Google Android Security Bypass Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A security vulnerability exists in the Device Administrator code in versions prior to Android 4.4.1r1, which stems from the program's failure to update the mAdminMap data structur...

KYOCERA Net Admin 3.4 Cross Site Request Forgery

KYOCERA Net Admin 3.4 CSRF Add Admin Exploit input type="hidden" name="addUserForm:lo...

KYOCERA Net Admin 3.4 Cross Site Scripting

KYOCERA Net Admin 3.4 Multiple XSS Vulnerabilities Vendor: KYOCERA Corporation Product https://global.kyocera.com Affected version: 3.4.0906 Summary: KYOCERA Net Admin is Kyocera's unified device management software that uses a web-based platform to give network administrators easy and...

KYOCERA Net Admin 3.4 - Cross-Site Request Forgery (Add Admin)

Vendor: KYOCERA Corporation Product https://global.kyocera.com Affected version: 3.4.0906 Summary: KYOCERA Net Admin is Kyocera's unified device management software that uses a web-based platform to give network administrators easy and uncomplicated control to handle a fleet for up to 10,000...

Error: "500 Internal Server" when Clicking on 'Edit' for a Device on XenMobile

When selecting a device under Manage r Devices and clicking on Edit. Customer is receiving the Error: 500 Server Internal Error exid:16C0...

Schneider Electric SoMove software and DTM software DLL Hijacking Vulnerability

SoMove software is a useful setup and FM software for Schneider Inverter users.Altivar Dtm Library is a free library that provides support for a wide range of DTM devices. A DLL hijacking vulnerability exists in Schneider Electric SoMove software and DTM software, which can be exploited by an...

Cambium ePMP1000 2.5 ping Shell via Command Injection Exploit

This Metasploit module exploits an OS Command Injection vulnerability in Cambium ePMP1000 device management portal. It requires any one of the following login credentials - admin/admin, installer/installer, home/home - to set up a reverse netcat shell. This module requires Metasploit:...

BYOD, why don’t you?

Bring Your Own Device BYOD is a policy that allows employees to bring their own devices to the workplace and use them there. At one time, this was the latest bonus to attract and keep employees happy—plus save a few bucks. Nowadays the question is more like: Is there anyone who doesn't bring his...

Cb Defense October 2017 Release Speeds Up Your Response

During a response scenario, every minute counts. The faster you can complete your investigation, the faster you can start taking corrective action. That’s why this week we’re happy to announce the October 2017 update of Cb Defense, which improves search functionality within the Cb Defense console...

CVE-2017-14616

An FBX-5312 issue was discovered in WatchGuard Fireware before 12.0. If a login attempt is made in the XML-RPC interface with an XML message containing an empty member element, the wgagent crashes, logging out any user with a session opened in the UI. By continuously executing the failed login...

IBM MaaS360 DTM Information Disclosure Vulnerability

IBM MaaS360 DTM is a suite of enterprise mobile device management solutions from IBM USA. The solution provides end-to-end security and management of mobile devices, documents, applications and email. An information disclosure vulnerability exists in versions of IBM MaaS360 DTM prior to 3.81, whi...

Kick Devices Off Your Network: KickThemOut

A tool to kick devices out of your network and enjoy all the bandwidth for yourself. It allows you to select specific or all devices and ARP spoofs them off your local area network. KickThemOut ARP Spoofs devices in your Local Area Network killing their internet connectivity and therefore allowin...

August 8, 2017—KB4034660 (OS Build 10586.1045)

None None...

August 8, 2017—KB4034674 (OS Build 15063.540)

None None...

Dasan Networks GPON ONT WiFi Router H64X Series Authentication Bypass

Dasan Networks GPON ONT WiFi Router H64X Series Authentication Bypass Vendor: Dasan Networks Product web page: http://www.dasannetworks.com | http://www.dasannetworks.eu Affected version: Model: H640GR-02 H640GV-03 H640GW-02 H640RW-02 H645G Firmware: 2.76-9999 2.76-1101 2.67-1070 2.45-1045 Summar...

Foscam camera SetDNS buffer overflow vulnerability

Foscam camera is a webcam that pushes messages to your phone and also enables video Baidu cloud storage directly through WIFI. A buffer overflow vulnerability exists in Foscam camera ONVIF SetDNS. An unauthenticated attacker can trigger a stack buffer overflow via the 'devicemgmt' 'SetDNS' method...

Foscam camera ONVIF reboot vulnerability

FOSCAM Group is a national high-tech enterprise specializing in the design, research and development, manufacturing and sales of network cameras, network video recorders and other products. Foscam camera ONVIF has a reboot vulnerability that allows an unauthenticated attacker to reboot the device...

Hitachi Device Manager Open Redirection Vulnerability

Hitachi Device Manager is a suite of mobile device management software from Hitachi, Japan. The software manages multiple Hitachi storage systems from a single console and provides logical view capabilities to harmonize storage assets with business applications. An open redirection vulnerability...

The vulnerability of the Cisco Firepower Extensible Operating System and the Cisco Unified Computing System Central device management system allows a perpetrator to execute arbitrary commands.

The vulnerability of the debugging functionality of the Cisco Firepower Extensible Operating System and the Cisco Unified Computing System Central device management system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating locally,...

The vulnerability of the Cisco Firepower Extensible Operating System and the Cisco Unified Computing System Central device management system allows a intruder to inject arbitrary commands.

The vulnerability of the Cisco Firepower Extensible Operating System’s local management component and the Cisco Unified Computing System Central’s centralized device management system exists due to the lack of measures taken to neutralize special elements used in operating system commands...