CVE-2018-8032

Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting XSS attack in the default servlet/services...

CVE-2018-8032

CVE-2018-8032 affects Apache Axis 1.x (up to 1.4) with a cross-site scripting (XSS) vulnerability in the default servlet/services. This vulnerability is documented in IBM/PM security bulletins linked to Axis, confirming an XSS flaw (CWE-79) in Axis 1.x and indicating broader IBM product exposure....

Apache Axis CVE-2018-8032 Cross-Site Scripting Vulnerability

Description Apache Axis is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the...

CVE-2018-8032: Improper Neutralization of Input During Web Page Generation

Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting XSS attack in the default servlet/services...

Axis Network Camera Remote Command Execution Exploit

This Metasploit module exploits an authentication bypass in .srv functionality and a command injection in parhand to execute code as the root user. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModul...

Axis Network Camera - .srv to parhand Remote Code Execution (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Axis Network Camera .srv to parhand RCE', 'Description' = %q This module exploits an auth bypass in .srv functionality and a command injection in...

Axis Network Camera Remote Command Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Axis Network Camera .srv to parhand RCE', 'Description' = %q This module exploits an auth bypass in .srv functionality and a command injection in...

PT-2018-3243

Name of the Vulnerable Software and Affected Versions Apache Axis versions 1.x up to and including 1.4 Description The issue exists due to inadequate protection of the web page structure in the Apache Axis platform. This allows a remote attacker to perform cross-site scripting XSS attacks...

Newsmaker Interview: VDOO CEO Talks Top IoT Threats

IoT security is like a game of Whac-A-Mole. Fix one CVE and four new bugs pop up. Last month, researchers found a slew of vulnerabilities in Axis cameras that could enable an attacker to access camera video streams, control the camera, add it to a botnet or render it useless. Also in June, IP...

Axis IP Cameras Memory Corruption Vulnerability

Axis IP Cameras is a network camera product from Axis, Sweden. A memory corruption vulnerability exists in several modules in Axis IP Cameras. An attacker could exploit this vulnerability to cause a denial of service memory corruption and crash...

CVE-2018-10660

An issue was discovered in multiple models of Axis IP Cameras. There is Shell Command Injection...

CVE-2018-10658

There was a Memory Corruption issue discovered in multiple models of Axis IP Cameras which causes a denial of service crash. The crash arises from code inside libdbus-send.so shared object or similar...

CVE-2018-10661

An issue was discovered in multiple models of Axis IP Cameras. There is a bypass of access control...

CVE-2018-10664

An issue was discovered in the httpd process in multiple models of Axis IP Cameras. There is Memory Corruption...

CVE-2018-10659

There was a Memory Corruption issue discovered in multiple models of Axis IP Cameras which allows remote attackers to cause a denial of service crash by sending a crafted command which will result in a code path that calls the UND undefined ARM instruction...

CVE-2018-10663

An issue was discovered in multiple models of Axis IP Cameras. There is an Incorrect Size Calculation...

Command injection

An issue was discovered in multiple models of Axis IP Cameras. There is Shell Command Injection...

Memory corruption

An issue was discovered in the httpd process in multiple models of Axis IP Cameras. There is Memory Corruption...

Memory corruption

There was a Memory Corruption issue discovered in multiple models of Axis IP Cameras which causes a denial of service crash. The crash arises from code inside libdbus-send.so shared object or similar...

Memory corruption

There was a Memory Corruption issue discovered in multiple models of Axis IP Cameras which allows remote attackers to cause a denial of service crash by sending a crafted command which will result in a code path that calls the UND undefined ARM instruction...