CLSA-2021-1635459182 Fix CVE(s): CVE-2021-22898

SECURITY UPDATE: TELNET stack contents disclosure - debian/patches/CVE-2021-22898.patch: check sscanf for correct number of matches in lib/telnet.c - CVE-2021-22898...

CLSA-2021-1635459174 Fix CVE(s): CVE-2021-22925

SECURITY UPDATE: TELNET stack contents disclosure again - debian/patches/CVE-2021-22925.patch: check sscanf for correct number - of matches in lib/telnet.c - CVE-2021-22925...

Telnet Service Unprotected Registration Data

The vulnerability of the Telnet service provided by the D-Link DIR-868L router’s microprogramming software is related to insufficient protection for registration data. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

Brocade Fabric OS Authentication Bypass

The vulnerability of the Brocade Fabric OS operating system is related to deficiencies in the authentication process. Exploiting this vulnerability allows an attacker to gain access to the system via telnet, SSH, or REST...

Telnet Service D-link DIR-885L-MFC Unauthenticated Access

The vulnerability of the Telnet service provided by the D-link DIR-885L-MFC router software is related to insufficient protection for registration data. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

CLSA-2021-1634922517 Fixed CVE-2021-22925 in curl

telnet stack contents disclosure again CVE-2021-22925...

CLSA-2021-1634922501 Fixed CVE-2021-22925 in curl

telnet stack contents disclosure again CVE-2021-22925...

Telnet Service Unprotected Registration Data

The vulnerability of the Telnet service provided by the D-Link DIR-880L router’s microprogramming software is related to insufficient protection for registration data. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

Cypress Solutions CTM-200/CTM-ONE - Hard-coded Credentials Remote Root (Telnet/SSH)

Exploit Title: Cypress Solutions CTM-200/CTM-ONE - Hard-coded Credentials Remote Root Telnet/SSH Date: 21.09.2021 Exploit Author: LiquidWorm Vendor Homepage: https://www.cypress.bc.ca !/usr/bin/env python3 Cypress Solutions CTM-200/CTM-ONE Hard-coded Credentials Remote Root Telnet/SSH Vendor:...

Cypress Solutions CTM-200/CTM-ONE Hard-Coded Credentials Remote Root

!/usr/bin/env python3 Cypress Solutions CTM-200/CTM-ONE Hard-coded Credentials Remote Root Telnet/SSH Vendor: Cypress Solutions Inc. Product web page: https://www.cypress.bc.ca Affected version: CTM-ONE 1.3.6-latest CTM-ONE 1.3.1 CTM-ONE 1.1.9 CTM200 2.7.1.5659-latest CTM200 2.0.5.3356-184 Summar...

Cypress Solutions CTM-200/CTM-ONE Hard-coded Credentials Remote Root (Telnet/SSH)

Summary CTM-200 is the industrial cellular wireless gateway for fixed and mobile applications. The CTM-200 is a Linux based platform powered by ARM Cortex-A8 800 MHz superscalar processor. Its on-board standard features make the CTM-200 ideal for mobile fleet applications or fixed site office and...

VulnCheck KEV: CVE-2021-28152

Hongdian H8922 3.0.5 devices have an undocumented feature that allows access to a shell as a superuser. To connect, the telnet service is used on port 5188 with the default credentials of root:superzxmn...

Metasploit Wrap-Up

Credential gatherers, mix-ins, oh my! We're excited that Metasploit now includes support for 28 related post modules for gathering credentials based on the PackRat toolset. This is a continuation of 5433, 11700, and 11719. It was developed by community contributors Kazuyoshi Maruta, Daniel...

Fedora: Security Advisory for curl (FEDORA-2021-c5584b92d4)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fix of CVE: CVE-2021-22925

telnet stack contents disclosure again CVE-2021-22925...

CLSA-2021-1632261944 Fix of CVE: CVE-2021-22925

telnet stack contents disclosure again CVE-2021-22925...

[SECURITY] Fedora 34 Update: curl-7.76.1-12.fc34

curl is a command line tool for transferring data with URL syntax, supporting FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, IMA P, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...

No Patch for High-Severity Bug in Legacy IBM System X Servers

Two legacy IBM System x server models, retired in 2019, are open to attack and will not receive security patches, according to hardware maker Lenovo. However, the company is offering workaround mitigation. The two models, IBM System x 3550 M3 and IBM System x 3650 M3, are both vulnerable to comma...

Medium: curl

Issue Overview: A flaw was found in curl in the way curl handles a file hash mismatch after downloading content using the Metalink feature. This flaw allows malicious actors controlling a hosting server to trick users into downloading malicious content. The highest threat from this vulnerability ...

PT-2021-5272

Name of the Vulnerable Software and Affected Versions IBM System x 3550 M3 affected versions not specified IBM System x 3650 M3 affected versions not specified Description A command injection issue was found in the Integrated Management Module IMM that could allow the execution of operating syste...