161 matches found
ZTE ZXA10 C300M 资源管理错误漏洞
The ZTE ZXA10 C300M is an industrial control device from China's ZTE ZTE. A high-capacity hybrid fiber and copper platform that supports pure fiber, pure copper, and hybrid fiber and copper access. The ZXA10 C300M all versions up to V4.3P8 suffers from a resource management error vulnerability,...
CVE-2018-5390
A flaw named SegmentSmack was found in the way the Linux kernel handled specially crafted TCP packets. A remote attacker could use this flaw to trigger time and calculation expensive calls to tcpcollapseofoqueue and tcppruneofoqueue functions by sending specially modified packets within ongoing T...
Exploit for Server-Side Request Forgery in Microsoft
CVE-2021-26855 CVE-2021-26855, also known as Proxylogon, is a...
PT-2020-17857 · Cyberark +2 · Conjur Oss +3
Name of the Vulnerable Software and Affected Versions: Conjur OSS Helm Chart versions prior to 2.0.0 Description: A critical issue in the Conjur OSS Helm Chart results in the installation of the Conjur Postgres database with an open port, allowing an attacker to gain full read and write access to...
Design/Logic Flaw
An open port used for debugging in SWARCOs CPU LS4000 Series with versions starting with G4... grants root access to the device without access control via network. A malicious user could use this vulnerability to get access to the device and disturb operations with connected devices...
CVE-2020-12493
CVE-2020-12493 affects SWARCO CPU LS4000 Series (OS versions starting with G4). The vulnerability arises from an open debugging port that grants root access to the device over the network without access control. Impact is high: remote access could allow full control and disruption of operations o...
CVE-2020-12493 Critical Vulnerability in SWARCO CPU LS4000
An open port used for debugging in SWARCOs CPU LS4000 Series with versions starting with G4... grants root access to the device without access control via network. A malicious user could use this vulnerability to get access to the device and disturb operations with connected devices...
CVE-2020-7131
This document describes a security vulnerability in Blade Maintenance Entity, Integrated Maintenance Entity and Maintenance Entity products. All J/H-series NonStop systems have a security vulnerability associated with an open UDP port 17185 on the Maintenance LAN which could result in information...
CVE-2020-10569
SysAid On-Premise 20.1.11, by default, allows the AJP protocol port, which is vulnerable to a GhostCat attack. Additionally, it allows unauthenticated access to upload files, which can be used to execute commands on the system by chaining it with a GhostCat attack. NOTE: This may be a duplicate o...
Remote code execution
Jector Smart TV FM-K75 devices allow remote code execution because there is an adb open port with root permission...
CVE-2019-9871
Jector Smart TV FM-K75 devices allow remote code execution because there is an adb open port with root permission...
CVE-2019-9871
Jector Smart TV FM-K75 devices allow remote code execution because there is an adb open port with root permission...
CVE-2019-9871
CVE-2019-9871 affects Jector Smart TV FM-K75 devices, where an open ADB port with root permissions enables remote code execution. The vulnerability is documented across multiple sources (NVD, Red Hat, CVE listings) with high/critical impact (network, no privileges required) and a base score aroun...
Sn1per v7.0 - Automated Pentest Framework For Offensive Security Experts
Sn1per Community Edition is an automated scanner that can be used during a penetration test to enumerate and scan for vulnerabilities. Sn1per Professional is Xero Security's premium reporting addon for Professional Penetration Testers, Bug Bounty Researchers and Corporate Security teams to manage...
CenturyStar mo*** server in heap overflow vulnerability
Century Star Configuration Software is an obstruction software launched by Beijing Century Changqiu Technology Co., Ltd. It is a real-time human-machine interface utility program generator, which consists of CSMaker development system and CSViewer operation system. A heap overflow vulnerability...
Code injection
The ES File Explorer File Manager application through 4.1.9.7.4 for Android allows remote attackers to read arbitrary files or execute applications via TCP port 59777 requests on the local Wi-Fi network. This TCP port remains open after the ES application has been launched once, and responds to...
ES File Explorer Open Port
This module connects to ES File Explorer's HTTP server to run certain commands. The HTTP server is started on app launch, and is available as long as the app is open. Version 4.1.9.7.4 and below are reported vulnerable This module has been tested against 4.1.9.5.1. Module Options msf use...
Someone Hacked 50,000 Printers to Promote PewDiePie YouTube Channel
This may sound crazy, but it's true! The war for "most-subscribed Youtube channel" crown between T-Series and PewDiePie just took an interesting turn after a hacker yesterday hijacked more than 50,000 internet-connected printers worldwide to print out flyers asking everyone to subscribe to...