Lucene search
+L

7628 matches found

Prion
Prion
•added 2021/04/13 7:15 p.m.•37 views

Code injection

An unauthorized attacker may be able to entice an administrator to invoke telnet commands of an SAP NetWeaver Application Server for Java that allow the attacker to gain NTLM hashes of a privileged user...

4.3CVSS6.6AI score0.0094EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2021/04/13 7:15 p.m.•13 views

CVE-2021-21485

An unauthorized attacker may be able to entice an administrator to invoke telnet commands of an SAP NetWeaver Application Server for Java that allow the attacker to gain NTLM hashes of a privileged user...

7.4CVSS6.9AI score0.0094EPSS
SaveExploits0References3
CNVD
CNVD
•added 2021/04/13 12:00 a.m.•21 views

D-Link DAP-1880AC Security Bypass Vulnerability

The D-Link DAP-1880AC is a wireless access point from AUO D-Link of Taiwan, China. It provides to build a simultaneous dual-band wireless network that enables a wide range of wireless areas in the 2.4GHz and 5GHz bands. A security bypass vulnerability exists in D-Link DAP-1880AC firmware version...

8.8CVSS7AI score0.01705EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/04/13 12:00 a.m.•26 views

SAP NetWeaver Application Server information leakage vulnerability

SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. An information disclosure vulnerability exists in SAP NetWeaver Application Server for Java versions 7.30, 7.31,...

7.4CVSS5.6AI score0.0094EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/13 12:00 a.m.•10 views

CVE-2021-21485: Undefined Security Weakness

An unauthorized attacker may be able to entice an administrator to invoke telnet commands of an SAP NetWeaver Application Server for Java that allow the attacker to gain NTLM hashes of a privileged user...

7.4CVSS5.8AI score0.0094EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/04/13 12:00 a.m.•11 views

PT-2021-14551

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Application Server for Java affected versions not specified Description The issue allows an unauthorized attacker to trick an administrator into invoking telnet commands on the SAP NetWeaver Application Server for Java, potential...

7.4CVSS0.0094EPSS
SaveExploits0References4
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2021/04/12 6:32 a.m.•25 views

D-Link DAP-1880AC contains multiple vulnerabilities

Overview DAP-1880AC provided by D-Link Japan K.K. contains multiple vulnerabilities listed below. Improper access control CWE-284 - CVE-2021-20694 Improper privilege management CWE-269 - CVE-2021-20695 OS command injection CWE-78 - CVE-2021-20696 Missing authentication for critical function CWE-3...

9.8CVSS8.1AI score0.02399EPSS
SaveExploits0References14
CNNVD
CNNVD
•added 2021/04/12 12:00 a.m.•20 views

D-Link DAP-1880AC security vulnerabilities

The D-Link DAP-1880AC is a wireless access point from AUO D-Link of Taiwan, China. It provides to build a simultaneous dual-band wireless network that enables a wide range of wireless areas in the 2.4GHz and 5GHz bands. A security bypass vulnerability exists in D-Link DAP-1880AC firmware version...

8.8CVSS5.7AI score0.01705EPSS
SaveExploits0References4
zdt
zdt
•added 2021/04/12 12:00 a.m.•1428 views

vsftpd 2.3.4 - Backdoor Command Execution Exploit

Exploit Title: vsftpd 2.3.4 - Backdoor Command Execution Exploit Author: HerculesRD Software Link: http://www.linuxfromscratch.org/thomasp/blfs-book-xsl/server/vsftpd.html Version: vsftpd 2.3.4 Tested on: debian CVE : CVE-2011-2523 !/usr/bin/python3 from telnetlib import Telnet import argparse fr...

9.8CVSS7.8AI score0.96184EPSS
SaveExploits60
Packet Storm
Packet Storm
•added 2021/04/12 12:00 a.m.•3440 views

vsftpd 2.3.4 Backdoor Command Execution

Exploit Title: vsftpd 2.3.4 - Backdoor Command Execution Date: 9-04-2021 Exploit Author: HerculesRD Software Link: http://www.linuxfromscratch.org/thomasp/blfs-book-xsl/server/vsftpd.html Version: vsftpd 2.3.4 Tested on: debian CVE : CVE-2011-2523 !/usr/bin/python3 from telnetlib import Telnet...

