CVE-2017-8179

The camera driver of MTK platform in Huawei smart phones with software of versions earlier than Nice-AL00C00B155 has a buffer overflow vulnerability.Due to the insufficient input verification, an attacker tricks a user into installing a malicious application which has special privilege and sends ...

Multiple Huawei products cross-border read vulnerability (CNVD-2017-34418)

Huawei RP200 and TE series are Huawei's all-in-one desktop and high-definition videoconferencing products for high-end customers. The out-of-bounds read vulnerability exists in several Huawei products, as the devices fail to adequately verify user input. A remote attacker could exploit this...

The vulnerability of the PROFINET Discovery and Configuration Protocol (PN-DCP) implementation in the Cisco IOS operating system allows a hacker to trigger a service failure.

The vulnerability of the PROFINET Discovery and Configuration Protocol PN-DCP implementation in the Cisco IOS operating system exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to trigger a device restart and a Denial-of-Service attac...

The vulnerability of the embedded microprogramming software of the D-Link DIR-615L router allows a hacker to cause a service failure and reboot the device.

The vulnerability of the embedded microprogramming software of the D-Link DIR-615L router exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to trigger service failure and reboot the device by using an unauthorized GET request...

Security Advisory - Multiple Vulnerabilities in MTK Platform

There are two buffer overflow vulnerabilities and one arbitrary memory write vulnerability in the camera driver of MTK platform in some Huawei smart phones. Due to the insufficient input verification, an attacker tricks a user into installing a malicious application which has special privilege an...

Some Huawei apps suffer from denial of service vulnerability

Huawei Game Center is the official Android game download platform for Huawei terminal users. Skytone Skytone in English is an APP that provides Huawei flagship users with exclusive overseas Internet access services. A denial of service vulnerability exists in some of Huawei's APPs. The attacker...

The vulnerability of the NTP network time protocol’s speed-limiting service allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Network Time Protocol’s rate-limiting service exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause partial breaches of the confidentiality, integrity, and accessibility of the...

The vulnerability of the Microsoft OneNote note-taking software allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft OneNote note-taking software exists due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code using a specially crafted document...

Security Advisory - Multiple Vulnerabilities in MTK Platform

There are multiple vulnerabilities in the graphics driver of MTK platform in Huawei smart phones. The graphics driver has two buffer overflow vulnerabilities due to the insufficient input verification. An attacker tricks a user into installing a malicious application which has the system privileg...

BanManager WebUI 1.5.8 - PHP Code Injection Vulnerability

Exploit for php platform in category web applications BanManager WebUI 1.5.8 - PHP Code Injection & Stored XSS Exploit Title: BanManager WebUI - PHP Code Injection & Stored XSS Date: 2017-05-10 Exploit Author: HaHwul Exploit Author Blog: www.hahwul.com Vendor Homepage:...

The vulnerability of Huawei AR3200 router’s micro-programming software allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of Huawei AR3200 router’s micro-programming software exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code using a specially crafted network packet...

CVE-2017-5164

An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. Input sent from a malicious client is not properly verified by the server. An attacker can execute arbitrary script code in another user's browser session CROSS-SITE SCRIPTING...

Cisco Hosted Collaboration Mediation Fulfillment Authenticated Directory Traversal Vulnerability

A vulnerability in the web interface of Cisco Hosted Collaboration Mediation Fulfillment could allow an authenticated, remote attacker to access arbitrary files on the system. This vulnerability allows the attacker to perform directory traversal. The vulnerability is due to a lack of proper input...

Cisco RV180 VPN and RV180W Wireless-N Multifunction VPN Routers Unauthorized Access Vulnerability

A vulnerability in the web interface of the Cisco RV180 VPN Router and Cisco RV180W Wireless-N Multifunction VPN Router could allow an unauthenticated, remote attacker to access arbitrary files on the system. This vulnerability allows the attacker to perform directory traversal. The vulnerability...

The vulnerability of the microprogramming software of the Cisco TelePresence Video Communication Server allows a perpetrator to bypass the authentication process.

The vulnerability of the Mobile and Remote Access MRA component of the Cisco TelePresence Video Communication Server software exists due to insufficient verification of input data. Exploiting this vulnerability could allow a malicious actor to bypass authentication procedures using a trusted...

The vulnerability of the ScreenOS operating system, which allows a hacker to trigger a service failure

The vulnerability of the ScreenOS operating system’s administrative web service interface exists due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor, operating remotely, to cause service failures by using specially crafted SSL packets...

The vulnerability of the microprogramming software of Schneider Electric’s Modicon M340 programmable logic controller allows a remote intruder to execute any desired code.

The vulnerability of the microprogrammed software of Schneider Electric’s Modicon M340 programmable logic controller is due to insufficient verification of input data. Exploiting this vulnerability could allow a malicious actor to inject JavaScript code into the device remotely...

The vulnerability of the NX-OS network operating system allows a hacker to induce a maintenance failure.

The vulnerability of the NX-OS network operating system exists due to insufficient verification of input data. Exploiting this vulnerability can allow attackers to cause service failures by sending specially crafted LLDP packets over the local network...

Security Advisory - Insufficient Input Verification Vulnerability in the FusionAccess

FusionAccess is a kind of virtual desktop applications based on Huawei cloud platform. Through the deployment of Huawei desktop cloud software on the cloud platform, customers can access the cloud desktop by the thin client device or other devices. There is an insufficient input verification...

Apache Struts Multiple Persistent Cross-Site Scripting Vulnerabilities

No description provided by source. Title : Apache Struts Multiple Persistent Cross-Site Scripting Vulnerabilities Author : Antu Sanadi SecPod Technologies www.secpod.com Vendor : http://struts.apache.org/ Advisory : http://secpod.org/blog/?p=450...