PT-2018-14306

Name of the Vulnerable Software and Affected Versions Samsung SCX-6545X version V2.00.03.01 Description The issue allows remote attackers to discover cleartext credentials via SNMP requests, specifically through the "iso.3.6.1.4.1.236.11.5.11.81.10.1.5.0" and "iso.3.6.1.4.1.236.11.5.11.81.10.1.6....

Security Bulletin: IBM Security Guardium is affected by a Using Components with Known Vulnerabilities vulnerabilities

Summary IBM Security Guardium has addressed the following vulnerabilities. Vulnerability Details CVEID: CVE-2015-8100 DESCRIPTION: OpenBSD could allow a local attacker to obtain sensitive information, caused by the use of 0644 permissions for snmpd.conf by the net-snmp package. By reading the fil...

CVE-2018-17555

The web component on ARRIS TG2492LG-NA 061213 devices allows remote attackers to obtain sensitive information via the /snmpGet oids parameter...

Information disclosure

The web component on ARRIS TG2492LG-NA 061213 devices allows remote attackers to obtain sensitive information via the /snmpGet oids parameter...

CVE-2018-17555

The web component on ARRIS TG2492LG-NA 061213 devices allows remote attackers to obtain sensitive information via the /snmpGet oids parameter...

Thousands of MikroTik Routers Hijacked for Eavesdropping

A full 7,500+ MikroTik routers are forwarding their owners’ traffic to eavesdropping cybercriminals – while 239,000 more have had their Socks4 proxy enabled, maliciously and surreptitiously. This means the bad actors can gain access to any of the files or data being passed by the router to and fr...

collectd: double free in csnmp_read_table function in snmp.c

A double-free vulnerability was found in the csnmpreadtable function in the SNMP plugin of collectd. A network-based attacker could exploit this by sending malformed data, causing collectd to crash or possibly other impact...

HPE OfficeConnect Switch Detection (SNMP)

SNMP based detection of HPE OfficeConnect switches. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

HP Jetdirect - Path Traversal Arbitrary Code Execution Exploit

Exploit for unix platform in category remote exploits This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require "rex/proto/pjl" class MetasploitModule 'HP Jetdirect Path Traversal Arbitrary Code Execution', 'Description...

HP Jetdirect Path Traversal Arbitrary Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require "rex/proto/pjl" class MetasploitModule 'HP Jetdirect Path Traversal Arbitrary Code Execution', 'Description' = %q The module exploits a path traversal via...

HP Jetdirect - Path Traversal Arbitrary Code Execution (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require "rex/proto/pjl" class MetasploitModule 'HP Jetdirect Path Traversal Arbitrary Code Execution', 'Description' = %q The module exploits a path traversal via...

SNMP SysName Parsing

Binary data 700342.prm...

Crestron AirMedia Presentation Gateway Detection (SNMP)

SNMP based detection of Crestron AirMedia Presentation Gateway devices. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Aruba / Silver Peak Appliance Detection (SNMP)

SNMP based detection of Aruba / Silver Peak appliances. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

iDRAC SNMP Agent Arbitrary Command Execution

The vulnerability of the SNMP Agent component in the microprogramming software for remote access controllers iDRAC7, iDRAC8, and iDRAC9 is related to the implementation or modification of certain arguments. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands...

Dell PowerScale OneFS SNMP Detection

Binary data isilononefssnmpdetect.nbin...

Switch Port Mapping Tool 2.81 - SNMP Community Name Denial of Service PoC Exploit

Exploit for windows platform in category dos / poc Exploit Title: Switch Port Mapping Tool 2.81 - 'SNMP Community Name' Denial of Service PoC Discovery by: Luis Martinez Vendor Homepage: https://switchportmapper.com/ Software Link : http://download.switchportmapper.com/spm281.zip Tested Version:...

Switch Port Mapping Tool 2.81 - SNMP Community Name Denial of Service (PoC)

Switch Port Mapping Tool 2.81 - SNMP Community Name Denial of Service PoC Exploit Title: Switch Port Mapping Tool 2.81 - 'SNMP Community Name' Denial of Service PoC Discovery by: Luis Martinez Discovery Date: 2018-07-27 Vendor Homepage: https://switchportmapper.com/ Software Link :...

PT-2018-3567

Name of the Vulnerable Software and Affected Versions: Moxa EDR-810 affected versions not specified Description: The issue is related to errors in handling signed types in the var interfacestatus function of the Moxa EDR-810 industrial router's firmware. It can be exploited by a remote attacker...

PT-2018-3566

Name of the Vulnerable Software and Affected Versions: Moxa EDR-810 affected versions not specified Description: The issue is related to errors in handling signed types in the var lldpLocalPortTbl function of the Moxa EDR-810 industrial router's firmware. It can be exploited by a remote attacker...