PT-2016-6912

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software running on Cisco cBR-8 Converged Broadband Routers versions 15.53S2.9 through 15.62SP Cisco IOS XE Software running on Cisco cBR-8 Converged Broadband Routers versions 3.16S through 3.18.1S Description A vulnerability in...

Beckhoff Embedded PC Image and Automation Device Specification TwinCAT Component Security Bypass Vulnerability (CNVD-2016-08764)

Beckhoff Embedded PC Images and Automation Device Specification ADS TwinCAT Components are Beckhoff products for critical infrastructure applications in manufacturing, energy and wastewater systems. Beckhoff Embedded PC Images is a functionally configurable industrial control system for...

PT-2016-3208

Name of the Vulnerable Software and Affected Versions Trango ApexLynx version 2.0 Trango ApexOrion version 2.0 Trango GigaLynx version 2.0 Trango GigaOrion version 2.0 Trango StrataLink version 3.0 Description The issue concerns a built-in, hidden root account with a default password, accessible...

PT-2016-3210

Name of the Vulnerable Software and Affected Versions Trango Apex versions 2.1.1 and earlier ApexLynx version 2.0 and earlier ApexOrion version 2.0 and earlier ApexPlus versions 3.2.0 and earlier Giga versions 2.6.1 and earlier GigaLynx version 2.0 and earlier GigaOrion version 2.0 and earlier...

Billion 7700NR4 Router - Remote Command Execution

Billion 7700NR4 Router - Remote Command Execution Title : Billion Router 7700NR4 Remote Root Command Execution Date : 06/10/2016 Author : R-73eN Tested on: Billion Router 7700NR4 Vendor : http://www.billion.com/ Vulnerability Description: This router is a widely used here in Albania. It is given ...

Billion Router 7700NR4 - Remote Command Execution Exploit

Exploit for hardware platform in category remote exploits Title : Billion Router 7700NR4 Remote Root Command Execution Date : 06/10/2016 Author : R-73eN Tested on: Billion Router 7700NR4 Vendor : http://www.billion.com/ Vulnerability Description: This router is a widely used here in Albania. It i...

Billion Router 7700NR4 Remote Root Command Execution

Title : Billion Router 7700NR4 Remote Root Command Execution Date : 06/10/2016 Author : R-73eN Tested on: Billion Router 7700NR4 Vendor : http://www.billion.com/ Vulnerability Description: This router is a widely used here in Albania. It is given by a telecom provider to the home and bussiness...

Billion 7700NR4 Router - Remote Command Execution

Title : Billion Router 7700NR4 Remote Root Command Execution Date : 06/10/2016 Author : R-73eN Tested on: Billion Router 7700NR4 Vendor : http://www.billion.com/ Vulnerability Description: This router is a widely used here in Albania. It is given by a telecom provider to the home and bussiness...

CVE-2014-5415

Beckhoff Embedded PC images before 2014-10-22 and Automation Device Specification ADS TwinCAT components might allow remote attackers to obtain access via the 1 Windows CE Remote Configuration Tool, 2 CE Remote Display service, or 3 TELNET service...

Design/Logic Flaw

Beckhoff Embedded PC images before 2014-10-22 and Automation Device Specification ADS TwinCAT components might allow remote attackers to obtain access via the 1 Windows CE Remote Configuration Tool, 2 CE Remote Display service, or 3 TELNET service...

CVE-2014-5415 Beckhoff Embedded PC Images and TwinCAT Components Exposed Dangerous Method or Function

Beckhoff Embedded PC images before 2014-10-22 and Automation Device Specification ADS TwinCAT components might allow remote attackers to obtain access via the 1 Windows CE Remote Configuration Tool, 2 CE Remote Display service, or 3 TELNET service...

CVE-2014-5415: Exposed Dangerous Method or Function

Beckhoff Embedded PC images before 2014-10-22 and Automation Device Specification ADS TwinCAT components might allow remote attackers to obtain access via the 1 Windows CE Remote Configuration Tool, 2 CE Remote Display service, or 3 TELNET service...

PT-2016-3493

Name of the Vulnerable Software and Affected Versions Beckhoff Embedded PC images prior to 2014-10-22 Beckhoff Automation Device Specification ADS TwinCAT components affected versions not specified Description The issue allows remote attackers to obtain access. This can be achieved through the...

Source Code Released for Mirai DDoS Malware

The dangers of haphazardly connecting embedded devices to the Internet have manifested themselves in mammoth distributed denial-of-service attacks, in particular one two weeks ago against security journalist Brian Krebs’ website that peaked at better than 620 Gbps. The situation worsened over the...

Backdoored D-Link Router Should be Trashed, Researcher Says

A researcher who found a slew of vulnerabilities in a popular router said it’s so hopelessly broken that consumers who own them should throw them away. Pierre Kim said attackers could easily exploit the vulnerabilities and use the device as a spamming zombie or a man-in-the-middle tool. “I advise...

Grandsteam GXV3611_HD - SQL Injection

Grandsteam GXV3611HD - SQL Injection Exploit Title: Grandstream GXV3611HD Telnet SQL Injection and backdoor command Exploit Author: pizza1337 Vendor Homepage: http://www.grandstream.com/ Version: GXV3611HD Core 1.0.3.6, 1.0.4.3 GXV3611IRHD Core 1.0.3.5 Tested on: -GXV3611HD Bootloader Version:...

Grandsteam GXV3611_HD - SQL Injection

Exploit Title: Grandstream GXV3611HD Telnet SQL Injection and backdoor command Exploit Author: pizza1337 Vendor Homepage: http://www.grandstream.com/ Version: GXV3611HD Core 1.0.3.6, 1.0.4.3 GXV3611IRHD Core 1.0.3.5 Tested on: -GXV3611HD Bootloader Version: 1.0.0.0 Core Version: 1.0.4.3 Base...

DLA-639-1 mactelnet - security update

Bulletin has no description...

CVE-2016-6535

AVer Information EH6108H+ devices with firmware X9.03.24.00.07l have hardcoded accounts, which allows remote attackers to obtain root access by leveraging knowledge of the credentials and establishing a TELNET session...

CVE-2016-6535

AVer Information EH6108H+ devices with firmware X9.03.24.00.07l have hardcoded accounts, which allows remote attackers to obtain root access by leveraging knowledge of the credentials and establishing a TELNET session...