CVE-2016-7454

CVE-2016-7454 affects Technicolor/Comms Cisco DPC3941T gateways (firmware dpc3941-P20-18-v303r20421733-160413a-CMCST). The vulnerability is a Cross-Site Request Forgery (CSRF) in the device’s admin interfaces that enables an attacker to change the Wi‑Fi password, open the remote management interf...

Windows Remote Incident Response: CimSweep

Windows Remote Incident Response CimSweep is a suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across all versions of Windows. CimSweep may also be used to engage in offensive reconnaissance without the need to drop any payload to...

SIEMENS IP Camera CCMW1025 x. 2. 2. 1798-remote management of password change vulnerability

No description provided by source. !/bin/bash SIEMENS IP Camera CCMW1025 x.2.2.1798 remote change admin user/password Copyright 2016 c Todor Donev http://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Disclaimer: This or previous programs is for Educational purpose ONLY. Do not...

Netgear device web interface login password disclosure vulnerability

Netgear is a global leader in enterprise networking solutions and a champion of digital home networking applications. A web interface login password disclosure vulnerability exists in several Netgear devices. When password recovery is disabled, an attacker with access to the internal network or...

cisco wireless kit there is a serious vulnerability, so far no fix-bug warning-the black bar safety net

Cisco recently released a security Advisory to announce the three Cisco wireless packet is subjected to a severe bug effects,but there is still no solution available. SOHO equipment is mainly used in most of the goals between network components,and often in the wild, they often lack the protectiv...

Cisco Won't Patch Critical RV Wireless Router Vulnerability Until Q3

Cisco has alerted users of vulnerabilities in the web interface of its RV series of wireless VPN firewalls and routers that allow for remote code execution. The networking giant, however, isn’t planning on releasing firmware updates until the third quarter, Cisco said. Cisco says it is not aware ...

Docker exposure to 2 3 7 5 port, causing security vulnerabilities-vulnerability warning-the black bar safety net

Today there is a small partner found the docker exposed 2 3 7 5 port, causing a security vulnerability. I now introduce to you the whole thing the ins and outs, and tell little friends, and how to fix this vulnerability. In order to implement Cluster Management, Docker provides a remote managemen...

Vulnerability warning: Docker Swarm Manager remote management port access-vulnerability warning-the black bar safety net

! Docker is a domestic and international Cloud Platform common application the lightweight container, AWS, Baidu, etc. are used. Typically used for lightweight deployment of applications. In Docker Swarm of deployment documentation, since the default there is some insecurity in the sample...

Incident Response Suite: CimSweep

Incident Response Suite used to engage in offensive reconnaissance CimSweep is a suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across all versions of Windows. CimSweep may also be used to engage in offensive reconnaisance without...

RHEL 6 / 7 : ISC DHCP Concurrent TCP Sessions DoS

RedHat Enterprise Linux 6 / 7 is affected by a denial of service vulnerability in the bundled ISC DHCP server due to a failure to properly restrict the number of concurrent TCP sessions to the ports the server uses for inter-process communications and control. An unauthenticated, remote attacker...

Siemens SIMATIC WinCC Flexible Weakly Protected Credentials Vulnerability

OVERVIEW Siemens has identified a weakly protected credentials vulnerability in SIMATIC WinCC flexible. Gleb Gritsai and Roman Ilin from Positive Technologies reported this issue directly to Siemens. Siemens has produced an update to mitigate this vulnerability. This vulnerability could be...

The vulnerability of the remote monitoring and management system of Impero Education Pro allows a perpetrator to execute arbitrary commands.

The vulnerability of the remote monitoring and management system of Impero Education Pro is related to the authentication string -1|AUTHENTICATE\x02PASSWORD. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using encrypted commands...

The vulnerability of the OpenNMS remote monitoring and management system allows a intruder to gain access to the system.

The vulnerability of the OpenNMS remote monitoring and management system lies in the use of the default password “rtc” for the Rtc account. Exploiting this vulnerability could allow a malicious actor to gain access to the system by using privileged information...

D-Link DIR-615 'apply.cgi'绕过安全限制漏洞

No description provided by source. 构造url 访问路由器 http://192.168.0.1/apply.cgi?adminpassword=pwdpwd&adminpassword1=pwdpwd& admPass2=pwdpwd&remoteenable=1&remotehttpmanagementenable=1&remotehttp managementport=8080&remoteinboundfilter=AllowAll&remotehttpmanagement inboundfilter=AllowAll...

Juniper Networks（瞻博网络）远程管理访问后门

漏洞演示 使用后门帐号密码登录 使用 root 帐号,配合后门密码 %sun='%s' = %u ssh root@ip %sun='%s' = %u 得到 SSH Shell 影响范围 通过 ZoomEye 搜索:https://www.zoomeye.org/search?q=NetScreen+sshd 可以搜索到有 47831 个 NetScreen 防火墙设备。...

Embedded Devices Share, Reuse Private SSH Keys, HTTPs Certificates

Researchers have found that thousands of Internet gateways, routers, modems and other embedded devices share cryptographic keys and certificates, exposing millions of connections to man-in-the-middle attacks that open the door to more extensive intrusions that jeopardize encrypted data. This type...

b374k 3.2.3 2.8 CSRF / Command Injection Vulnerabilities

b374k web shell versions 2.8 and 3.2.3 suffer from a cross site request forgery vulnerability that allows for remote command injection. Vendor: ============================================ github.com/b374k/b374k code.google.com/p/b374k-shell/downloads/list code.google.com/archive/p/b374k-shell/...

Redis unauthorized access can lead to a Remote Access Server Permissions-bug warning-the black bar safety net

Recently, the Rubik's Cube security team monitoring for Redis unauthorized access of a new type of attack, under certain conditions, may be the remote cause the server to fall, the Rubik's Cube Safety team in a timely manner to the attacks carried out research and threat assessment, and by the cu...

Ubiquiti Networks Hardcoded Keys / Remote Management Vulnerabilities

Various Ubiquiti Networks products suffer from having hardcoded keys and also having remote management interfaces enabled that can be leveraged by these credentials. Ubiquiti Networks Hardcoded Keys / Remote Management ======================================================================= Vendor...

Ubiquiti Networks Hardcoded Keys / Remote Management

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Insecure default configuration product: various Ubiquiti Networks products vulnerable version: see Vulnerable / tested versions fixed version: none available impact: High...