6650 matches found
NPM-V (Network Power Manager) 2.4.1 - Password Reset
NPM-VNetwork Power Manager = 2.4.1 Reset Password Vulnerability Author: Saeed reza Zamanian penetrationtest @ Linkedin Product: NPM-V Affected Version : 2.4.1 and below Vendor : http://www.china-clever.com Product Link : http://www.china-clever.com/en/index.php/product?view=products&cid=125 Date:...
Faleemi FSC-880 CSRF / SQL Injection / Command Execution Vulnerabilities
Faleemi FSC-880 suffers from command execution, cross site request forgery, remote SQL injection, and various other vulnerabilities. Full disclosure is here: https://medium.com/iotsploit/faleemi-fsc-880-multiple-security-vulnerabilities-ed1d132c2cce === Timeline: 25 August 2017: the research was...
Faleemi FSC-880 CSRF / SQL Injection / Command Execution
Full disclosure is here: https://medium.com/iotsploit/faleemi-fsc-880-multiple-security-vulnerabilities-ed1d132c2cce === Timeline: 25 August 2017: the research was made 29 August 2017: an email was sent to the vendor, but with no answer 25 September 2017: public disclosure 26 September 2017:...
The vulnerability in the embedded microprogramming software of Comcast’s Cisco DPC3939 allows a hacker to gain root access to the Linux network processor system.
The vulnerability in the embedded microprogramming software of Comcast’s Cisco DPC3939 router is related to deficiencies in access control for TELNET sessions. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain root access to the Linux network processor syste...
Gongjin Electronics BE126 WIFI repeater default credentials vulnerability
Gongjin Electronics BE126 WIFI repeater is a wireless internet repeater from Gongjin Electronics China. A security vulnerability exists in Gongjin Electronics BE126 WIFI repeater version 1.0. The vulnerability can be exploited to log in to telnet as root with default credentials...
Multiple vulnerabilities in Gongjin Electronics BE126 WIFI repeater
Gongjin Electronics BE126 WIFI repeater is a wireless internet repeater from Gongjin Electronics China. A security vulnerability exists in Gongjin Electronics BE126 WIFI repeater version 1.0. The vulnerability can be exploited to log in to telnet as root with default credentials and read the enti...
CVE-2017-8771
On BE126 WIFI repeater 1.0 devices, an attacker can log into telnet which is open by default with default credentials as root username:"root" password:"root". The attacker can make a user that is connected to the repeater click on a malicious link that will log into the telnet and will infect the...
Default credentials
On BE126 WIFI repeater 1.0 devices, an attacker can log into telnet which is open by default with default credentials as root username:"root" password:"root" and can: 1. Read the entire file system; 2. Write to the file system; or 3. Execute any code that attacker desires malicious or not...
CVE-2017-8772
On BE126 WIFI repeater 1.0 devices, an attacker can log into telnet which is open by default with default credentials as root username:"root" password:"root" and can: 1. Read the entire file system; 2. Write to the file system; or 3. Execute any code that attacker desires malicious or not...
Default credentials
On BE126 WIFI repeater 1.0 devices, an attacker can log into telnet which is open by default with default credentials as root username:"root" password:"root". The attacker can make a user that is connected to the repeater click on a malicious link that will log into the telnet and will infect the...
CVE-2017-8771
On BE126 WIFI repeater 1.0 devices, an attacker can log into telnet which is open by default with default credentials as root username:"root" password:"root". The attacker can make a user that is connected to the repeater click on a malicious link that will log into the telnet and will infect the...
CVE-2017-8772
CNVD-2017-35048 confirms a vulnerability in Gongjin Electronics BE126 WIFI repeater (version 1.0) allowing telnet access as root with default credentials, enabling reading the entire filesystem, writing to the filesystem, and executing arbitrary code. The NVD entry for CVE-2017-8772 mirrors these...
CVE-2017-8772
On BE126 WIFI repeater 1.0 devices, an attacker can log into telnet which is open by default with default credentials as root username:"root" password:"root" and can: 1. Read the entire file system; 2. Write to the file system; or 3. Execute any code that attacker desires malicious or not...
Moxa AWK-3131A Hard-coded Administrator Credentials Vulnerability(CVE-2016-8717)
Summary An exploitable Use of Hard-coded Credentials vulnerability exists in the Moxa AWK-3131A Wireless Access Point running firmware 1.1. The device operating system contains an undocumented, privileged root account with hard-coded credentials, giving attackers full control of affected devices...
MobaXtrem v10.4 - Remote Code Execution Vulnerability
Document Title: =============== MobaXtrem v10.4 - Remote Code Execution Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2097 Video: https://www.youtube.com/watch?v=FtBGmwFtRrE http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-15376...
MobaXtrem v10.4 - Remote Code Execution Vulnerability
Document Title: =============== MobaXtrem v10.4 - Remote Code Execution Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2097 Video: https://www.youtube.com/watch?v=FtBGmwFtRrE http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-15376...
DEBIAN-CVE-2017-12988
The telnet parser in tcpdump before 4.9.2 has a buffer over-read in print-telnet.c:telnetparse...
Buffer overflow
The telnet parser in tcpdump before 4.9.2 has a buffer over-read in print-telnet.c:telnetparse...