CVE-2017-9466

The executable httpd on the TP-Link WR841N V8 router before TL-WR841NUNV8170210 contained a design flaw in the use of DES for block encryption. This resulted in incorrect access control, which allowed attackers to gain read-write access to system settings through the protected router configuratio...

CVE-2017-9466

The executable httpd on the TP-Link WR841N V8 router before TL-WR841NUNV8170210 contained a design flaw in the use of DES for block encryption. This resulted in incorrect access control, which allowed attackers to gain read-write access to system settings through the protected router configuratio...

TP-Link WR841N router arbitrary code execution vulnerability analysis-vulnerability warning-the black bar safety net

One, Foreword Recently, we at TP-Link WR841N V8 router has discovered two vulnerabilities, the use of these two vulnerabilities, we can in this paragraph on the router the implementation of our custom code. With the manufacturers friendly consultations after them in the new router firmware fixes...

TP-LINK WR841N Router Arbitrary Code Execution Vulnerability

The TP-Link WR841N is a SOHO wireless router. An arbitrary code execution vulnerability exists in the TP-LINK WR841N V8 and prior versions, which allows an attacker to bypass access restrictions to reset the router's authentication information passwords, etc.. After exploiting the vulnerability t...

TP-Link Fixes Code Execution Vulnerability in End of Life Routers

Router manufacturer TP-Link recently fixed a vulnerability in a discontinued line of routers that if exploited could have been used to execute code on the device. Researchers at Senrio, a firm that specializes in IoT security, uncovered a logic vulnerability in a configuration service present in...

Oracle Sun Solaris Network Configuration Service Subcomponent Denial of Service Vulnerability

Oracle Sun Solaris is a set of Unix-like operating systems from Oracle. A security vulnerability in the Network Configuration Service subcomponent of Oracle Sun Solaris version 11.3 can be exploited by a local attacker to cause a denial of service, which could impact data availability...

CVE-2016-3462

Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect availability via vectors related to Network Configuration Service...

CVE-2016-3462

Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect availability via vectors related to Network Configuration Service...

Design/Logic Flaw

Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect availability via vectors related to Network Configuration Service...

CVE-2016-3462

Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect availability via vectors related to Network Configuration Service...

CVE-2016-3462

Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect availability via vectors related to Network Configuration Service...

CVE-2016-3462

CVE-2016-3462 affects Oracle Solaris 11.3, specifically the Network Configuration Service subcomponent. The vulnerability allows a local attacker to cause a denial of service, impacting data availability. The root cause and exact exploit vector are not detailed in the provided documents beyond th...

Oracle Solaris Critical Patch Update : apr2016_SRU11_3_7_5_0

This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Network Configuration Service. The supported version that is affected is 11.3. Easily exploitable vulnerability allow...

CVE-2015-2593

Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.2.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Configuration Service...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.2.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Configuration Service...

CVE-2015-2593

Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.2.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Configuration Service...

Oracle Access Manager Multiple Vulnerabilities (July 2015 CPU)

The version of Oracle Access Manager installed on the remote host is affected by multiple vulnerabilities : - An unspecified flaw exists in the Configuration Service subcomponent that allows a remote, authenticated attacker to impact confidentiality and integrity. CVE-2015-2593 - An unspecified...

Sysmon v2.0 - System Activity Monitor for Windows

System Monitor Sysmon is a Windows system service and device driver that, once installed on a system, remains resident across system reboots to monitor and log system activity to the Windows event log. It provides detailed information about process creations, network connections, and changes to...

PT-2014-6182 · Bmc · Bmc Track-It!

Name of the Vulnerable Software and Affected Versions: BMC Track-It! version 11.3.0.355 Description: The issue allows remote attackers to upload arbitrary files, execute arbitrary code, or obtain sensitive credential and configuration information without requiring authentication on TCP port 9010...

MGASA-2014-0404 Updated fish package fixes multiple security vulnerabilities

Updated fish packages fix security vulnerability: fish, from at least version 1.16.0 to version 2.1.0 inclusive, does not check the credentials of processes communicating over the fishd universal variable server UNIX domain socket. This allows a local attacker to elevate their privileges to those...