Design/Logic Flaw

Cobham Satcom Sailor 800 and 900 devices contained a vulnerability that allowed for arbitrary writing of content to the system's configuration file. This was exploitable via multiple attack vectors depending on the device's configuration. Further analysis also indicated this vulnerability could b...

Design/Logic Flaw

Cobham Satcom Sailor 250 and 500 devices before 1.25 contained an unauthenticated password reset vulnerability. This could allow modification of any user account's password including the default "admin" account, without prior knowledge of their password. All that is required is knowledge of the...

CVE-2018-19393

Cobham Satcom Sailor 800 and 900 devices contained a vulnerability that allowed for arbitrary writing of content to the system's configuration file. This was exploitable via multiple attack vectors depending on the device's configuration. Further analysis also indicated this vulnerability could b...

CVE-2018-19392

Cobham Satcom Sailor 250 and 500 devices before 1.25 contained an unauthenticated password reset vulnerability. This could allow modification of any user account's password including the default "admin" account, without prior knowledge of their password. All that is required is knowledge of the...

CVE-2018-19394

CVE-2018-19394 concerns Cobham Satcom Sailor 800 and Sailor 900 devices, where a persistent cross-site scripting (XSS) vulnerability exists. The affected component is the device web interface/configuration handling, with the root cause described as an XSS payload that can be introduced by modifyi...

CVE-2018-19391

The CVE-2018-19391 entry concerns Cobham Satcom Sailor 250 and Sailor 500 devices with persistent cross-site scripting (XSS) in firmware before 1.25. An unauthenticated attacker can exploit this via the /index.lua?pageID=Phone%20book name field to inject JavaScript. Connected CNVD/NVD records con...

CVE-2018-19393

Cobham Satcom Sailor 800 and 900 devices contained a vulnerability that allowed for arbitrary writing of content to the system's configuration file. This was exploitable via multiple attack vectors depending on the device's configuration. Further analysis also indicated this vulnerability could b...

CVE-2018-19391

Cobham Satcom Sailor 250 and 500 devices before 1.25 contained persistent XSS, which could be exploited by an unauthenticated threat actor via the /index.lua?pageID=Phone%20book name field...

CVE-2018-19392

Cobham Satcom Sailor 250/500 devices before firmware 1.25 have an unauthenticated password-reset vulnerability that lets a remote attacker change any user password (including admin) using the username and the attack vector /index.lua?pageID=Administration with fields usernameAdmChange, passwordAd...

CVE-2018-19392

Cobham Satcom Sailor 250 and 500 devices before 1.25 contained an unauthenticated password reset vulnerability. This could allow modification of any user account's password including the default "admin" account, without prior knowledge of their password. All that is required is knowledge of the...

CVE-2018-19393

The CVE-2018-19393 entry refers to Cobham Satcom Sailor 800 and 900 devices with an arbitrary write vulnerability in the system configuration file. The issue is exploitable via multiple attack vectors depending on device configuration and can lead to a Denial of Service requiring a factory reset ...

STIMS Buffer 1.1.20 - Buffer Overflow (PoC) (SEH Overwrite)

STIMS Buffer 1.1.20 - Buffer Overflow PoC SEH Overwrite Exploit Title: STIMS BUFFER OVERFLOW SEH OVERWRITE Date: 19 Feb 2016 Exploit Author: Ishita Sailor Vendor Homepage: http://www.stimslabs.com/ Software Link: http://www.stimslabs.com/en/buffer/STIMSBufferEnSetup.exe Version: 1.1.20 Tested on:...

Unspecified Remote Buffer Overflow Vulnerability in Cobham Sailor 900 VSAT

Cobham Sailor is a range of satellite terminals. An unspecified remote buffer overflow vulnerability exists in the Cobham Sailor 900 VSAT, which could be exploited by an attacker to execute arbitrary code in the context of an affected program or launch a denial-of-service attack...

VSAT Sailor 900 - Remote Authentication Bypass Exploit

Exploit for hardware platform in category remote exploits / File : satcompwn.c - VSAT SAILOR SAT COM 900 Remote 0day Author : Nicholas Lemonias This is proprietary source code material of Advanced Information Security Corporation. Usage, distribution and modifications are pursuant to our terms of...

VSAT Sailor 900 - Remote Overflow

VSAT Sailor 900 - Remote Overflow / File : satcompwn.c - VSAT SAILOR SAT COM 900 Remote 0day Author : Nicholas Lemonias This is proprietary source code material of Advanced Information Security Corporation. Usage, distribution and modifications are pursuant to our terms of agreement. Copyright c...

VSAT Sailor 900 - Remote Exploit

VSAT Sailor 900 - Remote Exploit. Remote exploit for hardware platform / File : satcompwn.c - VSAT SAILOR SAT COM 900 Remote 0day Author : Nicholas Lemonias This is proprietary source code material of Advanced Information Security Corporation. Usage, distribution and modifications are pursuant to...

CVE-2014-2940

Cobham Sailor 900 and 6000 satellite terminals with firmware 1.08 MFHF and 2.11 VHF have hardcoded credentials for the administrator account, which allows attackers to obtain administrative control by leveraging physical access or terminal access...

CVE-2013-7180

Cobham SAILOR 900 VSAT; SAILOR FleetBroadBand 150, 250, and 500; EXPLORER BGAN; and AVIATOR 200, 300, 350, and 700D devices do not properly restrict password recovery, which allows attackers to obtain administrative privileges by leveraging physical access or terminal access to spoof a reset code...

CVE-2014-2941

Cobham Sailor 6000 satellite terminals have hardcoded Tbus 2 credentials, which allows remote attackers to obtain access via a TBUS2 command. NOTE: the vendor reportedly states "there is no possibility to exploit another user's credentials...

Code injection

Cobham SAILOR 900 VSAT; SAILOR FleetBroadBand 150, 250, and 500; EXPLORER BGAN; and AVIATOR 200, 300, 350, and 700D devices do not properly restrict password recovery, which allows attackers to obtain administrative privileges by leveraging physical access or terminal access to spoof a reset code...