CVE-2018-8934

CVE-2018-8934 covers a backdoor in the firmware of the Promontory chipset used in AMD Ryzen/Ryzen Pro platforms (aka CHIMERA-FW). The issue stems from a firmware backdoor in Promontory, with documented risk perceptions in multiple sources, and a CVSS3 score indicating CRITICAL impact across confi...

CVE-2017-8840

Debug information disclosure exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2380hw6580hw2710hw31350hw22500-7.0.1-build2093. A direct request to cgi-bin/HASync/hasync.cgi?debug=1 shows Master LAN Address, Serial Number, HA Group ID, Virtual IP, a...

CVE-2017-7398

CVE-2017-7398 affects D-Link DIR-615 HW: T1 with FW:20.09. The issue is a CSRF vulnerability that allows an attacker to perform actions on a router when the admin is authenticated, e.g., changing the Security option, hiddenSSID/SSID, or a security-password. Impact is limited to unauthorized confi...

Acoem 01dB CUBE/DUO Smart Noise Monitor - Password Change

!/bin/sh Acoem 01dB CUBE Smart Noise Monitoring Terminal Remote Password Change HW version: LIS001A Application FW: 2.34 Metrology FW: 2.10 Modem FW: 12.00.005 / 08.01.108 Copyright 2016 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Disclaimer: This or...

Acoem 01dB CUBE Smart Noise Monitoring Terminal Remote Password Change

!/bin/sh Acoem 01dB CUBE Smart Noise Monitoring Terminal Remote Password Change HW version: LIS001A Application FW: 2.34 Metrology FW: 2.10 Modem FW: 12.00.005 Copyright 2016 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Disclaimer: This or previous...

InfraPower PPS-02-S Q213V1 Unauthenticated Remote Root Command Execution

InfraPower PPS-02-S Q213V1 Unauthenticated Remote Root Command Execution Vendor: Austin Hughes Electronics Ltd. Product web page: http://www.austin-hughes.com Affected version: Q213V1 Firmware: V2395S Fixed version: Q216V3 Firmware: IPD-02-FW-v03 Summary: InfraPower Manager PPS-02-S is a FREE...

InfraPower PPS-02-S Q213V1 - Authentication Bypass

InfraPower PPS-02-S Q213V1 - Authentication Bypass InfraPower PPS-02-S Q213V1 Authentication Bypass Vulnerability Vendor: Austin Hughes Electronics Ltd. Product web page: http://www.austin-hughes.com Affected version: Q213V1 Firmware: V2395S Fixed version: Q216V3 Firmware: IPD-02-FW-v03 Summary:...

InfraPower PPS-02-S Q213V1 - Insecure Direct Object Reference

InfraPower PPS-02-S Q213V1 Insecure Direct Object Reference Authorization Bypass Vendor: Austin Hughes Electronics Ltd. Product web page: http://www.austin-hughes.com Affected version: Q213V1 Firmware: V2395S Fixed version: Q216V3 Firmware: IPD-02-FW-v03 Summary: InfraPower Manager PPS-02-S is a...

Helmholz Systeme NETLink PRO HW 1-1a-1 and FW 1. 54 and higher 弱口令

No description provided by source...

TP-Link TL-WR740N v4 Router (FW-Ver. 3.16.6 Build 130529 Rel.47286n) - Command Execution

No description provided by source...

Fw-BofF (oolime-resurrection) 1.5.3beta Multiple Remote Include Vulnerability

No description provided by source. ============================================================================= Fw-BofF oolime-resurrection 1.5.3beta Multiple Remote Include Vulnerability ============================================================================= + Fw-BofF oolime-resurrection...

Check Point FW-1 Syslog Daemon Unfiltered Escape Sequence Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7161/info An issue has been discovered in Check Point FW-1 syslog daemon when attempting to process a malicious, remotely supplied, syslog message. Specifically, some messages containing escape sequences are not properly...

WANGKONGBAO CNS-1000 UTM IPS-FW Directory Traversal

No description provided by source. Exploit Title: WANGKONGBAO CNS-1000 and 1100 Network Security Platform UTM Directory Traversal Date: 7/2/2012 Exploit Author: Dillon Beresford Vendor Homepage: http://www.wangkongbao.com/products.html Version: CNS-1000 and 1100 The issue is in the...

Threat Outbreak Alert: Fake Portuguese Personal Picture Notification Email Messages on October 5, 2013

Medium Alert ID: 31128 First Published: 2013 October 7 14:08 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain personal images for the recipient. The text in the email message attempts to convince the...

Seowonintech Routers fw: 2.3.9 - File Disclosure

!/usr/bin/perl + Seowonintech routers ; $bug = $host."/cgi-bin/systemconfig.cgi?filename=".$file."&btntype=load&action=APPLY"; if$file eq "" print "Enter full path to file!\n"; $data=get$bug || die "$!, try another exploit\n"; $data = s/Null/File not found!/gs; if defined $data = mrows="30".?sx...

FW/Proxy detection

Binary data 6509.prm...

WANGKONGBAO CNS-1000 UTM IPS-FW - Directory Traversal (Metasploit)

WANGKONGBAO CNS-1000 UTM IPS-FW - Directory Traversal Metasploit Exploit Title: WANGKONGBAO CNS-1000 and 1100 Network Security Platform UTM Directory Traversal Date: 7/2/2012 Exploit Author: Dillon Beresford Vendor Homepage: http://www.wangkongbao.com/products.html Version: CNS-1000 and 1100 The...

Fw-BofF (oolime-resurrection) 1.5.3beta Multiple Remote Include Vulnerability

============================================================================= Fw-BofF oolime-resurrection 1.5.3beta Multiple Remote Include Vulnerability ============================================================================= + Fw-BofF oolime-resurrection 1.5.3beta Multiple Remote Include...

Fw-BofF (oolime-resurrection) 1.5.3beta Multiple Remote Include Vuln

Exploit for unknown platform in category web applications ============================================================================= Fw-BofF oolime-resurrection 1.5.3beta Multiple Remote Include Vulnerability ============================================================================= + Fw-Bo...

Fw-BofF 1.5.3beta Remote File Inclusion

============================================================================= Fw-BofF oolime-resurrection 1.5.3beta Multiple Remote Include Vulnerability ============================================================================= + Fw-BofF oolime-resurrection 1.5.3beta Multiple Remote Include...