Foscam IP Video Camera UPnP Discovery Code Execution Vulnerability(CVE-2017-2879)

Summary An exploitable buffer overflow vulnerability exists in the UPnP implementation used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted UPnP discovery response can cause a buffer overflow resulting in overwriting arbitrary data. An attacker needs ...

Foscam IP Video Camera UPnP Discovery Code Execution Vulnerability

Summary An exploitable buffer overflow vulnerability exists in the UPnP implementation used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted UPnP discovery response can cause a buffer overflow resulting in overwriting arbitrary data. An attacker needs ...

Twenty-two brand router vulnerability Distribution Report-vulnerability warning-the black bar safety net

Now, with cybercrime techniques to constantly renovate our home router has also recently become a cyber-attack new target. In fact, home routers indeed there are a lot of security vulnerabilities. Álvaro Folgado Rueda and many other network security experts recently wrote a report, in-depth...

RealTime RWR-3G-100 Router Cross Site Request Forgery

...

RealTime RWR-3G-100 Router - Cross-Site Request Forgery (Change Admin Password)

RealTime RWR-3G-100 Router - Cross-Site Request Forgery Change Admin Password !-- CHANGE...

RealTime RWR-3G-100 Router - Cross-Site Request Forgery (Change Admin Password)

form action=http:...

Belkin WeMo Device Detection (HTTP)

Detection of Belkin WeMo devices. The script sends a connection request to the server and attempts to detect Belkin WeMo devices and to extract its firmware version. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C ...

Remote Exploitation of the NeoCoolcam IP Cameras and Gateway

Foreword The Internet of Connected Things has become a massive phenomenon during the past few years and will continue to grow at an incredible pace. More than 26 billion smart devices will be on the market by 2020, Gartner estimates. We’re looking at an explosive growth, as IoT opportunities...

Shenzhen, China, a manufacturer of smart cameras exposed vulnerability: at least 17.5 million devices can be remote attack-vulnerability warning-the black bar safety net

Security firms Bitdefender and Checkmarx are released report, security researcher at a plurality of conventional smart cameras found in a remote intrusion vulnerability, relates to the VStarcam, the Loftek, as well as Neo IP camera. One of Neo IP camera is Shenzhen, China manufacturer beautiful...

Operating System (OS) Detection (UPnP)

UPnP protocol based Operating System OS detection. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Command injection

The Comcast firmware on Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST devices allows local users e.g., users who have command access as a consequence of CVE-2017-9479 exploitation to read arbitrary files via UPnP access to /var/IGD/...

CVE-2017-9480

The Comcast firmware on Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST devices allows local users e.g., users who have command access as a consequence of CVE-2017-9479 exploitation to read arbitrary files via UPnP access to /var/IGD/...

CVE-2017-9480

The Comcast firmware on Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST devices allows local users e.g., users who have command access as a consequence of CVE-2017-9479 exploitation to read arbitrary files via UPnP access to /var/IGD/...

CVE-2017-9480

The CVE-2017-9480 entry applies to Cisco DPC3939 firmware (version dpc3939-P20-18-v303r20421746-170221a-CMCST). The vulnerability allows local users to read arbitrary files via UPnP access to /var/IGD/ (in the context of users who gained command access through CVE-2017-9479). Affected component/w...

CVE-2017-9480: Exposure of Sensitive Information to an Unauthorized Actor

The Comcast firmware on Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST devices allows local users e.g., users who have command access as a consequence of CVE-2017-9479 exploitation to read arbitrary files via UPnP access to /var/IGD/...

PT-2017-18952

Name of the Vulnerable Software and Affected Versions Cisco DPC3939 version dpc3939-P20-18-v303r20421746-170221a-CMCST Description The issue allows local users with command access to read arbitrary files via UPnP access to the /var/IGD/ directory. This can be exploited by users who have gained...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF exists in Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb, as demonstrated by a request to ajax.cgi that enables UPnP...

CVE-2017-9930

Cross-Site Request Forgery CSRF exists in Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb, as demonstrated by a request to ajax.cgi that enables UPnP...

CVE-2017-9930

Cross-Site Request Forgery CSRF exists in Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb, as demonstrated by a request to ajax.cgi that enables UPnP...

CVE-2017-9930

CVE-2017-9930 affects Green Packet DX-350 firmware version v2.8.9.5-g1.4.8-atheeb. The CSRF vulnerability is triggered by a request to ajax.cgi that enables UPnP, exposing control of UPnP functionality to an attacker. The linked sources confirm the device and firmware version, and describe the vu...