6551 matches found
Adtran NetVanta 3120 安全漏洞
The Adtran NetVanta 3120 is a fixed-port Ethernet router from Adtran USA. A security vulnerability exists in the Adtran NetVanta 3120 version 18.01.01.00.E. The vulnerability stems from the device's TELNET service being enabled by default and having default credentials for a root-level account...
PT-2024-21117 · Wyrestorm · Wyrestorm Apollo Vx20
Name of the Vulnerable Software and Affected Versions: WyreStorm Apollo VX20 versions prior to 1.3.58 Description: An issue was discovered where the TELNET service prompts for a password only after a valid username is entered. This might make it easier for remote attackers to enumerate user...
CVE-2024-28093
CVE-2024-28093 affects AdTran NetVanta 3120 devices running version 18.01.01.00.E, where TELNET is enabled by default and uses a root-level credential. The issue is tied to default/root access and could allow unauthorized device access. Mitigation: disable TELNET or restrict access, and apply pat...
[SECURITY] Fedora 40 Update: apache-commons-net-3.10.0-5.fc40
This is an Internet protocol suite Java library originally developed by ORO, Inc. This version supports Finger, Whois, TFTP, Telnet, POP3, FTP, NNTP, SMTP, and some miscellaneous protocols like Time and Echo as well as BSD R command support. The purpose of the library is to provide fundamental...
The vulnerability of the Telnet protocol implementation in D-Link DIR-600M C1 Wi-Fi routers’ microprogramming software allows a hacker to execute arbitrary code.
The vulnerability of the Telnet protocol implementation in D-Link DIR-600M C1 Wi-Fi routers is caused by buffer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Backdoor.Win32.Jeemp.c MVID-2024-0672 Hardcoded Credential
Discovery / credits: Malvuln John Page aka hyp3rlinx c 2024 Original source: https://malvuln.com/advisory/d6b192a4027c7d635499133ca6ce067f.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Jeemp.c Vulnerability: Cleartext Hardcoded Credentials Description: The...
CentOS 9 : curl-7.76.1-22.el9
The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the curl-7.76.1-22.el9 build changelog. - A use after free vulnerability exists in curl 7.87.0. Curl can be asked to tunnel virtually all protocols it supports through an HTTP proxy. HTTP...
WyreStorm Apollo VX20 Security Vulnerability
Wyrestorm Apollo VX20 is an advanced conferencing video device from Wyrestorm. A security vulnerability exists in Wyrestorm Apollo VX20 prior to version 1.3.58, which stems from the TELNET service prompting for a password after a valid username is entered, allowing brute force attacks on valid...
CVE-2024-1786
UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, has been found in D-Link DIR-600M C1 3.08. Affected by this issue is some unknown functionality of the component Telnet Service. The manipulation of the argument username leads to buffer overflow. The attack may be...
CVE-2024-1786
UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, has been found in D-Link DIR-600M C1 3.08. Affected by this issue is some unknown functionality of the component Telnet Service. The manipulation of the argument username leads to buffer overflow. The attack may be...
Buffer overflow
UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, has been found in D-Link DIR-600M C1 3.08. Affected by this issue is some unknown functionality of the component Telnet Service. The manipulation of the argument username leads to buffer overflow. The attack may be...
CVE-2024-1786 D-Link DIR-600M C1 Telnet Service buffer overflow
UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, has been found in D-Link DIR-600M C1 3.08. Affected by this issue is some unknown functionality of the component Telnet Service. The manipulation of the argument username leads to buffer overflow. The attack may be...
CVE-2024-1786
The CVE-2024-1786 issue affects D-Link DIR-600M C1 with firmware 3.08, where the Telnet Service is vulnerable to a buffer overflow triggered by manipulating the username argument. The vulnerability is remote (attack vector: NETWORK) and described as high severity, with exploitation possible witho...
CVE-2024-1786 D-Link DIR-600M C1 Telnet Service buffer overflow
UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, has been found in D-Link DIR-600M C1 3.08. Affected by this issue is some unknown functionality of the component Telnet Service. The manipulation of the argument username leads to buffer overflow. The attack may be...
D-Link DIR-600M C1 Security Breach
The D-Link DIR-600M C1, among others, is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-600M C1 version 3.08, which stems from a buffer overflow caused by the parameter username in the component Telnet Service...
PT-2024-1919 · D Link · D-Link Dir-600M C1
Name of the Vulnerable Software and Affected Versions: D-Link DIR-600M C1 version 3.08 Description: A critical issue has been found in the Telnet Service component of the affected device, caused by a buffer overflow when manipulating the username argument. This can be exploited remotely,...
WyreStorm Apollo VX20 Account Enumeration
Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/WYRESTORMAPOLLOVX20ACCOUNTENUMERATIONCVE-2024-25734.txt + twitter.com/hyp3rlinx + ISR: ApparitionSec Vendor www.wyrestorm.com Product APOLLO VX20 1.3.58 Vulnerability Type...
WyreStorm Apollo VX20 Account Enumeration Vulnerability
An issue was discovered on WyreStorm Apollo VX20 devices prior to version 1.3.58. The TELNET service prompts for a password only after a valid username is entered. Attackers who can reach the Apollo VX20 Telnet service can determine valid accounts allowing for account discovery. + Credits: John...