1045 matches found
PT-2018-14269
Name of the Vulnerable Software and Affected Versions Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server affected versions not specified Description The issue allows an attacker to enumerate potential Cloud IDs using MAC addresses. With this ID, the attacker can discover and connect to...
XMeye P2P Cloud Remote Code Execution / Integrity Issues Vulnerabilities
XMeye P2P Cloud used with Xiongmai IP Cameras, NVRs and DVRs suffer from predictable Cloud IDs, default admin password, and various other issues that can result in remote code execution. ======================================================================= title: Remote Code Execution via XMeye...
CVE-2018-17917: Predictable from Observable State
All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server may allow an attacker to use MAC addresses to enumerate potential Cloud IDs. Using this ID, the attacker can discover and connect to valid devices using one of the supported apps...
PT-2018-14366
Name of the Vulnerable Software and Affected Versions Bytom versions prior to 1.0.6 Description The issue arises from improper validation of arguments in a query, which can lead to an out-of-bounds panic. This can be exploited as a vector for denial of service attacks, especially when processing...
XMeye P2P Cloud Remote Code Execution / Integrity Issues
SEC Consult also published a blog post regarding the identified security issues with further background information: Blog: https://r.sec-consult.com/xmeye SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Remote Code...
PT-2018-14271
Name of the Vulnerable Software and Affected Versions Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server affected versions not specified Description The issue allows an attacker to use an undocumented user account default with its default password to login to XMeye and access or view...
CVE-2018-17915: Missing Encryption of Sensitive Data
All versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server do not encrypt all device communication. This includes the XMeye service and firmware update communication. This could allow an attacker to eavesdrop on video feeds, steal XMeye login credentials, or impersonate the upda...
Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server
1. EXECUTIVE SUMMARY CVSS v3 8.1 ATTENTION: Exploitable remotely/low skill level to exploit/information related to these vulnerabilities is publicly available Vendor: Hangzhou Xiongmai Technology Co., Ltd Equipment: XMeye P2P Cloud Server Vulnerabilities: Predictable From Observable State, Hidden...
p2p.ie XSS vulnerability
Open Bug Bounty ID: OBB-682944 Description| Value ---|--- Affected Website:| p2p.ie Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2018-17780
Telegram Desktop aka tdesktop 1.3.14, and Telegram 3.3.0.0 WP8.1 on Windows, leaks end-user public and private IP addresses during a call because of an unsafe default behavior in which P2P connections are accepted from clients outside of the My Contacts list...
Design/Logic Flaw
Telegram Desktop aka tdesktop 1.3.14, and Telegram 3.3.0.0 WP8.1 on Windows, leaks end-user public and private IP addresses during a call because of an unsafe default behavior in which P2P connections are accepted from clients outside of the My Contacts list...
CVE-2018-17780
Telegram Desktop aka tdesktop 1.3.14, and Telegram 3.3.0.0 WP8.1 on Windows, leaks end-user public and private IP addresses during a call because of an unsafe default behavior in which P2P connections are accepted from clients outside of the My Contacts list...
CVE-2018-17780
Telegram Desktop aka tdesktop 1.3.14, and Telegram 3.3.0.0 WP8.1 on Windows, leaks end-user public and private IP addresses during a call because of an unsafe default behavior in which P2P connections are accepted from clients outside of the My Contacts list...
CVE-2018-17780
Telegram Desktop aka tdesktop 1.3.14, and Telegram 3.3.0.0 WP8.1 on Windows, leaks end-user public and private IP addresses during a call because of an unsafe default behavior in which P2P connections are accepted from clients outside of the My Contacts list...
CVE-2018-17780: Exposure of Sensitive Information to an Unauthorized Actor
Telegram Desktop aka tdesktop 1.3.14, and Telegram 3.3.0.0 WP8.1 on Windows, leaks end-user public and private IP addresses during a call because of an unsafe default behavior in which P2P connections are accepted from clients outside of the My Contacts list...
Epee Levin Packet Deserialization Code Execution Vulnerability
Summary An exploitable code execution vulnerability exists in the Levin deserialization functionality of the epee library. A specially crafted network packet can cause a logic flaw, resulting in code execution. An attacker can send a packet to trigger this vulnerability. Tested Versions Monero...
TRON Cryptocurrency Founder Buys BitTorrent, µTorrent for $140 Million
BitTorrent, the company which owns the popular file-sharing client uTorrent, has quietly been sold for $140 million in cash to Justin Sun, the founder of blockchain-focused startup TRON. TRON is a decentralized entertainment and content-sharing platform that uses blockchain and distributed storag...
CVE-2018-11548
An issue was discovered in EOS.IO DAWN 4.2. plugins/netplugin/netplugin.cpp does not limit the number of P2P connections from the same source IP address...