CVE-2020-27053

In broadcastWifiCredentialChanged of ClientModeImpl.java, there is a possible location permission bypass due to a missing permission check. This could lead to local information disclosure of the WiFi network name with System execution privileges needed. User interaction is not needed for...

Cisco 7937G SSH Privilege Escalation

This module exploits a feature that should not be available via the web interface. An unauthenticated user may change the credentials for SSH access to any username and password combination desired, giving access to administrative functions through an SSH connection. Module Options msf use...

Logic flaw vulnerability in YCCMS Ad***.cl***.php file

YCCMS is a version of PHP5 + MYSQL as the technical basis for the development of lightweight CMS station-building system. A logic flaw exists in the YCCMS Ad.cl.php file. An attacker can use the vulnerability to change any user name and password without authorization...

SKT LTE Wi-Fi SDT-CW3B1 - Unauthorized Admin Credential Change

Exploit Title: SKT LTE Wi-Fi SDT-CW3B1 - Unauthorized Admin Credential Change Shodan Dork: SDT-CW3B1 Date: 2018-05-23 Exploit Author: Safak Aslan Vendor Homepage: http://telesquare.co.kr/ Version: SKT CW3B1 sw version 1.2.0 Tested on: Windows CVE: - Class: Unauthorized Admin Credential Change...

SKT LTE Wi-Fi SDT-CW3B1 - Unauthorized Admin Credential Change

SKT LTE Wi-Fi SDT-CW3B1 - Unauthorized Admin Credential Change Exploit Title: SKT LTE Wi-Fi SDT-CW3B1 - Unauthorized Admin Credential Change Shodan Dork: SDT-CW3B1 Date: 2018-05-23 Exploit Author: Safak Aslan Vendor Homepage: http://telesquare.co.kr/ Version: SKT CW3B1 sw version 1.2.0 Tested on:...

CVE-2017-16886

The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interact with the portal. Unauthorized Access to Web Services via CSRF can result in an unauthorized change of username or password of the administrator of the portal...

PT-2017-12516

Name of the Vulnerable Software and Affected Versions Cisco Umbrella Insights Virtual Appliances versions 2.1.0 and earlier Description A vulnerability could allow an authenticated, local attacker to log in to an affected virtual appliance with root privileges due to the presence of default, stat...

PT-2017-18720

Name of the Vulnerable Software and Affected Versions Tenda routers FH1202/F1202/F1200 versions prior to 1.2.0.20 Description The issue allows an attacker to bypass intended access restrictions on the router. After establishing a local connection, either wired or wireless, an attacker can send...

Sql injection

SQL injection vulnerability in the password recovery feature in Yeager CMS 1.2.1 allows remote attackers to change the account credentials of known users via the "userEmail" parameter...

CVE-2015-7568: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the password recovery feature in Yeager CMS 1.2.1 allows remote attackers to change the account credentials of known users via the "userEmail" parameter...

FireEye Responds to Wave of Destructive Cyber Attacks in Gulf Region

In 2012, a suspected Iranian hacker group called the “Cutting Sword of Justice” used malware known as Shamoon – or Disttrack. In mid-November, Mandiant, a FireEye company, responded to the first Shamoon 2.0 incident against an organization located in the Gulf states. Since then, Mandiant has...