273 matches found
Design/Logic Flaw
DVR firmware in TAT-76 and TAT-77 series of products, provided by TONNET do not properly verify patch files. Attackers can inject a specific command into a patch file and gain access to the system...
Default credentials
DVR firmware in TAT-76 and TAT-77 series of products, provided by TONNET, contain misconfigured authentication mechanism. Attackers can crack the default password and gain access to the system...
CVE-2020-3924
CVE-2020-3924 concerns TONNET DVR firmware for the TAT-76 and TAT-77 series, where patch files are not properly verified. The vulnerability enables an attacker to inject a specific command into a patch file and gain access to the system. The available documents do not provide exploitation details...
CVE-2020-3924 TONNET DVR – Firmware Injection
DVR firmware in TAT-76 and TAT-77 series of products, provided by TONNET do not properly verify patch files. Attackers can inject a specific command into a patch file and gain access to the system...
CVE-2020-3924: Improper Neutralization of Special Elements used in a Command
DVR firmware in TAT-76 and TAT-77 series of products, provided by TONNET do not properly verify patch files. Attackers can inject a specific command into a patch file and gain access to the system...
CVE-2020-3923: Improper Authentication
DVR firmware in TAT-76 and TAT-77 series of products, provided by TONNET, contain misconfigured authentication mechanism. Attackers can crack the default password and gain access to the system...
PT-2020-17800
Name of the Vulnerable Software and Affected Versions TONNET TAT-76 series affected versions not specified TONNET TAT-77 series affected versions not specified Description The issue concerns the DVR firmware in TAT-76 and TAT-77 series of products, which do not properly verify patch files. This...
PT-2020-17799
Name of the Vulnerable Software and Affected Versions TONNET DVR firmware versions in TAT-76 and TAT-77 series affected versions not specified Description The issue concerns a misconfigured authentication mechanism in the DVR firmware. This allows attackers to crack the default password and gain...
Huawei EulerOS: Security Advisory for python (EulerOS-SA-2020-1126)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP5 : python (EulerOS-SA-2020-1126)
According to the versions of the python packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Lib/zipfile.py in Python through 3.7.2 allows remote attackers to cause a denial of service resource consumption via a ZIP bomb.CVE-2019-9674 -...
theonegroup.co.uk Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1091658 Security Researcher securaji Helped patch 77 vulnerabilities Received 3 Coordinated Disclosure badges Received 4 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting theonegroup.co.uk website an...
ynyshir.co.uk Cross Site Scripting vulnerability
Security Researcher securaji Helped patch 77 vulnerabilities Received 3 Coordinated Disclosure badges Received 4 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting ynyshir.co.uk website and its users. Following coordinated a...
sureservegroup.co.uk Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1082512 Security Researcher securaji Helped patch 77 vulnerabilities Received 3 Coordinated Disclosure badges Received 4 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting sureservegroup.co.uk website...
rapairport.com Cross Site Scripting vulnerability
Security Researcher securaji Helped patch 77 vulnerabilities Received 3 Coordinated Disclosure badges Received 4 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting rapairport.com website and its users. Following coordinated...
Amazon Linux AMI : rssh (ALAS-2019-1328)
Insufficient sanitation of environment variables passed to rsync can bypass the restrictions imposed by rssh, a restricted shell that should restrict users to perform only rsync operations, resulting in the execution of arbitrary shell commands. CVE-2019-3464 Insufficient sanitation of arguments...
DEBIAN-CVE-2019-5879
Insufficient policy enforcement in extensions in Google Chrome prior to 77.0.3865.75 allowed an attacker who convinced a user to install a malicious extension to read local files via a crafted Chrome Extension...
DEBIAN-CVE-2019-5877
Out of bounds memory access in JavaScript in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
DEBIAN-CVE-2019-13679
Insufficient policy enforcement in PDFium in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to show print dialogs via a crafted PDF file...