Authentication flaw

In Enterprise Networking Operating System ENOS in Lenovo and IBM RackSwitch and BladeCenter products, an authentication bypass known as "HP Backdoor" was discovered during a Lenovo security audit in the serial console, Telnet, SSH, and Web interfaces. This bypass mechanism can be accessed when...

CVE-2017-3765

In Enterprise Networking Operating System ENOS in Lenovo and IBM RackSwitch and BladeCenter products, an authentication bypass known as "HP Backdoor" was discovered during a Lenovo security audit in the serial console, Telnet, SSH, and Web interfaces. This bypass mechanism can be accessed when...

Cross site scripting

Persistent XSS exists in the web server on Cobham Sea Tel 116 build 222429 satellite communication system devices: remote attackers can inject malicious JavaScript code using the device's TELNET shell built-in commands, as demonstrated by the "set ship name" command. This is similar to a Cross...

CVE-2018-5071

Persistent XSS exists in the web server on Cobham Sea Tel 116 build 222429 satellite communication system devices: remote attackers can inject malicious JavaScript code using the device's TELNET shell built-in commands, as demonstrated by the "set ship name" command. This is similar to a Cross...

CVE-2018-5071

Persistent XSS exists in the web server on Cobham Sea Tel 116 build 222429 satellite communication system devices: remote attackers can inject malicious JavaScript code using the device's TELNET shell built-in commands, as demonstrated by the "set ship name" command. This is similar to a Cross...

CVE-2018-5071

Persistent XSS exists in the web server on Cobham Sea Tel 116 build 222429 satellite communication system devices: remote attackers can inject malicious JavaScript code using the device's TELNET shell built-in commands, as demonstrated by the "set ship name" command. This is similar to a Cross...

CVE-2018-5071

CVE-2018-5071 is a reported Persistent Cross‑Site Scripting vulnerability in the Cobham Sea Tel web server for Sea Tel 116, build 222429. The affected component is the web server; the underlying issue is persistent XSS that allows remote attackers to inject malicious JavaScript through TELNET she...

PT-2018-16763

Name of the Vulnerable Software and Affected Versions Cobham Sea Tel 116 build 222429 Description A persistent XSS issue exists in the web server of the affected device, allowing remote attackers to inject malicious JavaScript code. This can be achieved through the device's TELNET shell using...

PT-2018-2977

Name of the Vulnerable Software and Affected Versions Siemens CP 1604 versions all Siemens CP 1616 versions all Description The issue is related to the lack of authentication for the Telnet service in the Siemens CP communication module software. This could allow a remote attacker to extract data...

CVE-2018-5071: Improper Neutralization of Input During Web Page Generation

Persistent XSS exists in the web server on Cobham Sea Tel 116 build 222429 satellite communication system devices: remote attackers can inject malicious JavaScript code using the device's TELNET shell built-in commands, as demonstrated by the "set ship name" command. This is similar to a Cross...

Cisco IOS SNMP Remote Code Execution

!/usr/bin/env python if False: ''' CVE-2017-6736 / cisco-sa-20170629-snmp Cisco IOS remote code execution =================== This repository contains Proof-Of-Concept code for exploiting remote code execution vulnerability in SNMP service disclosed by Cisco Systems on June 29th 2017 - Descriptio...

D-Link DSL-6850U Router Remote Command Execution Vulnerability

The D-Link DSL-6850U is a wireless router product from AUO D-Link. The D-Link DSL-6850U router is vulnerable to remote command execution. As the router has a remote web management service enabled by default, a default credential support:support exists for this service and cannot be disabled. An...

Zivif PR115-204-P-RS Information Disclosure Vulnerability

The Zivif PR115-204-P-RS is a webcam device. An information disclosure vulnerability exists in the Zivif PR115-204-P-RS version 2.3.4.2103, which stems from the program using a hard-coded cat1029 password for the root user. An attacker can exploit this vulnerability to gain access to the device...

Ichano AtHome IP Cameras Multiple Vulnerabilities

Exploit for hardware platform in category remote exploits Vulnerabilities Summary The following advisory describes three 3 vulnerabilities found in Ichano IP Cameras. AtHome Camera is “a remote video surveillance app which turns your personal computer, smart TV/set-top box, smart phone, and table...

PT-2017-3597

Name of the Vulnerable Software and Affected Versions: Moxa AWK-3131A versions 1.4 through 1.7 Description: The issue exists due to the lack of measures to neutralize special elements used in the operating system command. This allows an attacker to inject commands via the username parameter of...

Stack overflow

A Stack-based Buffer Overflow issue was discovered in Xiongmai Technology IP Cameras and DVRs using the NetSurveillance Web interface. The stack-based buffer overflow vulnerability has been identified, which may allow an attacker to execute code remotely or crash the device. After rebooting, the...

CVE-2017-16725

A Stack-based Buffer Overflow issue was discovered in Xiongmai Technology IP Cameras and DVRs using the NetSurveillance Web interface. The stack-based buffer overflow vulnerability has been identified, which may allow an attacker to execute code remotely or crash the device. After rebooting, the...

CVE-2017-16725

A Stack-based Buffer Overflow issue was discovered in Xiongmai Technology IP Cameras and DVRs using the NetSurveillance Web interface. The stack-based buffer overflow vulnerability has been identified, which may allow an attacker to execute code remotely or crash the device. After rebooting, the...

CVE-2017-16725

Technical details about CVE-2017-16725 are not publicly available in the provided documents; the connected items reference related flaws (e.g., CVE-2018-10088) but do not disclose specifics for this CVE. Monitor for updates.

CVE-2017-16725: Improper Restriction of Operations within the Bounds of a Memory Buffer

A Stack-based Buffer Overflow issue was discovered in Xiongmai Technology IP Cameras and DVRs using the NetSurveillance Web interface. The stack-based buffer overflow vulnerability has been identified, which may allow an attacker to execute code remotely or crash the device. After rebooting, the...