6646 matches found
vsftpd 2.3.4 Backdoor Command Execution
Exploit Title: vsftpd 2.3.4 - Backdoor Command Execution Date: 9-04-2021 Exploit Author: HerculesRD Software Link: http://www.linuxfromscratch.org/thomasp/blfs-book-xsl/server/vsftpd.html Version: vsftpd 2.3.4 Tested on: debian CVE : CVE-2011-2523 !/usr/bin/python3 from telnetlib import Telnet...
[SECURITY] Fedora 33 Update: curl-7.71.1-9.fc33
curl is a command line tool for transferring data with URL syntax, supporti ng FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, I MAP, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...
Default credentials
An issue was discovered on Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices. It is possible using TELNET without a password to control the camera's pan/zoom/tilt functionality...
CVE-2019-20465
An issue was discovered on Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices. It is possible using TELNET without a password to control the camera's pan/zoom/tilt functionality...
CVE-2019-20465
An issue was discovered on Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices. It is possible using TELNET without a password to control the camera's pan/zoom/tilt functionality...
CVE-2019-20465
The CVE-2019-20465 issue concerns Sannce Smart HD Wifi Security Camera EAN 2 950004 595317. The connected documents confirm that the vulnerability stems from TELNET access without a password, enabling an attacker to directly control the camera’s pan/zoom/tilt functionality over the network. Affec...
de Consumentenbond Sannce Smart HD Baby Monitor 安全漏洞
The de Consumentenbond Sannce Smart HD Baby Monitor is a webcam from de Consumentenbond in the Netherlands. It provides monitoring functionality. A security vulnerability exists in de Consumentenbond Sannce Smart HD Baby Monitor, which originates from the use of TELNET to control the pan zoom til...
Cisco IOS XR Software Enf Broker DoS (cisco-sa-iosxr-dos-WwDdghs2)
According to its self-reported version, IOS-XR is affected by multiple denial of service vulnerabilities: - A denial of service vulnerability exists in Cisco IOS XR due to a logic error that occurs when an affected device processes Telnet protocol packets. An unauthenticated, remote attacker can...
KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 Hard-Coded Credentails / Shell Access
KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 Hard-coded Credentials Shell Access Vendor: KZ Broadband Technologies, Ltd. | Jaton Technology, Ltd. Product web page: http://www.kzbtech.com | http://www.jatontec.com | https://www.neotel.mk http://www.jatontec.com/products/show.php?itemid=258...
D-Link, IoT Devices Under Attack By Tor-Based Gafgyt Variant
Researchers have discovered what they say is the first variant of the Gafgyt botnet family to cloak its activity using the Tor network. Gafgyt, a botnet that was uncovered in 2014, has become infamous for launching large-scale distributed denial-of-service DDoS attacks. Researchers first discover...
CVE-2021-25309
The telnet administrator service running on port 650 on Gigaset DX600A v41.00-175 devices does not implement any lockout or throttling functionality. This situation together with the weak password policy that forces a 4-digit password allows remote attackers to easily obtain administrative access...
CVE-2021-25309
The telnet administrator service running on port 650 on Gigaset DX600A v41.00-175 devices does not implement any lockout or throttling functionality. This situation together with the weak password policy that forces a 4-digit password allows remote attackers to easily obtain administrative access...
Default credentials
The telnet administrator service running on port 650 on Gigaset DX600A v41.00-175 devices does not implement any lockout or throttling functionality. This situation together with the weak password policy that forces a 4-digit password allows remote attackers to easily obtain administrative access...
CVE-2021-25309
The telnet administrator service running on port 650 on Gigaset DX600A v41.00-175 devices does not implement any lockout or throttling functionality. This situation together with the weak password policy that forces a 4-digit password allows remote attackers to easily obtain administrative access...
CVE-2021-25309
CVE-2021-25309 affects Gigaset DX600A devices with firmware v41.00-175. The telnet administrator service on port 650 does not implement any lockout or throttling, combined with a 4-digit weak password policy, enabling remote attackers to obtain administrative access via brute-force attempts. Publ...
The vulnerability of the telnetd component in the Junos operating system allows a hacker to increase their privileges.
The vulnerability of the telnetd component in the Junos operating system is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...
FiberHome HG6245D devices authorization issue vulnerability
FiberHome HG6245D devices is a router from FiberHome, China. It provides network connectivity. An authorization issue vulnerability exists in the FiberHome HG6245D devices, which can be exploited by an attacker to access a telnet server...
Svakom Siime Eye License Issue Vulnerability
Svakom Siime Eye is a smart home device from Svakom USA. A security vulnerability exists in Svakom Siime Eye version 14.1.00000001.3.330.0.0.3.14, which stems from a vulnerability used to open the server's telnet service using setparams.cgi?telnetd=1 & save=1 & reboot=1, which allows an attacker ...
FiberHome HG6245D Denial of Service Vulnerability
The HG6245D is an FTTH ONT router from FiberHome. A denial of service vulnerability exists in the FiberHome HG6245D. An attacker can exploit the vulnerability by sending a specific string to cause the telnet daemon to crash...
FiberHome HG6245D Certification Bypass Vulnerability
The HG6245D is an FTTH ONT router from FiberHome. An authentication bypass vulnerability exists in the FiberHome HG6245D. An attacker can exploit this vulnerability to bypass authentication by sending a decoded value of the GgpoZWxwCmxpc3QKd2hvCg== string to a telnet server...