745 matches found
Directory traversal
/var/WEB-GUI/cgi-bin/downloadfile.cgi on FiberHome HG2201T 1.00.M5007JS201804 devices allows pre-authentication Directory Traversal for reading arbitrary files...
CVE-2019-17187
/var/WEB-GUI/cgi-bin/downloadfile.cgi on FiberHome HG2201T 1.00.M5007JS201804 devices allows pre-authentication Directory Traversal for reading arbitrary files...
CVE-2019-17187
CVE-2019-17187 affects FiberHome HG2201T devices (version 1.00.M5007_JS_201804) via pre-authentication Directory Traversal in /var/WEB-GUI/cgi-bin/downloadfile.cgi, enabling reading arbitrary files. The connected sources corroborate the path and device context but do not provide a public patch or...
CVE-2019-17187: Improper Limitation of a Pathname to a Restricted Directory
/var/WEB-GUI/cgi-bin/downloadfile.cgi on FiberHome HG2201T 1.00.M5007JS201804 devices allows pre-authentication Directory Traversal for reading arbitrary files...
PT-2019-14991
Name of the Vulnerable Software and Affected Versions FiberHome HG2201T version 1.00.M5007 JS 201804 Description The issue allows pre-authentication Directory Traversal for reading arbitrary files via the /var/WEB-GUI/cgi-bin/downloadfile.cgi API endpoint. Recommendations For FiberHome HG2201T...
PT-2019-14990
Name of the Vulnerable Software and Affected Versions FiberHome HG2201T version 1.00.M5007 JS 201804 Description The issue allows for pre-authentication remote code execution on the /var/WEB-GUI/cgi-bin/telnet.cgi endpoint. Recommendations For FiberHome HG2201T version 1.00.M5007 JS 201804, as a...
CVE-2019-17186: Missing Authentication for Critical Function
/var/WEB-GUI/cgi-bin/telnet.cgi on FiberHome HG2201T 1.00.M5007JS201804 devices allows pre-authentication remote code execution...
Puzzling Gwmndy Botnet Focuses on Low-Volume Proxy Connections
An odd botnet has been spotted targeting Fiberhome routers, in a quest to add 200 of them per day to its botnet web. That’s a low number in the world of botnets, according to 360 Netlab researchers, which observed a previously unknown malware strain called Gwmndy after the attackers’ domain name...
Security Bulletin: Vyatta 5600 vRouter Software Patches - Release 1801-za
Summary AT&T has released versions 1801-za for the Vyatta 5600. Details of these releases can be found at https://cloud.ibm.com/docs/infrastructure/virtual-router-appliance?topic=virtual-router-appliance-at-t-vyatta-5600-vrouter-software-patchesat-t-vyatta-5600-vrouter-software-patches...
SQL Injection Vulnerability in Fiberhome's Eyeshot Series of Network Video Surveillance Platforms
Eyeshot series network video surveillance platform is an integrated video surveillance management system developed by Fiberhome Zongzhi based on IP network technology as the core of large-scale image remote monitoring, transmission, storage and management. Fiberhome Eyeshot series network video...
FiberHome Fiberhome AN5506-04-F Cross-Site Scripting Vulnerability
FiberHome Fiberhome AN5506-04-F is a router from China FiberHome. A cross-site scripting vulnerability exists in the Fiberhome AN5506-04-F RP2669 version, which originates from the program failing to properly filter user input. A remote attacker could exploit this vulnerability to run malicious...
Fiberhome AN5506-04-F RP2669 Cross Site Scripting
Exploit Title: Fiberhome AN5506-04-F - Stored Cross Site Scripting Date: 04.03.2019 Exploit Author: Tauco Vendor Homepage: http://www.fiberhomegroup.com/en/ Version: RP2669 Tested on: Windows 10 CVE : CVE-2019-9556 Description:...
Fiberhome AN5506-04-F RP2669 - Persistent Cross-Site Scripting Vulnerability
Exploit for hardware platform in category web applications...
Fiberhome AN5506-04-F RP2669 - Persistent Cross-Site Scripting
Exploit Title: Fiberhome AN5506-04-F - Stored Cross Site Scripting Date: 04.03.2019 Exploit Author: Tauco Vendor Homepage: http://www.fiberhomegroup.com/en/ Version: RP2669 Tested on: Windows 10 CVE : CVE-2019-9556 Description:...
FiberHome User End Routers Bearing Access Authentication Bypass Vulnerability
FiberHome User End Routers Bearing AN1020-25 is a router from FiberHome, China. A security vulnerability exists in the FiberHome User End Routers Bearing AN1020-25, which is caused by a program that fails to properly perform authentication. An attacker could exploit the vulnerability to restore t...
FiberHome VDSL2 Modem HG 150-UB Security Bypass Vulnerability
FiberHome VDSL2 Modem HG 150-UB is a modem product from China FiberHome. A security vulnerability exists in the FiberHome VDSL2 Modem HG 150-UB. The vulnerability can be exploited to bypass authentication with the 'Cookie: Name=0admin' header...
FiberHome VDSL2 Modem HG 150-UB Security Bypass Vulnerability (CNVD-2018-08814)
FiberHome VDSL2 Modem HG 150-UB is a modem product from China FiberHome. A security vulnerability exists in the FiberHome VDSL2 Modem HG 150-UB. An attacker can exploit the vulnerability to bypass authentication...
FiberHome VDSL2 Modem HG 150-UB - Authentication Bypass
FiberHome VDSL2 Modem HG 150-UB - Authentication Bypass Exploit Title: FiberHome VDSL2 Modem HG 150-UB Authentication Bypass Date: 04/03/2018 Exploit Author: Noman Riffat Vendor Homepage: http://www.fiberhome.com/ CVE : CVE-2018-9248, CVE-2018-9248 The vulnerability exists in plain text & hard...
FiberHome VDSL2 Modem HG 150-UB - Authentication Bypass
Exploit Title: FiberHome VDSL2 Modem HG 150-UB Authentication Bypass Date: 04/03/2018 Exploit Author: Noman Riffat Vendor Homepage: http://www.fiberhome.com/ CVE : CVE-2018-9248, CVE-2018-9248 The vulnerability exists in plain text & hard coded cookie. Using any cookie manager extension, an...