Visual Tools DVR VX16 4.2.28.0 - OS Command Injection (Unauthenticated)

Exploit Title: Visual Tools DVR VX16 4.2.28.0 - OS Command Injection Unauthenticated Date: 2021-07-05 Exploit Author: Andrea D'Ubaldo Vendor Homepage: https://visual-tools.com/ Version: Visual Tools VX16 v4.2.28.0 Tested on: VX16 Embedded Linux 2.6.35.4. CVE: CVE-2021-42071 Reference:...

Visual Tools DVR VX16 4.2.28.0 - OS Command Injection (Unauthenticated) Vulnerability

Exploit Title: Visual Tools DVR VX16 4.2.28.0 - OS Command Injection Unauthenticated Exploit Author: Andrea D'Ubaldo Vendor Homepage: https://visual-tools.com/ Version: Visual Tools VX16 v4.2.28.0 Tested on: VX16 Embedded Linux 2.6.35.4. An unauthenticated remote attacker can inject arbitrary...

Visual Tools DVR VX16 4.2.28.0 Command Injection

Exploit Title: Visual Tools DVR VX16 4.2.28.0 - OS Command Injection Unauthenticated Date: 2021-07-05 Exploit Author: Andrea D'Ubaldo Vendor Homepage: https://visual-tools.com/ Version: Visual Tools VX16 v4.2.28.0 Tested on: VX16 Embedded Linux 2.6.35.4. An unauthenticated remote attacker can...

OpenJDK 7 <= 7u261 / 8 <= 8u252 / 11.0.0 <= 11.0.7 / 13.0.0 <= 13.0.3 / 14.0.0 <= 14.0.1 Multiple Vulnerabilities (2020-07-14)

The version of OpenJDK installed on the remote host is 7 prior to 7u261 / 8 prior to 8u252 / 11.0.0 prior to 11.0.7 / 13.0.0 prior to 13.0.3 / 14.0.0 prior to 14.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the 2020-07-14 advisory. Please Note: Java CVEs do not...

ACRN Null Pointer Dereference Vulnerability

ACRN is an open source project released by the Linux Foundation, a hypervisor designed for IoT and embedded devices. A null pointer dereference vulnerability exists in virtionetpingrxq in devicemodel/hw/pci/virtio/virtionet.c in versions prior to ACRN 2.5. No details of the vulnerability are...

ACRN post-release reuse vulnerability (CNVD-2021-49149)

ACRN is an open source project released by the Linux Foundation, which is a hypervisor designed for IoT and embedded devices. A post-release reuse vulnerability exists in the polling timer handler in ACRN related to devicemodel/hw/pci/virtio/.c. The vulnerability is not known. No detailed...

PT-2021-7802

Name of the Vulnerable Software and Affected Versions ARIS controller software affected versions not specified Description The issue is related to the disclosure of confidential information in the ARIS controller's embedded software. It allows a remote attacker to gain access to critical...

PT-2021-7792

Name of the Vulnerable Software and Affected Versions ARIS controller embedded software affected versions not specified Description The issue is related to an unlimited upload of dangerous file types in the ARIS controller embedded software. Exploitation of this issue could allow a remote attacke...

PT-2021-7798

Name of the Vulnerable Software and Affected Versions ARIS controller embedded software affected versions not specified Description The issue is related to insufficient protection of authentication data in the ARIS controller's embedded software. This could allow a remote attacker to obtain user...

PT-2021-7800

Name of the Vulnerable Software and Affected Versions ARIS controller embedded software affected versions not specified Description The issue is related to the lack of protection for the web page structure, allowing a remote attacker to exploit it and potentially conduct a cross-site scripting XS...

PT-2021-7801

Name of the Vulnerable Software and Affected Versions ARIS controller embedded software affected versions not specified Description The issue is related to the lack of protection for the web page structure, allowing a remote attacker to exploit it and potentially conduct a cross-site scripting XS...

PT-2021-7799

Name of the Vulnerable Software and Affected Versions ARIS controller software affected versions not specified Description The issue is related to errors in access control within the ARIS controller's embedded software. Exploitation of this issue could allow a remote attacker to elevate their...

PT-2021-7797

Name of the Vulnerable Software and Affected Versions ARIS controller embedded software affected versions not specified Description The issue is related to the use of defective and risky cryptographic algorithms in the ARIS controller's embedded software. Exploitation of this issue could allow a...

PT-2021-7403 · Qualcomm · Qualcomm Embedded Platform

Name of the Vulnerable Software and Affected Versions: Qualcomm embedded platform software affected versions not specified Description: The issue is related to an integer overflow in the Qualcomm embedded platform software, which can lead to memory corruption. This can be exploited to cause a...

PT-2021-7793

Name of the Vulnerable Software and Affected Versions ARIS controller embedded software affected versions not specified Description The issue is related to an uncontrolled resource consumption vulnerability in the ARIS controller's embedded software. Exploitation of this issue could allow a remot...

PT-2021-7795

Name of the Vulnerable Software and Affected Versions ARIS controller embedded software affected versions not specified Description The issue is related to weaknesses in the authorization procedure of the ARIS controller's embedded software, allowing an attacker to execute arbitrary code using a...

PT-2021-7790

Name of the Vulnerable Software and Affected Versions ARIS controller embedded software affected versions not specified Description The issue is related to a buffer overflow in memory due to reading data beyond buffer boundaries. It can be exploited by a remote attacker using a specially crafted...

PT-2021-7796

Name of the Vulnerable Software and Affected Versions ARIS controller embedded software affected versions not specified Description The issue is related to an unlimited file upload vulnerability in the ARIS controller's embedded software, allowing a remote attacker to execute arbitrary code using...

ACRN Resource Management Error Vulnerability

ACRN is an open source project released by the Linux Foundation, which is a hypervisor designed for IoT and embedded devices. Device Model in ACRN suffers from a devicemodel/core/mem.c post-release reuse vulnerability. No details of the vulnerability are available at this time...

ACRN Resource Management Error Vulnerability

ACRN is an open source project released by the Linux Foundation, which is a hypervisor designed for IoT and embedded devices. A post-release reuse vulnerability exists in the polling timer handler in ACRN related to devicemodel/hw/pci/virtio/.c. The vulnerability is not known. No detailed...