10CVSS7.8AI score0.96184EPSS
SaveExploits60
Exploit DB
Exploit DB
•added 2021/04/12 12:00 a.m.•3203 views

vsftpd 2.3.4 - Backdoor Command Execution

Exploit Title: vsftpd 2.3.4 - Backdoor Command Execution Date: 9-04-2021 Exploit Author: HerculesRD Software Link: http://www.linuxfromscratch.org/thomasp/blfs-book-xsl/server/vsftpd.html Version: vsftpd 2.3.4 Tested on: debian CVE : CVE-2011-2523 !/usr/bin/python3 from telnetlib import Telnet...

10CVSS7.8AI score0.96184EPSS
SaveExploits60
Fedora
Fedora
•added 2021/04/04 1:09 a.m.•107 views

[SECURITY] Fedora 33 Update: curl-7.71.1-9.fc33

curl is a command line tool for transferring data with URL syntax, supporti ng FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, I MAP, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...

5.3CVSS6.6AI score0.05301EPSS
SaveExploits2
Prion
Prion
•added 2021/04/02 4:15 p.m.•32 views

Default credentials

An issue was discovered on Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices. It is possible using TELNET without a password to control the camera's pan/zoom/tilt functionality...

5CVSS7.5AI score0.015EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2021/04/02 3:35 p.m.•17 views

CVE-2019-20465

An issue was discovered on Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices. It is possible using TELNET without a password to control the camera's pan/zoom/tilt functionality...

6.8AI score0.015EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2021/04/02 3:35 p.m.•47 views

CVE-2019-20465

An issue was discovered on Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices. It is possible using TELNET without a password to control the camera's pan/zoom/tilt functionality...

7.5AI score0.015EPSS
SaveExploits1References2
CVE
CVE
•added 2021/04/02 3:35 p.m.•63 views

CVE-2019-20465

The CVE-2019-20465 issue concerns Sannce Smart HD Wifi Security Camera EAN 2 950004 595317. The connected documents confirm that the vulnerability stems from TELNET access without a password, enabling an attacker to directly control the camera’s pan/zoom/tilt functionality over the network. Affec...

7.5CVSS7.4AI score0.015EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
•added 2021/04/02 12:00 a.m.•18 views

De Consumentenbond Sannce Smart HD Baby Monitor has a security vulnerability

The de Consumentenbond Sannce Smart HD Baby Monitor is a webcam from de Consumentenbond in the Netherlands. It provides monitoring functionality. A security vulnerability exists in de Consumentenbond Sannce Smart HD Baby Monitor, which originates from the use of TELNET to control the pan zoom til...

7.5CVSS7.3AI score0.015EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/02 12:00 a.m.•14 views

CVE-2019-20465: Undefined Security Weakness

An issue was discovered on Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices. It is possible using TELNET without a password to control the camera's pan/zoom/tilt functionality...

7.5CVSS5.8AI score0.015EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2021/03/31 12:00 a.m.•52 views

Cisco IOS XR Software Enf Broker DoS (cisco-sa-iosxr-dos-WwDdghs2)

According to its self-reported version, IOS-XR is affected by multiple denial of service vulnerabilities: - A denial of service vulnerability exists in Cisco IOS XR due to a logic error that occurs when an affected device processes Telnet protocol packets. An unauthenticated, remote attacker can...

8.6CVSS7.3AI score0.01952EPSS
SaveExploits0References5
Packet Storm
Packet Storm
•added 2021/03/19 12:00 a.m.•221 views

KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 Hard-Coded Credentails / Shell Access

KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 Hard-coded Credentials Shell Access Vendor: KZ Broadband Technologies, Ltd. | Jaton Technology, Ltd. Product web page: http://www.kzbtech.com | http://www.jatontec.com | https://www.neotel.mk http://www.jatontec.com/products/show.php?itemid=258...

7.4AI score
SaveExploits0
Rows per page
Query Builder