CVE-2014-9134

Huawei Honor Cube Wireless Router WS860s (before V100R001C02B222) has an Unrestricted file upload vulnerability (CVE-2014-9134) that enables remote attackers to execute arbitrary code by uploading a file with an executable extension and then accessing it via unspecified vectors. The advisory HWPS...

IPUX CS7522CS2330CS2030 IP Camera - UltraHVCamX.ocx ActiveX Stack Buffer Overflow

IPUX CS7522CS2330CS2030 IP Camera - UltraHVCamX.ocx ActiveX Stack Buffer Overflow IPUX CS7522/CS2330/CS2030 IP Camera UltraHVCamX.ocx ActiveX Stack Buffer Overflow Vendor: Big Good Holdings Limited | Fitivision Technology Inc. Product web page: http://www.ipux.net | http://www.fitivision.com...

IPUX Cube Type CS303C IP Camera - 'UltraMJCamX.ocx' ActiveX Stack Buffer Overflow

IPUX Cube Type CS303C IP Camera UltraMJCamX.ocx ActiveX Stack Buffer Overflow Vendor: Big Good Holdings Limited | Fitivision Technology Inc. Product web page: http://www.ipux.net | http://www.fitivision.com Affected version: Cube Type ICS303C firmware: ICS303C 1.0.0-17 20140120 r1511 Summary: The...

IPUX Cube Type CS303C IP Camera - (UltraMJCamX.ocx) ActiveX Stack Buffer Overflow

Exploit for hardware platform in category web applications IPUX Cube Type CS303C IP Camera UltraMJCamX.ocx ActiveX Stack Buffer Overflow Vendor: Big Good Holdings Limited | Fitivision Technology Inc. Product web page: http://www.ipux.net | http://www.fitivision.com Affected version: Cube Type...

IPUX Cube Type CS303C IP Camera - UltraMJCamX.ocx ActiveX Stack Buffer Overflow

IPUX Cube Type CS303C IP Camera - UltraMJCamX.ocx ActiveX Stack Buffer Overflow IPUX Cube Type CS303C IP Camera UltraMJCamX.ocx ActiveX Stack Buffer Overflow Vendor: Big Good Holdings Limited | Fitivision Technology Inc. Product web page: http://www.ipux.net | http://www.fitivision.com Affected...

IPUX Cube Type CS303C IP Camera (UltraMJCamX.ocx) ActiveX Stack Buffer Overflow

Summary The device is Day and Night Cube Network camera with CMOS sensor. With Motion JPEG video compression, the file size of video stream is extremely reduced, as to optimize the network bandwidth efficiency. It has 3X digital zoom feature for a larger space monitoring. The ICS303C comes with a...

Security Advisory-File Upload Vulnerability on Huawei Honor Cube Wireless Router WS860s

Huawei Honor Cube wireless router WS860s supports the file upload function. It allows users to access its files through the web page. As the device is unable to verify every type of file to be uploaded and does not strictly restrict the file access path through the web page, attackers may upload...

Cube <= 2005_08_29 Multiple BoF/Crash Vulnerabilities Exploit

No description provided by source. / by Luigi Auriemma You NEED Enet for compiling this tool then remember -lenet http://enet.bespin.org / http://enet.cubik.org / include stdio.h include stdlib.h include string.h include enet/enet.h define VER 0.1 define PORT 28765 define MAXTRANS 5000 define BOF...

Round Cube Webmail 0.1 -20051021 Path Disclosure Weakness

No description provided by source. source: http://www.securityfocus.com/bid/15920/info Round Cube will reportedly reveal its installation path in an error message output to the client. The filesystem layout can be sensitive information that is useful in other attacks against the target server. Th...

Cisco IOS CUBE RTCP Request Processing DoS

According to its self-reported IOS version, the remote device may be affected by a denial of service vulnerability related to the Cisco Unified Border Element CUBE and incorrect handling of Real-Time Control Protocol RTCP traffic. A remote, unauthenticated attacker could exploit this issue by...

CVE-2014-3268

CVE-2014-3268 affects Cisco IOS on Cisco Unified Border Element (CUBE) devices, specifically Cisco IOS 15.2(4)M4, where RTCP traffic handling can exhaust the interface input queue and cause a DoS (input-queue consumption and traffic-processing outage). The issue is triggered by crafted RTCP packe...

CVE-2012-5427

Cisco IOS Unified Border Element CUBE in Cisco IOS before 15.32T allows remote authenticated users to cause a denial of service input queue wedge via a crafted series of RTCP packets, aka Bug ID CSCuc42518...

CVE-2012-5427

CVE-2012-5427 affects Cisco IOS Unified Border Element (CUBE) prior to version 15.3(2)T. A remote authenticated user can cause a denial of service (input queue wedge) by sending a crafted series of RTCP packets (Bug ID CSCuc42518). The NVD record notes a CVSS v2 base score of 4.0 (Medium) with ne...

CVE-2012-5427

Cisco IOS Unified Border Element CUBE in Cisco IOS before 15.32T allows remote authenticated users to cause a denial of service input queue wedge via a crafted series of RTCP packets, aka Bug ID CSCuc42518...

CVE-2014-0807

data/class/pages/shopping/LCPageShoppingDeliv.php in LOCKON EC-CUBE 2.4.4 and earlier, and 2.11.0 through 2.12.2, allows remote attackers to modify data via unspecified vectors...

CVE-2014-0808

Authorization bypass through user-controlled key issue exists in EC-CUBE 2.11.0 through 2.12.2 and EC-Orange systems deployed before June 29th, 2015. If this vulnerability is exploited, a user of the affected shopping website may obtain other users' information by sending a crafted HTTP request...

Authentication flaw

data/class/pages/shopping/LCPageShoppingDeliv.php in LOCKON EC-CUBE 2.4.4 and earlier, and 2.11.0 through 2.12.2, allows remote attackers to modify data via unspecified vectors...

CVE-2014-0808

Authorization bypass through user-controlled key issue exists in EC-CUBE 2.11.0 through 2.12.2 and EC-Orange systems deployed before June 29th, 2015. If this vulnerability is exploited, a user of the affected shopping website may obtain other users' information by sending a crafted HTTP request...

CVE-2014-0808

Authorization bypass through user-controlled key issue exists in EC-CUBE 2.11.0 through 2.12.2 and EC-Orange systems deployed before June 29th, 2015. If this vulnerability is exploited, a user of the affected shopping website may obtain other users' information by sending a crafted HTTP request...

CVE-2014-0807

CVE-2014-0807 affects LOCKON EC-CUBE, impacting data modification via the vulnerable file LC_Page_Shopping_Deliv.php in EC-CUBE 2.4.4 and earlier, and 2.11.0 through 2.12.2. The root cause is described as an information alteration vulnerability that allows remote attackers to modify data; vectors...