TP-Link TL-WA850RE - Remote Command Execution

!/usr/bin/env python Exploit Title: TP-Link Technologies TL-WA850RE Wi-Fi Range Extender - Command Execution Date: 19/06/2018 Exploit Author: yoresongo - Advisability S.A.S Colombia www.advisability.co Vendor Homepage: https://www.tp-link.com/ Firmware Link:...

CVE-2018-6210

D-Link DIR-620 devices, with a certain Rostelekom variant of firmware 1.0.37, have a hardcoded rostel account, which makes it easier for remote attackers to obtain access via a TELNET session...

The vulnerability of the PROFIBUS-Ethernet gateway Softing AG FG-100 PB lies in the use of pre-set credentials, allowing a intruder to gain access to the device with root privileges.

The vulnerability of the PROFIBUS-Ethernet gateway Softing AG FG-100 PB lies in the use of pre-set credentials. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to the device with root privileges through a Telnet connection...

CVE-2018-10024

ubiQuoss Switch VP5208A creates a bcmpassword file at /cgi-bin/ with the user credentials in cleartext when a failed login attempt occurs. The file can be reached via an HTTP request. The credentials can be used to access the system via SSH or TELNET if it is enabled...

Foxconn femtocell FEMTO AP-FC4064-T Default Password Vulnerability

The Foxconn femtocell FEMTO AP-FC4064-T is a home base station device from Foxconn. A security vulnerability exists in the Foxconn femtocell FEMTO AP-FC4064-T APGTB385.8.3lb15-W47 LTE Build 15 version, which stems from the use of a weak default password for privileged accounts. The vulnerability...

Hardcoded credentials

A Use of Hard-coded Password issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. Telnet on the pump uses hardcoded credentials, which can be used if the pump is configured to allow external communications. Smiths Medical assesses that i...

The vulnerability of Xiongmai Technology’s micro-programmed software for IP cameras and video recorders, related to buffer overflow attacks, allows intruders to execute arbitrary codes or trigger an emergency shutdown of the devices.

The vulnerability of Microprogrammed Software for IP Cameras and Video Recorders from Xiongmai Technology, which use the NetSurveillance web interface, is related to buffer overflow attacks. Exploiting this vulnerability allows an attacker to execute arbitrary code or trigger a crash of the devic...

Multiple Vulnerabilities in Sprecher AutomationSPRECON-E-C,PU-2433

Sprecher Automation GmbH provides switchgear and automation solutions for energy, industry and infrastructure development, among others. Power utilities, industry, transportation companies, municipal utilities and public institutions are among its customers. 1 An authentication path traversal...

The vulnerability of the Zivif PR115-204-P-RS webcam’s microprogramming software relates to the use of pre-installed credentials, allowing a intruder to gain access to the device with root privileges.

The vulnerability of the Zivif PR115-204-P-RS webcam’s microprogramming software is related to the use of pre-set credentials the password “cat1029” for the “root” user. Exploiting this vulnerability allows a malicious actor to gain access to the device with root privileges through a Telnet...

Zivif PR115-204-P-RS Information Disclosure Vulnerability

The Zivif PR115-204-P-RS is a webcam device. An information disclosure vulnerability exists in the Zivif PR115-204-P-RS version 2.3.4.2103, which stems from the program using a hard-coded cat1029 password for the root user. An attacker can exploit this vulnerability to gain access to the device...

CVE-2017-17107

Zivif PR115-204-P-RS V2.3.4.2103 web cameras contain a hard-coded cat1029 password for the root user. The SONIX operating system's setup renders this password unchangeable and it can be used to access the device via a TELNET session...

CVE-2017-17107

Zivif PR115-204-P-RS V2.3.4.2103 web cameras contain a hard-coded cat1029 password for the root user. The SONIX operating system's setup renders this password unchangeable and it can be used to access the device via a TELNET session...

Xiongmai Technology IP Cameras and DVRs

CVSS v3 9.8 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Xiongmai Technology Equipment: IP Cameras and DVRs Vulnerability: Stack-based Buffer Overflow AFFECTED PRODUCTS The following versions of Xiongmai Technology IP cameras and DVRs are affected: All IP Cameras and DVRs...

PT-2017-3410 · Xiongmai Technology · Xiongmai Ip Cameras +2

Name of the Vulnerable Software and Affected Versions: Xiongmai Technology IP Cameras and DVRs affected versions not specified Description: A Stack-based Buffer Overflow issue has been discovered, which may allow an attacker to execute code remotely or crash the device. After rebooting, the devic...

The vulnerability of the TCP/IP software for the JanTek JTC-200 converter, related to deficiencies in authentication procedures, allows a hacker to gain access to the BusyBox Linux shell.

The vulnerability of the TCP/IP microprogramming software of the JanTek JTC-200 converter is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass the authentication process and gain access to the BusyBox Linux shell using the Teln...

The vulnerability of the Altum router’s microprogramming software relates to the use of pre-installed user accounts, which allow attackers to gain access to the embedded operating system with administrator privileges.

The vulnerability of the Altum router microprogramming system is related to the use of a pre-installed root account. Exploiting this vulnerability allows an attacker, operating remotely, to gain access to the embedded operating system with administrator privileges using SSH or Telnet connections...

ZyXEL PK5001Z Modem - Backdoor Account

ZyXEL PK5001Z Modem - Backdoor Account Exploit Title: ZyXEL PK5001Z Modem - CenturyLink Hardcoded admin and root Telnet Password. Google Dork: n/a Date: 2017-10-31 Exploit Author: Matthew Sheimo Vendor Homepage: https://www.zyxel.com/ Software Link: n/a Version: PK5001Z 2.6.20.19 Tested on: Linux...

Polycom Command Shell Authorization Bypass Exploit

The login component of the Polycom Command Shell on Polycom HDX video endpoints, running software versions 3.0.5 and earlier, is vulnerable to an authorization bypass when simultaneous connections are made to the service, allowing remote network attackers to gain access to a sandboxed telnet prom...

The vulnerability of the Alphanetworks account service allows a hacker to gain root access, enabling them to gain control over the D-Link DIR-850L router’s microprogramming software.

The vulnerability of the Alphanetworks account registration service, a microprogramming-based router operating system from D-Link, DIR-850L, lies in the rigid encoding of registration data during device reboots. Exploiting this vulnerability could allow an attacker, operating remotely, to gain ro...

D-Link DIR-850L REV.B Privilege Acquisition Vulnerability

The D-Link DIR-850L REV.B is a wireless router from AUO D-Link. A security vulnerability exists in the D-Link DIR-850L REV.B using firmware FW208WWb02 and prior versions, which stems from the use of hard-coded passwords for the Alphanetworks account. A remote attacker can exploit the vulnerabilit...