Foxconn femtocell FEMTO AP-FC4064-T elevation of privilege vulnerability

The Foxconn femtocell FEMTO AP-FC4064-T is a home base station device from Foxconn. A security vulnerability exists in the Foxconn femtocell FEMTO AP-FC4064-T APGTB385.8.3lb15-W47 LTE Build 15 version. An attacker can exploit the vulnerability to gain root privileges, take control of the system a...

CVE-2018-6295

Unencrypted way of remote control and communications in Hanwha Techwin Smartcams...

CVE-2018-6295

CVE-2018-6295 affects Hanwha Techwin SmartCam family with unencrypted remote control and communications. The NVD entry notes unencrypted remote control over network with low authentication, enabling potential unauthorized commands and control and high impact (C/H/I/A all high in CVSS3). Connected...

SecurEnvoy SecurMail 9.1.501 - Multiple Vulnerabilities

Exploit for asp platform in category web applications ======================================================================= title: Multiple Critical Vulnerabilities product: SecurEnvoy SecurMail vulnerable version: 9.1.501 fixed version: 9.2.501 or hotfix patch "1012018" CVE number:...

Solaris 10 (sparc) : 142785-17

Oracle Communications Calendar Server 7u5-17.22: core patch. Date this patch was last updated by Sun : Feb/21/15 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Solaris 10 (x86) : 142786-17

Oracle Communications Calendar Server 7u5-17.22x86: core patch. Date this patch was last updated by Sun : Feb/21/15 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Design/Logic Flaw

One can gain root access on the Foxconn femtocell FEMTO AP-FC4064-T version APGTB385.8.3lb15-W47 LTE Build 15 via UART pins without any restrictions, which leads to full system compromise and disclosure of user communications...

CVE-2018-6311

One can gain root access on the Foxconn femtocell FEMTO AP-FC4064-T version APGTB385.8.3lb15-W47 LTE Build 15 via UART pins without any restrictions, which leads to full system compromise and disclosure of user communications...

CVE-2018-6311

One can gain root access on the Foxconn femtocell FEMTO AP-FC4064-T version APGTB385.8.3lb15-W47 LTE Build 15 via UART pins without any restrictions, which leads to full system compromise and disclosure of user communications...

Default credentials

A privileged account with a weak default password on the Foxconn femtocell FEMTO AP-FC4064-T version APGTB385.8.3lb15-W47 LTE Build 15 can be used to turn on the TELNET service via the web interface, which allows root login without any password. This vulnerability will lead to full system...

CVE-2018-6311

CVE-2018-6311 affects Foxconn FEMTO AP-FC4064-T (AP_GT_B38_5.8.3lb15-W47 LTE Build 15). The vulnerability allows gaining root access via UART pins, leading to full system compromise and exposure of user communications. Connected records corroborate root-privilege elevation without restrictions on...

CVE-2018-6312

The CVE-2018-6312 entry concerns Foxconn FEMTO AP-FC4064-T (AP_GT_B38_5.8.3lb15-W47 LTE Build 15). A privileged account with a weak default password enables turning on TELNET via the web interface, allowing root login without a password and full system compromise with access to user communication...

CVE-2018-6311

One can gain root access on the Foxconn femtocell FEMTO AP-FC4064-T version APGTB385.8.3lb15-W47 LTE Build 15 via UART pins without any restrictions, which leads to full system compromise and disclosure of user communications...

CVE-2018-6312

A privileged account with a weak default password on the Foxconn femtocell FEMTO AP-FC4064-T version APGTB385.8.3lb15-W47 LTE Build 15 can be used to turn on the TELNET service via the web interface, which allows root login without any password. This vulnerability will lead to full system...

The Slingshot APT FAQ

While analysing an incident which involved a suspected keylogger, we identified a malicious library able to interact with a virtual file system, which is usually the sign of an advanced APT actor. This turned out to be a malicious loader internally named 'Slingshot', part of a new, and highly...

imaginecommunications.com XSS vulnerability

Open Bug Bounty ID: OBB-569981 Description| Value ---|--- Affected Website:| imaginecommunications.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Trend Micro Email Encryption Gateway Information Disclosure Vulnerability

Trend Micro Email Encryption is a suite of identity-based email encryption solutions from Trend Micro, Inc. The Trend Micro Email Encryption Gateway TMEEG is one of the gateway products that provides data protection. An information disclosure vulnerability exists in Trend Micro Email Encryption...

Cross site scripting

A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due...

Code injection

A vulnerability in Cisco Unified Communications Domain Manager could allow an unauthenticated, remote attacker to bypass security protections, gain elevated privileges, and execute arbitrary code. The vulnerability is due to insecure key generation during application configuration. An attacker...

CVE-2018-0206

A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due...