223 matches found
80% of Global Enterprises Report Firmware Cyberattacks
Attacks against firmware are snowballing, outstripping many organizations’ cyber-defenses, according to a survey from Microsoft. The report showed that more than 80 percent of enterprises have experienced at least one firmware attack in the past two years – but only 29 percent of security budgets...
CVE-2020-7594
MultiTech Conduit MTCDT-LVW2-24XX 1.4.17-ocea-13592 devices allow remote authenticated administrators to execute arbitrary OS commands by navigating to the Debug Options page and entering shell metacharacters in the interface JSON field of the ping function...
CVE-2020-7594
MultiTech Conduit MTCDT-LVW2-24XX 1.4.17-ocea-13592 devices allow remote authenticated administrators to execute arbitrary OS commands by navigating to the Debug Options page and entering shell metacharacters in the interface JSON field of the ping function...
CVE-2020-7594
MultiTech Conduit MTCDT-LVW2-24XX 1.4.17-ocea-13592 devices allow remote authenticated administrators to execute arbitrary OS commands by navigating to the Debug Options page and entering shell metacharacters in the interface JSON field of the ping function...
Input validation
MultiTech Conduit MTCDT-LVW2-24XX 1.4.17-ocea-13592 devices allow remote authenticated administrators to execute arbitrary OS commands by navigating to the Debug Options page and entering shell metacharacters in the interface JSON field of the ping function...
CVE-2020-7594
The CVE-2020-7594 entry concerns MultiTech Conduit MTCDT-LVW2-24XX devices (version 1.4.17-ocea-13592). The vulnerability arises from allowing remote authenticated administrators to execute arbitrary OS commands by navigating to the Debug Options page and entering shell metacharacters in the inte...
CVE-2020-7594
MultiTech Conduit MTCDT-LVW2-24XX 1.4.17-ocea-13592 devices allow remote authenticated administrators to execute arbitrary OS commands by navigating to the Debug Options page and entering shell metacharacters in the interface JSON field of the ping function...
CVE-2020-7594: Improper Neutralization of Special Elements used in an OS Command
MultiTech Conduit MTCDT-LVW2-24XX 1.4.17-ocea-13592 devices allow remote authenticated administrators to execute arbitrary OS commands by navigating to the Debug Options page and entering shell metacharacters in the interface JSON field of the ping function...
PT-2020-19643
Name of the Vulnerable Software and Affected Versions MultiTech Conduit MTCDT-LVW2-24XX version 1.4.17-ocea-13592 Description The issue allows remote authenticated administrators to execute arbitrary OS commands. This can be achieved by navigating to the Debug Options page and entering shell...
Multiple Apple Products AppleFileConduit Component Memory Corruption Vulnerability
Apple iOS is an operating system developed for mobile devices.Apple tvOS is a smart TV operating system.Apple watchOS is a smart watch operating system.AppleFileConduit is one of the file transfer support components.Apple iOS is an operating system developed for mobile devices.Apple watchOS is a...
Phabricator: Passphrase credential lock bypass
mongoose :D Testing was performed on our own installed testing environment, with a standard installation and configuration of Phabricator. The Passphrase application has feature where stored credentials can be locked. When you lock a credential, it claims "This credential will be locked and the...
Conduit Mobile Cross Site Scripting
TITLE: Conduit MOBILE PERSISTENT XSS vendor: Conduit Author: r007k17-w Email: [email protected] TWITTER: http://twitter.com/r007k17w My blog: http://shadowrootkit.wordpress.com/ Google Dork: © 2012 Conduit...
Conduit Wibiya Open URL Redirection
TITLE: Conduit Wibiya open URL Redirection vendor: Conduit Author: r007k17-w Email: [email protected] http://www.facebook.com/!/r007k17w My blog: http://shadowrootkit.wordpress.com/ Google Dork: Modular Patterns Ltd. c 2012...
Conduit Wibiya Password Recovery Toolbar Cross Site Scripting
TITLE: Conduit wibiya password recovery toolbar Cross site Scripting vendor: Conduit Author: r007k17-w Email: [email protected] My blog: http://shadowrootkit.wordpress.com/ Google Dork: © 2012 Conduit...
Conduit Wibiya Login Toolbar Cross Site Scripting
TITLE: Conduit wibiya Login toolbar Cross site Scripting vendor: Conduit Author: r007k17-w Email: [email protected] My blog: http://shadowrootkit.wordpress.com/ Google Dork: Modular Patterns Ltd. c 2012...
Conduit Image Search Engine Cross Site Scripting
TITLE: Conduit Image Search Engine Cross site Scripting vendor: Conduit Author: r007k17-w Email: [email protected] My blog: http://shadowrootkit.wordpress.com/ Google Dork: © 2012 Conduit...
Novell ZENworks Handheld Management ZfHIPCND.exe Buffer Overflow (CVE-2010-4299)
Novell ZENworks Handheld Management is part of the Novell ZENworks suite that allows administrators to remotely update, configure, and inventory handheld devices such as Palm, Windows CE, PocketPC, and RIM BlackBerry. A buffer overflow vulnerability has been reported in Novell ZENworks Handheld...
CVE-2011-0742
Buffer overflow in ZfHIPCND.exe in Novell ZENworks Handheld Management 7.0 allows remote attackers to execute arbitrary code via a crafted IP Conduit packet to TCP port 2400...
Buffer overflow
Buffer overflow in ZfHIPCND.exe in Novell ZENworks Handheld Management 7.0 allows remote attackers to execute arbitrary code via a crafted IP Conduit packet to TCP port 2400...