8216 matches found
CVE-2018-10252
An issue was discovered on Actiontec WCB6200Q before 1.1.10.20a devices. The admin login session cookie is insecurely generated making admin session hijacking possible. When an admin logs in, a session cookie is generated using the time of day rounded to 10ms. Since the web server returns its...
CVE-2018-10252
An issue was discovered on Actiontec WCB6200Q before 1.1.10.20a devices. The admin login session cookie is insecurely generated making admin session hijacking possible. When an admin logs in, a session cookie is generated using the time of day rounded to 10ms. Since the web server returns its...
CVE-2018-10252
CVE-2018-10252 affects Actiontec WCB6200Q prior to firmware 1.1.10.20a. The admin login session cookie is generated insecurely (time-of-day rounded to 10 ms), allowing an attacker to step through possible session IDs and hijack admin sessions. Once a valid session is obtained, the attacker can ad...
CVE-2018-6361
Easy Hosting Control Panel EHCP v0.37.12.b has XSS via the op parameter, as demonstrated by adding a backdoor FTP account...
CVE-2018-6361
Easy Hosting Control Panel EHCP v0.37.12.b has XSS via the op parameter, as demonstrated by adding a backdoor FTP account...
CVE-2018-6361
Easy Hosting Control Panel EHCP v0.37.12.b has XSS via the op parameter, as demonstrated by adding a backdoor FTP account...
Threat Roundup for May 04 - 11
Today, Talos is publishing a glimpse into the most prevalent threats we've observed between May 4 and May 11. As with previous round-ups, this post isn't meant to be an in-depth analysis. Instead, this post will summarize the threats we've observed by highlighting key behavioral characteristics,...
Nexevo Contact Form, Backdoor
Nexevo Contact Form, Backdoor Resolution: update to 1.0.2 Users should also check for the existence of a plugin called System - Section among their installed extensions. It is malware and needs to be removed and the site treated as hacked. Further information here:...
Supply-Chain Security
Earlier this month, the Pentagon stopped selling phones made by the Chinese companies ZTE and Huawei on military bases because they might be used to spy on their users. It's a legitimate fear, and perhaps a prudent action. But it's just one instance of the much larger issue of securing our supply...
Multiple KONGTOP DVR Products Information Disclosure Vulnerability
KONGTOP DVR A303 and so on are different models of network DVR equipment from China KONGTOP KONGTOP Industrial Company. A security vulnerability exists in several KONGTOP DVR products, which originates from a backdoor in the Telnetd file. The vulnerability is caused by a backdoor in the Telnetd...
Microsoft Word Document Upload to Stored XSS: A Case Study
Anytime I see a file upload form during an application test, my attention is piqued. In a best-case scenario, I can upload a reverse shell in a scripting language available on the webserver. If the application is running in PHP or ASP for example, it becomes quite easy. If I cant get a backdoor...
Malicious Package
ssh-decorator is a malicious package. The package contains a backdoor to steal a user's ssh credentials...
Default credentials
KONGTOP DVR devices A303, A403, D303, D305, and D403 contain a backdoor that prints the login password via a PrintPassword function call in certain circumstances...
CVE-2018-10734
KONGTOP DVR devices A303, A403, D303, D305, and D403 contain a backdoor that prints the login password via a PrintPassword function call in certain circumstances...
CVE-2018-10734
CVE-2018-10734 affects KONGTOP DVR models A303, A403, D303, D305, and D403. A backdoor in the Telnetd/related components allows a Print_Password path to disclose login passwords under certain conditions, enabling information disclosure and potential device compromise via the Telnet interface. The...
CVE-2018-10734
KONGTOP DVR devices A303, A403, D303, D305, and D403 contain a backdoor that prints the login password via a PrintPassword function call in certain circumstances...
BACKDOOR IN SONY IPELA ENGINE IP CAMERAS
EC Consult has found a backdoor in Sony IPELA Engine IP Cameras, mainly used professionally by enterprises and authorities. This backdoor allows an attacker to run arbitrary code on the affected IP cameras. An attacker can use cameras to take a foothold in a network and launch further attacks,...
PT-2018-3911 · D Link · D-Link Di-604 +1
Name of the Vulnerable Software and Affected Versions: D-Link DIR-550A versions through v2.10KR D-Link DIR-604M versions through v2.10KR Description: The issue is related to a backdoor access vulnerability, allowing a malicious user to gain unauthorized access to vulnerable devices using a defaul...
Ray Ozzie's Encryption Backdoor
Last month, Wired published a long article about Ray Ozzie and his supposed new scheme for adding a backdoor in encrypted devices. It's a weird article. It paints Ozzie's proposal as something that "attains the impossible" and "satisfies both law enforcement and privacy purists," when 1 it's bare...