CVE-2017-7852

D-Link DCS cameras have a weak/insecure CrossDomain.XML file that allows sites hosting malicious Flash objects to access and/or change the device's settings via a CSRF attack. This is because of the 'allow-access-from domain' child element set to , thus accepting requests from any domain. If a...

CVE-2017-7852

CVE-2017-7852 affects D-Link DCS series cameras (notably DCS-933L, DCS-5030L, DCS-5020L, DCS-2530L, DCS-2630L, DCS-930L, DCS-932L, DCS-932LB1). Root cause: weak CrossDomain.XML with allow-access-from set to * enables Cross-Site Request Forgery (CSRF) via malicious Flash hosted on attacker sites. ...

PT-2017-17954 · D Link · Dcs-932Lb1 +7

Name of the Vulnerable Software and Affected Versions: D-Link DCS-933L versions prior to 1.13.05 D-Link DCS-5030L D-Link DCS-5020L D-Link DCS-2530L D-Link DCS-2630L D-Link DCS-930L D-Link DCS-932L D-Link DCS-932LB1 Description: The issue allows sites hosting malicious Flash objects to access and/...

CVE-2017-7852: Cross-Site Request Forgery (CSRF)

D-Link DCS cameras have a weak/insecure CrossDomain.XML file that allows sites hosting malicious Flash objects to access and/or change the device's settings via a CSRF attack. This is because of the 'allow-access-from domain' child element set to , thus accepting requests from any domain. If a...

D-Link DCS-936L Network Camera - Cross-Site Request Forgery

Exploit Title: D-Link DCS-936L network camera incomplete/weak CSRF protection vulnerability Date: 26/03/2017 Exploit Author: SlidingWindow , Twitter: @KapilKhot Vendor Homepage: http://us.dlink.com/product-category/home-solutions/view/network-cameras/ Version: Tested on DCS-936L with firmware...

D-Link DCS Series Cameras - Insecure Crossdomain

Exploit Title: Insecure CrossDomain.XML in D-Link DCS Series Cameras Date: 22/02/2017 Exploit Author: SlidingWindow , Twitter: @KapilKhot Vendor Homepage: http://us.dlink.com/product-category/home-solutions/view/network-cameras/ Version: Tested on DCS-933L with firmware version 1.03. Other...

Arista EOS DoS Vulnerability (Security Advisory 0025)

Arista EOS on DCS-7050 series is prone to a denial of service vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2016-6894

Arista EOS 4.15 before 4.15.8M, 4.16 before 4.16.7M, and 4.17 before 4.17.0F on DCS-7050 series devices allow remote attackers to cause a denial of service device reboot by sending crafted packets to the control plane...

Code injection

Arista EOS 4.15 before 4.15.8M, 4.16 before 4.16.7M, and 4.17 before 4.17.0F on DCS-7050 series devices allow remote attackers to cause a denial of service device reboot by sending crafted packets to the control plane...

CVE-2016-6894

Arista EOS 4.15 before 4.15.8M, 4.16 before 4.16.7M, and 4.17 before 4.17.0F on DCS-7050 series devices allow remote attackers to cause a denial of service device reboot by sending crafted packets to the control plane...

CVE-2016-6894

Arista EOS DoS CVE-2016-6894 affects DCS-7050 series: versions 4.15 prior to 4.15.8M, 4.16 prior to 4.16.7M, and 4.17 prior to 4.17.0F allow a remote attacker to reboot the device by sending crafted packets to the control plane. The root cause is a vulnerability in how control plane packets are h...

CVE-2016-6894: Undefined Security Weakness

Arista EOS 4.15 before 4.15.8M, 4.16 before 4.16.7M, and 4.17 before 4.17.0F on DCS-7050 series devices allow remote attackers to cause a denial of service device reboot by sending crafted packets to the control plane...

PT-2016-7154

Name of the Vulnerable Software and Affected Versions Arista EOS versions 4.15 through 4.15.8M Arista EOS versions 4.16 through 4.16.7M Arista EOS versions 4.17 through 4.17.0F Description The issue allows remote attackers to cause a denial of service, resulting in a device reboot, by sending...

D-Link DCS-930L Camera Command Injection Vulnerability

The D-Link DCS-930L is a wireless surveillance camera from Terasic D-Link. A command injection vulnerability exists in the D-Link DCS-930L Camera. An attacker can exploit this vulnerability to execute arbitrary commands in the context of an affected device...

D-Link DCS-930L Authenticated Remote Command Execution

A command execution vulnerability exists in D-Link DCS-930L. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Debian Security Advisory DSA 3433-1 (samba - security update)

Several vulnerabilities have been discovered in Samba, a SMB/CIFS file, print, and login server for Unix. The Common Vulnerabilities and Exposures project identifies the following issues: CVE-2015-3223 Thilo Uttendorfer of Linux Information Systems AG discovered that a malicious request can cause...

SMB client connections for IPC traffic are not integrity protected

Description Samba has an option called "client signing", this is turned off by default for performance reasons on file transfers. This option is also used when using DCERPC with ncacnnp. In order to get integrity protection for ipc related communication by default the "client ipc signing" option ...

D-Link DCS-930L 远程代码执行漏洞

参考：https://www.exploit-db.com/exploits/39437/...

PT-2016-3444

Name of the Vulnerable Software and Affected Versions D-Link DCS-930L devices version 2.12 and earlier Description The issue allows a remote attacker to execute code via an OS command in the SystemCommand parameter. This is due to the lack of measures to neutralize special elements used in the OS...

D-Link DCS-930L Authenticated Remote Command Execution

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'D-Link DCS-930L Authenticated Remote Command Execution', 'Description' = %q The D-Link DCS-930L Network Video Camera is vulnerable t...