CVE-2018-5708

An issue was discovered on D-Link DIR-601 B1 2.02NA devices. Being on the same local network as, but being unauthenticated to, the administrator's panel, a user can obtain the admin username and cleartext password in the response specifically, the configuration file restoredefault, which is...

PT-2018-17102

Name of the Vulnerable Software and Affected Versions: D-Link DIR-601 B1 version 2.02NA Description: An issue allows an unauthenticated user on the same local network to obtain the admin username and cleartext password from the administrator's panel. This is achieved through the configuration fil...

Ubiquiti Inc.: UniFi Video Server web interface Configuration Restore path traversal leading to local system compromise

In UniFi Video Controller 3.9.3 and prior, an user with administrator privileges can restore the configuration using a specially crafted zip file. Due to the lack of validation for path transversal, the user can upload arbitrary files to arbitrary locations...

Ubiquiti Inc.: UniFi Video Server web interface Configuration Restore CSRF leading to full application compromise

In UniFi Video 3.10.0, due to the lack of CSRF protection, it is possible to abuse the Web API to make changes on the server configuration without the user consent, requiring the attacker to lure an authenticated user to access on attacker controlled page...

Ubiquiti Inc.: UniFi Video web interface Configuration Restore user privilege escalation

Summary of the issue: Low privileged UniFi Video users can abuse the Configuration Restore functionality to modify any application configuration setting, including creating new administrative users. Details: The UniFi Video Server Windows web interface configuration restore functionality at the...

The vulnerability of the WebDMDebugServlet component of the HPE Intelligent Management Center PLAT software platform allows a perpetrator to execute arbitrary code.

The vulnerability of the WebDMDebugServlet component of the HPE Intelligent Management Center PLAT software lies in the ability to restore an unreliable data structure in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the SYSTEM context remotely...

Product update: Virtuozzo 7.0 Update 7 (7.0.7-423)

The Update 7 for Virtuozzo 7.0 provides new features as well as stability and usability bug fixes. Vulnerability id: PSBM-79872 Enabling nested virtualization for VM could fail due to a bug in libvirt. Vulnerability id: PSBM-81107 Setting IP address to a VM without guest tools returned error even...

dashboard.marketgid.com XSS vulnerability

Open Bug Bounty ID: OBB-564127 Description| Value ---|--- Affected Website:| dashboard.marketgid.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2015-9256: Exposure of Sensitive Information to an Unauthorized Actor

Datto ALTO and SIRIS devices allow remote attackers to obtain sensitive information via access to device/VM restore mount points, because they do not have ACLs by default...

PT-2018-4567

Name of the Vulnerable Software and Affected Versions Datto ALTO and SIRIS devices affected versions not specified Description The issue allows remote attackers to obtain sensitive information via access to device/VM restore mount points. This is because the devices do not have Access Control Lis...

CVE-2017-16945

The standardrestorer binary in Arq 5.10 and earlier for Mac allows local users to write to arbitrary files and consequently gain root privileges via a crafted restore path...

CVE-2017-16945

CVE-2017-16945 affects Arq for Mac (standardrestorer binary in Arq 5.10 and earlier). A local attacker can write to arbitrary files and obtain root privileges via a crafted restore path, as documented in connected sources. Public exploit details reference a local privilege escalation involving a ...

CVE-2017-16945

The standardrestorer binary in Arq 5.10 and earlier for Mac allows local users to write to arbitrary files and consequently gain root privileges via a crafted restore path...

CVE-2017-16591

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of NetGain Systems Enterprise Manager 7.2.699 build 1001. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific...

CVE-2017-16593

This vulnerability allows remote attackers to delete arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw...

CVE-2017-16591

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of NetGain Systems Enterprise Manager 7.2.699 build 1001. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific...

HP Connected Backup 8.6/8.8.6 - Local Privilege Escalation Exploit

Exploit for windows platform in category local exploits Tested on HP Connected Backup version 8.8.2.0 on Windows 7 x64 import os import sys import time import requests from bs4 import BeautifulSoup def sendrequestbody: url="http://localhost:16386/" headers = "Content-Type": "text/xml;...

HP Connected Backup 8.6/8.8.6 - Local Privilege Escalation

Tested on HP Connected Backup version 8.8.2.0 on Windows 7 x64 import os import sys import time import requests from bs4 import BeautifulSoup def sendrequestbody: url="http://localhost:16386/" headers = "Content-Type": "text/xml; charset=utf-8", 'SOAPAction': '""', "Set-Cookie":...

Unauthorized access vulnerability in Xiaomi Box

Xiaomi Box is a high-definition Internet TV box. Xiaomi Box suffers from an unauthorized access vulnerability, which is due to the failure of the Xiaomi Box server to verify authorization for service access. An attacker can use this vulnerability to install and uninstall applications, play...

PT-2018-4241

Name of the Vulnerable Software and Affected Versions kajam gem version 1.0.3.rc2 Description The issue allows local users to obtain sensitive information by listing the process, as the mysql user password is placed on the command line in the capture function and the mysql command line in the...