975 matches found
CVE-2017-11169
The connected sources confirm a privilege-escalation vulnerability in iBall iB-WRA300N3GT firmware version 1.1.1. An authenticated user can exploit the /form2userconfig.cgi endpoint by submitting a modified privilege parameter to gain root privileges. The issue is documented across multiple recor...
PT-2017-11792 · Iball · Iball Ib-Wra300N3Gt
Name of the Vulnerable Software and Affected Versions: iBall iB-WRA300N3GT version 1.1.1 Description: The issue allows remote authenticated users to obtain root privileges by leveraging a guest, user, or normal account. This is achieved by submitting a modified privilege parameter to the...
CVE-2017-11169: Undefined Security Weakness
Privilege Escalation on iBall iB-WRA300N3GT iB-WRA300N3GT1.1.1 devices allows remote authenticated users to obtain root privileges by leveraging a guest/user/normal account to submit a modified privilege parameter to /form2userconfig.cgi...
CVE-2017-11177
TRITON AP-EMAIL 8.2 before 8.2 IB does not properly restrict file access in an unspecified directory...
CVE-2017-11177
TRITON AP-EMAIL 8.2 before 8.2 IB does not properly restrict file access in an unspecified directory...
PT-2017-13320
Name of the Vulnerable Software and Affected Versions iBall Baton ADSL2+ Home Router version FW iB-LR7011A 1.0.2 Description The issue allows attackers to bypass authentication and access administrative router settings by crafting URLs with a .cgi extension, such as "/info.cgi" and "/password.cgi...
openSUSE Security Update : the Linux Kernel (openSUSE-2017-930)
The openSUSE Leap 42.3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : - CVE-2017-1000111: Fixed a race condition in net-packet code that could be exploited to cause out-of-bounds memory access bsc1052365. - CVE-2017-1000112: Fixed a race...
Security update for the Linux Kernel (important)
The openSUSE Leap 42.3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2017-1000111: Fixed a race condition in net-packet code that could be exploited to cause out-of-bounds memory access bsc1052365. - CVE-2017-1000112: Fixed a race...
Security update for the Linux Kernel (important)
The openSUSE Leap 42.2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2017-1000111: Fixed a race condition in net-packet code that could be exploited to cause out-of-bounds memory access bsc1052365. - CVE-2017-1000112: Fixed a race...
Unbreakable Enterprise kernel security update
2.6.39-400.297.5 - selinux: quiet the filesystem labeling behavior message Paul Moore Orabug: 25721485 - RDS/IB: active bonding port state fix for intfs added late Mukesh Kacker Orabug: 25875426 - HID: hid-cypress: validate length of report Greg Kroah-Hartman Orabug: 25891914 CVE-2017-7273 - udf:...
openSUSE Security Update : the Linux Kernel (openSUSE-2017-734) (Stack Clash)
The openSUSE Leap 42.2 kernel was updated to 4.4.73 to receive security and bugfixes. The following security bugs were fixed : - CVE-2017-1000364: An issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack guard page is not sufficiently large and can be 'jumped'...
openSUSE Security Update : the Linux Kernel (openSUSE-2017-716) (Stack Clash)
The openSUSE Leap 42.2 kernel was updated to 4.4.72 to receive various security and bugfixes. The following security bugs were fixed : - CVE-2017-1000364: An issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack guard page is not sufficiently large and can be...
ib-lenhardt.com XSS vulnerability
Vulnerable URL: https://www.ib-lenhardt.com/en/type-approval.php?continent=1"...
‘Petya’ Ransomware Outbreak Goes Global
A new strain of ransomware dubbed "Petya" is worming its way around the world with alarming speed. The malware is spreading using a vulnerability in Microsoft Windows that the software giant patched in March 2017 -- the same bug that was exploited by the recent and prolific WannaCry ransomware...
Security update for the Linux Kernel (important)
The openSUSE Leap 42.2 kernel was updated to 4.4.72 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2017-1000364: An issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack guard page is not sufficiently large and can be...
iBall Baton iB-WRA150N - Unauthenticated DNS Change Exploit
shell !/bin/bash iBall Baton iB-WRA150N Unauthenticated Remote DNS Change Exploit Copyright 2016 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Description: The vulnerability exist in the web interface, which is accessible without authentication. Once...
iBall Baton iB-WRA150N - Unauthenticated DNS Change Exploit
Exploit for hardware platform in category web applications !/bin/bash iBall Baton iB-WRA150N Unauthenticated Remote DNS Change Exploit Copyright 2016 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Description: The vulnerability exist in the web interface,...
iBall Baton iB-WRA150N - DNS Change
iBall Baton iB-WRA150N - DNS Change !/bin/bash iBall Baton iB-WRA150N Unauthenticated Remote DNS Change Exploit Copyright 2016 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Description: The vulnerability exist in the web interface, which is accessible...
iBall Baton iB-WRA150N Unauthenticated Remote DNS Change
!/bin/bash iBall Baton iB-WRA150N Unauthenticated Remote DNS Change Exploit Copyright 2016 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Description: The vulnerability exist in the web interface, which is accessible without authentication. Once modified,...
iBall Baton iB-WRA150N - DNS Change
!/bin/bash iBall Baton iB-WRA150N Unauthenticated Remote DNS Change Exploit Copyright 2016 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Description: The vulnerability exist in the web interface, which is accessible without authentication. Once modified,...