CVE-2018-12257

CVE-2018-12257 affects Momentum Axel 720P 5.1.8. An authenticated root user with CLI access can remotely upgrade firmware to a custom image by exploiting DNS hijacking and the device’s lack of SSL validation: changing /etc/resolv.conf to point to the attacker’s server, then serving the expected H...

CVE-2018-12260

An issue was discovered on Momentum Axel 720P 5.1.8 devices. The root password can be obtained in cleartext by issuing the command 'showKey' from the root CLI. This password may be the same on all devices...

CVE-2018-12259

The CVE-2018-12259 issue affects Momentum Axel 720P devices running version 5.1.8. The root cause is unrestricted access to the system via UART pins, enabling an attacker with physical access to obtain root and fully compromise the device. Documents consistently describe root access through UART ...

CVE-2018-12261

The connected CNVD entry for CVE-2018-12261 describes a buffer overflow vulnerability in Momentum Axel 720P 5.1.8, with the impact stated as an attacker being able to gain access to user accounts. The documents do not specify the vulnerable component or exact exploit details, nor provide a remedi...

CVE-2018-12257

An issue was discovered on Momentum Axel 720P 5.1.8 devices. There is Authenticated Custom Firmware Upgrade via DNS Hijacking. An authenticated root user with CLI access is able to remotely upgrade firmware to a custom image due to lack of SSL validation by changing the nameservers in...

CVE-2018-12258

An issue was discovered on Momentum Axel 720P 5.1.8 devices. Custom Firmware Upgrade is possible via an SD Card. With physical access, an attacker can upgrade the firmware in under 60 seconds by inserting an SD card containing the firmware with name 'ezviz.dav' and rebooting...

CVE-2018-12259

An issue was discovered on Momentum Axel 720P 5.1.8 devices. Root access can be obtained via UART pins without any restrictions, which leads to full system compromise...

CVE-2018-10328

Momentum Axel 720P 5.1.8 devices have a hardcoded password of streaming for the appagent account, which allows remote attackers to view the RTSP video stream...

CVE-2018-10328

Momentum Axel 720P 5.1.8 devices have a hardcoded password of streaming for the appagent account, which allows remote attackers to view the RTSP video stream...

Hardcoded credentials

Momentum Axel 720P 5.1.8 devices have a hardcoded password of streaming for the appagent account, which allows remote attackers to view the RTSP video stream...

CVE-2018-10328

CVE-2018-10328 affects Momentum Axel 720P devices running version 5.1.8. The issue is a hardcoded password for the appagent account, allowing remote attackers to view the RTSP video stream. Documented CVSS: CVSS v3.0 base score 7.4 (HIGH), with ADJACENT network access, no user interaction, and co...

CVE-2018-10328

Momentum Axel 720P 5.1.8 devices have a hardcoded password of streaming for the appagent account, which allows remote attackers to view the RTSP video stream...

Momentum Axel 720P Information Disclosure Vulnerability

The Momentum Axel 720P is a dual-band HD camera that supports WiFi connectivity. A security vulnerability exists in the Momentum Axel 720P version 5.1.8, which stems from the appagent account using the hardcoded password: streaming.A remote attacker can exploit this vulnerability to view the vide...

WordPress User Login Log 2.2.1 Cross Site Scripting

------------------------------------------------------------------------ Stored Cross-Site Scripting vulnerability in User Login Log WordPress Plugin ------------------------------------------------------------------------ Axel Koolhaas, July 2016...

MS13-005 HWND_BROADCAST Low to Medium Integrity Privilege Escalation

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex' require 'msf/core/exploit/exe' class...

Boxalino Directory Traversal

COMPASS SECURITY ADVISORY http://www.csnc.ch/en/downloads/advisories.html Product: Boxalino Vendor: Boxalino AG www.boxalino.com CVD ID: CVE-2009-1479 Subject: Directory Traversal Vulnerabilities Risk: High Effect: Remotely exploitable Author: Axel Neumann Date: 2009-10-20 Introduction ----------...

boxalino 09.05.25-0421 - Directory Traversal

boxalino 09.05.25-0421 - Directory Traversal COMPASS SECURITY ADVISORY http://www.csnc.ch/en/downloads/advisories.html Product: Boxalino Vendor: Boxalino AG www.boxalino.com CVD ID: CVE-2009-1479 Subject: Directory Traversal Vulnerabilities Risk: High Effect: Remotely exploitable Author: Axel...

Boxalino 09.05.25-0421 Directory Traversal

Exploit for unknown platform in category web applications ========================================== Boxalino 09.05.25-0421 Directory Traversal ========================================== Product: Boxalino Vendor: Boxalino AG www.boxalino.com CVD ID: CVE-2009-1479 Subject: Directory Traversal...

[CVE-2009-1479] Boxalino - Directory Traversal Vulnerability

COMPASS SECURITY ADVISORY http://www.csnc.ch/en/downloads/advisories.html Product: Boxalino Vendor: Boxalino AG www.boxalino.com CVD ID: CVE-2009-1479 Subject: Directory Traversal Vulnerabilities Risk: High Effect: Remotely exploitable Author: Axel Neumann [email protected] Date: 2009-10-20...

boxalino 09.05.25-0421 - Directory Traversal

COMPASS SECURITY ADVISORY http://www.csnc.ch/en/downloads/advisories.html Product: Boxalino Vendor: Boxalino AG www.boxalino.com CVD ID: CVE-2009-1479 Subject: Directory Traversal Vulnerabilities Risk: High Effect: Remotely exploitable Author: Axel Neumann Date: 2009-10-20 Introduction ----------...