CVE-2018-12526

CVE-2018-12526 affects Telesquare SDT-CS3B1 and SDT-CW3B1 devices up to firmware 1.2.0, due to a default factory account that enables remote TELNET access via a hardcoded credential. Connected sources (NVD, CNVD, CVE records) consistently describe the root cause as a hardcoded default account; ex...

CVE-2018-12526: Use of Hard-coded Credentials

Telesquare SDT-CS3B1 and SDT-CW3B1 devices through 1.2.0 have a default factory account. Remote attackers can obtain access to the device via TELNET using a hardcoded account...

TP-Link TL-WA850RE Remote Command Execution

!/usr/bin/env python Exploit Title: TP-Link Technologies TL-WA850RE Wi-Fi Range Extender - Command Execution Date: 19/06/2018 Exploit Author: yoresongo - Advisability S.A.S Colombia www.advisability.co Vendor Homepage: https://www.tp-link.com/ Firmware Link:...

PT-2018-11233

Name of the Vulnerable Software and Affected Versions Telesquare SDT-CS3B1 and SDT-CW3B1 devices versions prior to 1.2.0 Telesquare SDT-CS3B1 and SDT-CW3B1 devices version 1.2.0 Description The issue concerns a default factory account in the devices. Remote attackers can obtain access to the devi...

Brave Software: Unsafe handling of protocol handlers

Summary: Brave browser macOS handles protocol handlers in unsafe way and differently from other browsers. Key differences between protocol handlers handling in Brave and other browsers: Open external app vs Open "Terminal" Brave only asks about opening external app. Other browsers e.g. Chrome ask...

TP-Link TL-WA850RE - Remote Command Execution Exploit

Exploit for hardware platform in category web applications !/usr/bin/env python Exploit Title: TP-Link Technologies TL-WA850RE Wi-Fi Range Extender - Command Execution Date: 19/06/2018 Exploit Author: yoresongo - Advisability S.A.S Colombia www.advisability.co Vendor Homepage:...

TP-Link TL-WA850RE - Remote Command Execution

TP-Link TL-WA850RE - Remote Command Execution !/usr/bin/env python Exploit Title: TP-Link Technologies TL-WA850RE Wi-Fi Range Extender - Command Execution Date: 19/06/2018 Exploit Author: yoresongo - Advisability S.A.S Colombia www.advisability.co Vendor Homepage: https://www.tp-link.com/ Firmwar...

TP-Link TL-WA850RE - Remote Command Execution

!/usr/bin/env python Exploit Title: TP-Link Technologies TL-WA850RE Wi-Fi Range Extender - Command Execution Date: 19/06/2018 Exploit Author: yoresongo - Advisability S.A.S Colombia www.advisability.co Vendor Homepage: https://www.tp-link.com/ Firmware Link:...

Hardcoded credentials

D-Link DIR-620 devices, with a certain Rostelekom variant of firmware 1.0.37, have a hardcoded rostel account, which makes it easier for remote attackers to obtain access via a TELNET session...

CVE-2018-6210

D-Link DIR-620 devices, with a certain Rostelekom variant of firmware 1.0.37, have a hardcoded rostel account, which makes it easier for remote attackers to obtain access via a TELNET session...

CVE-2018-6210

D-Link DIR-620 devices, with a certain Rostelekom variant of firmware 1.0.37, have a hardcoded rostel account, which makes it easier for remote attackers to obtain access via a TELNET session...

CVE-2018-6210

The CVE-2018-6210 entry concerns D-Link DIR-620 routers with a Rostelekom variant of firmware 1.0.37 that ship a hardcoded rostel account. The underlying risk is that an unauthenticated remote attacker can obtain access via TELNET, enabling privileged router access (the OS/user account context fr...

CVE-2018-6210

D-Link DIR-620 devices, with a certain Rostelekom variant of firmware 1.0.37, have a hardcoded rostel account, which makes it easier for remote attackers to obtain access via a TELNET session...

CVE-2018-6210: Use of Hard-coded Credentials

D-Link DIR-620 devices, with a certain Rostelekom variant of firmware 1.0.37, have a hardcoded rostel account, which makes it easier for remote attackers to obtain access via a TELNET session...

PT-2018-17414

Name of the Vulnerable Software and Affected Versions D-Link DIR-620 version 1.0.37 Description The issue allows remote attackers to obtain access via a TELNET session, due to a hardcoded rostel account in a certain Rostelekom variant of the firmware. Recommendations For version 1.0.37, consider...

CVE-2018-12072

An issue was discovered in Cloud Media Popcorn A-200 03-05-130708-21-POP-411-000 firmware. It is configured to provide TELNET remote access without a password that pops a shell as root. If an attacker can connect to port 23 on the device, he can completely compromise it...

Default credentials

An issue was discovered in Cloud Media Popcorn A-200 03-05-130708-21-POP-411-000 firmware. It is configured to provide TELNET remote access without a password that pops a shell as root. If an attacker can connect to port 23 on the device, he can completely compromise it...

CVE-2018-12072

An issue was discovered in Cloud Media Popcorn A-200 03-05-130708-21-POP-411-000 firmware. It is configured to provide TELNET remote access without a password that pops a shell as root. If an attacker can connect to port 23 on the device, he can completely compromise it...

CVE-2018-12072

CVE-2018-12072 affects Cloud Media Popcorn A-200 with firmware 03-05-130708-21-POP-411-000. The device is configured with TELNET remote access on port 23 with no password, allowing an unauthenticated attacker to spawn a root shell and fully compromise the device. The available connected documents...

PT-2018-10989

Name of the Vulnerable Software and Affected Versions Cloud Media Popcorn A-200 version 03-05-130708-21-POP-411-000 Description An issue was discovered where the device is configured to provide TELNET remote access without a password, allowing an attacker to gain root access if they can connect t...