Command injection

A service which is hosted on port 6998 in HiNet GPON firmware I040GWR190731 allows an attacker to execute a specific command to read arbitrary files. CVSS 3.0 Base score 9.3. CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L...

CVE-2019-15065 A vulnerability was discovered in HiNet GPON firmware < I040GWR190731 that allows an attacker to read arbitrary files

A service which is hosted on port 6998 in HiNet GPON firmware I040GWR190731 allows an attacker to execute a specific command to read arbitrary files. CVSS 3.0 Base score 9.3. CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L...

CVE-2019-15065

CVE-2019-15065 affects Chunghwa HiNet GPON firmware prior to I040GWR190731. A service hosted on port 6998 allows an attacker to execute commands to read arbitrary files, enabling high-severity impact (CVSS 3.0 base 9.3). Affected target: HiNet GPON firmware

CVE-2019-15066 A remote command execution vulnerability was discovered in HiNet GPON firmware < I040GWR190731 port 6998

An “invalid command” handler issue was discovered in HiNet GPON firmware I040GWR190731. It allows an attacker to execute arbitrary command through port 6998. CVSS 3.0 Base score 10.0. CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H...

CVE-2018-6998

...

Security research team released 8 Apple iOS security vulnerability: hackers can easily attack-vulnerability warning-the black bar safety net

According to foreign media ZDNet reports, the Israeli mobile security company Zimperium recently released 8 Apple iOS system vulnerabilities, hackers can exploit these vulnerabilities to completely control the user's iOS device, so as to obtain the device's GPS data, photos, and contact...

CVE-2017-6998

CVE-2017-6998 affects Apple AVEVideoEncoder in iOS (pre-10.3.2), tvOS (pre-10.2.1), and watchOS (pre-3.2.2). A crafted app could trigger memory corruption in AVEVideoEncoder to execute arbitrary code with kernel privileges or cause a denial of service. The issue is a local attack requiring user i...

CVE-2015-6998

This CVE-2015-6998 entry is rejected/not used and does not represent an active vulnerability.

CVE-2015-6998

...

CVE-2016-6998

Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before 15.020.20039 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...

CVE-2016-6998

Technical details for CVE-2016-6998 are not publicly available in the provided documents. Monitor for updates.

CVE-2013-6998

This CVE entry is rejected/not used; duplicate of CVE-2013-6870.

CVE-2013-6998

...

CVE-2014-6998

The PinkFong TV Android app (package kr.co.smartstudy.pinkfongtv_android_googlemarket, version 4) does not verify X.509 certificates from SSL servers, enabling MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. The root cause is improper certificate valida...

CVE-2008-6998

Summary: CVE-2008-6998 is a stack-based buffer overflow in Google Chrome’s chrome/common/gfx/url_elider.cc affecting Chrome 0.2.149.27 and earlier than 0.2.149.29. Vulnerability: triggering overflow when a link href contains a large number of path elements, surfacing during status bar updates aft...

CVE-2008-6231

creationtimestamp| type| source ---|---|--- 2008-11-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6998 2008-11-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7000...

CVE-2008-6998

creationtimestamp| type| source ---|---|--- 2008-09-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6372...

CVE-2006-6998

install/loaderhelp.php in Headstart Solutions DeskPRO allows remote attackers to obtain configuration information via a q=phpinfo QUERYSTRING, which calls the phpinfo function...

CVE-2006-6998

CVE-2006-6998 affects Headstart Solutions DeskPRO. The vulnerable file is install/loader_help.php, which can be accessed with a q=phpinfo QUERY_STRING to trigger phpinfo, allowing remote attackers to obtain configuration information. Documented impact is Partial Confidentiality with no integrity/...