CVE-2015-5368

The HP lt4112 LTE/HSPA+ Gobi 4G module with firmware before 12.500.00.15.1803 on EliteBook, ElitePad, Elite, ProBook, Spectre, ZBook, and mt41 Thin Client devices allows remote attackers to modify data or cause a denial of service, or execute arbitrary code, via unspecified vectors...

CVE-2015-5367

The HP lt4112 LTE/HSPA+ Gobi 4G module with firmware before 12.500.00.15.1803 on EliteBook, ElitePad, Elite, ProBook, Spectre, ZBook, and mt41 Thin Client devices allows local users to gain privileges via unspecified vectors...

CVE-2015-5368

CVE-2015-5368 concerns the HP lt4112 LTE/HSPA+ Gobi 4G module. The HP HP EliteBook/ElitePad/Elite/ProBook/Spectre/ZBook and mt41 Thin Client lines with firmware older than 12.500.00.15.1803 are vulnerable. The description states remote attackers could modify data, cause a denial of service, or ex...

elearning server 4g Multiple Vulnerabilities

No description provided by source. Exploit Title: eLearning Server Multiple Remote Vulnerabilities Google Dork: intitle:eLearning Server Date: 10.05.2012 Author: Eugene Salov, Andrey Komarov Group-IB, http://group-ib.ru Software Link: http://www.hypermethod.ru/ Version: 4G Tested on: Microsoft...

Clear iSpot/Clearspot 2.0.0.0 - CSRF Vulnerabilities

No description provided by source. Trustwave's SpiderLabs Security Advisory TWSL2010-008: Clear iSpot/Clearspot CSRF Vulnerabilities https://www.trustwave.com/spiderlabs/advisories/TWSL2010-008.txt Published: 2010-12-10 Version: 1.0 Vendor: Clear http://www.clear.com http://www.clear.com/ Product...

Using USB Modems to Phish and Send Malicious SMS Messages

Some USB modems can be leveraged to send malicious SMS messages and even carry out spear-phishing attacks – sometimes in conjunction with each other – thanks to a cross-site request forgery vulnerability present in the device’s web interfaces. According to Swedish security researcher Andreas Lind...

Cross site request forgery (csrf)

ajax.cgi in the web interface on the Choice Wireless Green Packet WIXFMR-111 4G WiMax modem allows remote attackers to obtain sensitive information via an Ajax 1 wmxState or 2 netState request...

CVE-2013-4731

ajax.cgi in the web interface on the Choice Wireless Green Packet WIXFMR-111 4G WiMax modem allows remote attackers to execute arbitrary commands via shell metacharacters in the pip parameter in an Ajax tagipPing request, a different vulnerability than CVE-2013-3581...

Cross site request forgery (csrf)

ajax.cgi in the web interface on the Choice Wireless Green Packet WIXFMR-111 4G WiMax modem allows remote attackers to execute arbitrary commands via shell metacharacters in the pip parameter in an Ajax tagipPing request, a different vulnerability than CVE-2013-3581...

CVE-2013-4731

CVE-2013-4731 affects the Choice Wireless Green Packet WIXFMR-111 4G WiMax modem. The vulnerability is in the web interface’s ajax.cgi. It allows remote attackers to execute arbitrary commands by injecting shell metacharacters in the pip parameter of an Ajax tag_ipPing request. This is a distinct...

CVE-2013-4731

ajax.cgi in the web interface on the Choice Wireless Green Packet WIXFMR-111 4G WiMax modem allows remote attackers to execute arbitrary commands via shell metacharacters in the pip parameter in an Ajax tagipPing request, a different vulnerability than CVE-2013-3581...

CVE-2013-3581

The CVE-2013-3581 entry affects the web interface of the Choice Wireless Green Packet WIXFMR-111 4G WiMax modem. The vulnerability lies in ajax.cgi where remote attackers can obtain sensitive information via Ajax requests (wmxState or netState). The provided documents describe the affected compon...

General Talks Security at Brookings Institution

General Martin Dempsey, Chairman of the Joint Chiefs of Staff, made clear yesterday in a speech to the Brookings Institution that the military, government, and private sector each has a role to play in hardening the U.S. against cyberattacks. General Dempsey also called out the maintainers of...

The Broadcom LAN chip BCM4325 AND BCM4329 denial of service vulnerability-vulnerability warning-the black bar safety net

This vulnerability is the Broadcom Wireless card firmware, the model for the BCM4325 and the BCM4329, the attacker can send specific wireless network packets causing a denial of service attack. A major influence on the equipment: BCM4325 Apple iPhone 3GS Apple iPod 2G HTC Touch Pro 2 HTC Droid...

Design/Logic Flaw

The Samsung and HTC onTouchEvent method implementation for Android on the T-Mobile myTouch 3G Slide, HTC Merge, Sprint EVO Shift 4G, HTC ChaCha, AT&T Status, HTC Desire Z, T-Mobile G2, T-Mobile myTouch 4G Slide, and Samsung Galaxy S stores touch coordinates in the dmesg buffer, which allows remot...

CVE-2012-2923

SQL injection vulnerability in news.php4 in Hypermethod eLearning Server 4G allows remote attackers to execute arbitrary SQL commands via the nid parameter...

CVE-2012-2924

PHP remote file inclusion vulnerability in admin/setup.inc.php in Hypermethod eLearning Server 4G allows remote attackers to execute arbitrary PHP code via a URL in the path parameter...

Sql injection

SQL injection vulnerability in news.php4 in Hypermethod eLearning Server 4G allows remote attackers to execute arbitrary SQL commands via the nid parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in admin/setup.inc.php in Hypermethod eLearning Server 4G allows remote attackers to execute arbitrary PHP code via a URL in the path parameter...

CVE-2012-2924

CVE-2012-2924 affects Hypermethod eLearning Server 4G. Vulnerability: PHP remote file inclusion in admin/setup.inc.php allows an attacker to supply a URL in the path parameter to execute arbitrary PHP code on the server. Affected software/component: Hypermethod eLearning Server 4G (admin/setup.in...