DSLR Cameras PTP/IP Multiple Buffer Overflow Vulnerabilities (CVE-2019-5994; CVE-2019-5999; CVE-2019-6000)

Multiple buffer overflow vulnerabilities exist in DSLR cameras. A remote attacker can exploit this vulnerability by sending specially crafted PTP/IP packets. Successful exploitation of these vulnerabilities could allow arbitrary code execution or a system crash...

UPDATED VERSION: RouterSploit 3.4.0

PenTestIT RSS Feed RouterSploit 3.4.0, the long awaited router exploitation framework update is out guys! This release includes some really cool features and updates such as using pycryptodome from pycryptoand newer exploitation modules! Read on for the improvements. What is RouterSploit? The...

ASUSWRT vpnupload.cgi authentication bypass

Added: 02/28/2018 CVE: CVE-2018-5999 Background ASUSWRT is the firmware used in many ASUS devices. Problem The combination of two separate vulnerabilities in ASUSWRT allows remote attackers to execute arbitrary commands. The first vulnerability allows an unauthenticated user to make certain POST...

CVE-2018-5999

creationtimestamp| type| source ---|---|--- 2018-02-26 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44176 2018-03-01 08:53:42+00:00| published-proof-of-concept| https://t.me/antichat/1000 2018-05-29 15:50:33+00:00| seen|...

AsusWRT Router Remote Code Execution

Unauthenticated LAN remote code execution in AsusWRT Discovered by Pedro Ribeiro [email protected], Agile Information Security ================================================================================= Disclosure: 22/01/2018 / Last updated: 25/01/2018 Background and summary AsusWRT is the...

ASUS Patches Root Command Execution Flaws Haunting Over a Dozen Router Models

ASUS released patches for over a dozen router models on Tuesday that are each vulnerable to multiple firmware flaws that when combined give a local unauthenticated attacker the ability to execute commands as root on targeted devices. Routers models patched by ASUS are RT-AC88U, RT-AC3100, RT-AC86...

CVE-2018-5999

An issue was discovered in AsusWRT before 3.0.0.4.38410007. In the handlerequest function in router/httpd/httpd.c, processing of POST requests continues even if authentication fails...

CVE-2018-5999

Affected software: AsusWRT on Asus routers (firmware prior to 3.0.0.4.384_10007). Vulnerability: In handle_request() of router/httpd/httpd.c, processing of POST requests can continue after authentication fails, enabling unauthenticated access. Impact: Unauthenticated LAN remote code execution wit...

AsusWRT Router < 3.0.0.4.380.7743 - LAN Remote Code Execution

Unauthenticated LAN remote code execution in AsusWRT Discovered by Pedro Ribeiro [email protected], Agile Information Security ================================================================================= Disclosure: 22/01/2018 / Last updated: 25/01/2018 Background and summary AsusWRT is the...

AsusWRT Router 3.0.0.4.380.7743 - LAN Remote Code Execution

AsusWRT Router 3.0.0.4.380.7743 - LAN Remote Code Execution Unauthenticated LAN remote code execution in AsusWRT Discovered by Pedro Ribeiro [email protected], Agile Information Security ================================================================================= Disclosure: 22/01/2018 / Last...

CVE-2006-5999

CVE-2006-5999 entry is rejected/not used; not associated with any vulnerability.

D-Link DIR-816L (Wireless Router) - Cross-Site Request Forgery (CVE-2015-5999)

1 User login to DIR-816L wireless router 2 User visits the attacker's malicious web page attacker.html 3 attacker.html exploits CSRF vulnerability and changes the admin account password PoC video link: http://youtu.be/UBdR2sUc8Wg Exploit code attacker.html:...

CVE-2017-5999

An issue was discovered in sysPass 2.x before 2.1, in which an algorithm was never sufficiently reviewed by cryptographers. The fact that inc/SP/Core/Crypt.class is using the MCRYPTRIJNDAEL256 function the 256-bit block version of Rijndael, not AES instead of MCRYPTRIJNDAEL128 real AES could help...

CVE-2017-5999

The vulnerability CVE-2017-5999 affects sysPass 2.x before 2.1. The root cause is a cryptographic implementation using MCRYPT_RIJNDAEL_256() (256-bit block version) instead of MCRYPT_RIJNDAEL_128 (AES). This could allow an attacker to cause unknown havoc on the remote system. The connected source...

sysPass >= 2.0 risky cryptographic algorithm usage Vulnerability

Exploit for php platform in category web applications CVE-2017-5999 - sysPass risky cryptographic algorithm usage Credit: Guenaelle De Julis & Quentin Olagne CVE: CVE-2017-5999 Dates: 14/02/2017 Vendor: sysPass Product: sysPass Versions Affected: = 2.0 Risk / Severity Rating: 4.4 CVSSv2 SysPass...

CVE-2015-5999

Multiple cross-site request forgery CSRF vulnerabilities in the D-Link DIR-816L Wireless Router with firmware before 2.06.B09BETA allow remote attackers to hijack the authentication of administrators for requests that 1 change the admin password, 2 change the network policy, or 3 possibly have...

CVE-2015-5999

CVE-2015-5999 affects D-Link DIR-816L wireless routers running firmware before 2.06.B09_BETA. The vulnerability is a CSRF flaw that can hijack administrator authentication to perform actions such as changing the admin password and network policy via crafted requests to hedwig.cgi and pigwidgeon.c...

D-Link DIR-816L Wireless Router - Cross-Site Request Forgery

---------------------------------------------------------------------------------------------- Title: ==== D-link wireless router DIR-816L – Cross-Site Request Forgery CSRF vulnerability Credit: ====== Name: Bhadresh Patel Company/affiliation: HelpAG Website: www.helpag.com CVE: ===== CVE-2015-59...

CVE-2014-5999

The CVE-2014-5999 entry concerns the Android app autonavi (package com.telenav.doudouyou.android.autonavi, version 4.6.1). The root cause is failure to verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and access sensitive information via a crafted ...

Fedora Update for mingw-qt5-qtbase FEDORA-2014-5999

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...