where the parameter playerID is not properly sanitized...

CVE-2013-2714

Cross-site Scripting XSS in WordPress podPress Plugin 8.8.10.13 could allow remote attackers to inject arbitrary web script or html via the 'playerID' parameter...

CVE-2013-4863

The HomeAutomationGateway service in MiCasaVerde VeraLite with firmware 1.5.408 allows 1 remote attackers to execute arbitrary Lua code via a RunLua action in a request to upnp/control/hag on port 49451 or 2 remote authenticated users to execute arbitrary Lua code via a RunLua action in a request...

CVE-2013-0294

packet.py in pyrad before 2.1 uses weak random numbers to generate RADIUS authenticators and hash passwords, which makes it easier for remote attackers to obtain sensitive information via a brute force attack...

CVE-2013-4861

MiCasaVerde VeraLite (firmware 1.5.408) is affected by CVE-2013-4861 due to a path traversal flaw in cgi-bin/cmh/get_file.sh that allows remote-authenticated attackers to read arbitrary files by supplying a .. in the filename parameter. The vulnerability enables disclosure of sensitive files such...

CVE-2013-4863

The CVE-2013-4863 issue affects MiCasaVerde VeraLite with firmware 1.5.408, where the HomeAutomationGateway’s UPnP RunLua interface (port 49451) allows remote execution of arbitrary Lua code. A second channel permits remote authenticated users to run Lua via port_49451/upnp/control/hag. Documente...