Default credentials

On BE126 WIFI repeater 1.0 devices, an attacker can log into telnet which is open by default with default credentials as root username:"root" password:"root" and can: 1. Read the entire file system; 2. Write to the file system; or 3. Execute any code that attacker desires malicious or not...

Default credentials

On BE126 WIFI repeater 1.0 devices, an attacker can log into telnet which is open by default with default credentials as root username:"root" password:"root". The attacker can make a user that is connected to the repeater click on a malicious link that will log into the telnet and will infect the...

CVE-2017-8772

On BE126 WIFI repeater 1.0 devices, an attacker can log into telnet which is open by default with default credentials as root username:"root" password:"root" and can: 1. Read the entire file system; 2. Write to the file system; or 3. Execute any code that attacker desires malicious or not...

CVE-2017-8771

On BE126 WIFI repeater 1.0 devices, an attacker can log into telnet which is open by default with default credentials as root username:"root" password:"root". The attacker can make a user that is connected to the repeater click on a malicious link that will log into the telnet and will infect the...

CVE-2017-8772

CNVD-2017-35048 confirms a vulnerability in Gongjin Electronics BE126 WIFI repeater (version 1.0) allowing telnet access as root with default credentials, enabling reading the entire filesystem, writing to the filesystem, and executing arbitrary code. The NVD entry for CVE-2017-8772 mirrors these...

CVE-2017-8772

On BE126 WIFI repeater 1.0 devices, an attacker can log into telnet which is open by default with default credentials as root username:"root" password:"root" and can: 1. Read the entire file system; 2. Write to the file system; or 3. Execute any code that attacker desires malicious or not...

Moxa AWK-3131A Hard-coded Administrator Credentials Vulnerability(CVE-2016-8717)

Summary An exploitable Use of Hard-coded Credentials vulnerability exists in the Moxa AWK-3131A Wireless Access Point running firmware 1.1. The device operating system contains an undocumented, privileged root account with hard-coded credentials, giving attackers full control of affected devices...

MobaXtrem v10.4 - Remote Code Execution Vulnerability

Document Title: =============== MobaXtrem v10.4 - Remote Code Execution Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2097 Video: https://www.youtube.com/watch?v=FtBGmwFtRrE http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-15376...

MobaXtrem v10.4 - Remote Code Execution Vulnerability

Document Title: =============== MobaXtrem v10.4 - Remote Code Execution Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2097 Video: https://www.youtube.com/watch?v=FtBGmwFtRrE http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-15376...

DEBIAN-CVE-2017-12988

The telnet parser in tcpdump before 4.9.2 has a buffer over-read in print-telnet.c:telnetparse...

Buffer overflow

The telnet parser in tcpdump before 4.9.2 has a buffer over-read in print-telnet.c:telnetparse...

CVE-2017-12988

The telnet parser in tcpdump before 4.9.2 has a buffer over-read in print-telnet.c:telnetparse...

CVE-2017-12988

The telnet parser in tcpdump before 4.9.2 has a buffer over-read in print-telnet.c:telnetparse...

CVE-2017-12988

The telnet parser in tcpdump before 4.9.2 has a buffer over-read in print-telnet.c:telnetparse...

CVE-2017-12988

CVE-2017-12988 affects tcpdump prior to 4.9.2, due to a buffer over-read in telnet_parse() within print-telnet.c. This could allow a remote attacker to obtain sensitive information. The issue is fixed by upgrading to tcpdump 4.9.2 (as referenced in tcpdump advisory updates). If maintaining vulner...

CVE-2017-12988

The telnet parser in tcpdump before 4.9.2 has a buffer over-read in print-telnet.c:telnetparse...

Tcpdump telnet parser buffer overflow vulnerability

Tcpdump is a set of sniffing tools developed by the Tcpdump team that run at the command line. The tools allow users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer. telnet parser is one of the remote connection virtual terminal protoc...

D-Link DIR-850L REV.B Privilege Acquisition Vulnerability

The D-Link DIR-850L REV.B is a wireless router from AUO D-Link. A security vulnerability exists in the D-Link DIR-850L REV.B using firmware FW208WWb02 and prior versions, which stems from the use of hard-coded passwords for the Alphanetworks account. A remote attacker can exploit the vulnerabilit...

Sending and receiving emails automatically in Python

There are different situations, when you may want to process email messages automatically. I will give some examples related to Vulnerability Management: Send a message to your colleagues that you are going to start a network vulnerability scan or WAS scan. It is much better than investigating...

Hardcoded credentials

D-Link DIR-850L REV. B with firmware through FW208WWb02 devices have a hardcoded password of wrgac25dlink.2013guidir850l for the Alphanetworks account upon device reset, which allows remote attackers to obtain root access via a TELNET session...