Thousands of Google Chromecast Devices Hijacked to Promote PewDiePie

A group of hackers has hijacked tens of thousands of Google's Chromecast streaming dongles, Google Home smart speakers and smart TVs with built-in Chromecast technology in recent weeks by exploiting a bug that's allegedly been ignored by Google for almost five years. The attackers, who go by...

Hackers Hijack Smart TVs to Promote PewDiePie

UPDATE Hackers are taking advantage of vulnerable Chromecast and Google Home devices to display messages on consumer TVs promoting well-known YouTube star PewDiePie. Click to Expand Once hacked, the TVs display a message saying: “Public Service Announcement PewDiePie, the number 1 subscribed...

CVE-2018-16596

A stack-based buffer overflow in the LAN UPnP service running on UDP port 1900 of Swisscom Internet-Box 2, Standard, and Plus prior to v09.04.00 and Internet-Box light prior to v08.05.02 allows remote code execution. No authentication is required to exploit this vulnerability. Sending a simple UD...

CVE-2018-16596

A stack-based buffer overflow in the LAN UPnP service running on UDP port 1900 of Swisscom Internet-Box 2, Standard, and Plus prior to v09.04.00 and Internet-Box light prior to v08.05.02 allows remote code execution. No authentication is required to exploit this vulnerability. Sending a simple UD...

CVE-2018-16596

CVE-2018-16596 concerns a stack-based buffer overflow in the LAN UPnP service of Swisscom Internet-Box devices (2/Standard/Plus) on UDP port 1900. The flaw allows remote code execution if the attacker is inside the LAN and can send a UDP packet to port 1900; ASLR reduces reliability, making succe...

CVE-2018-16596

A stack-based buffer overflow in the LAN UPnP service running on UDP port 1900 of Swisscom Internet-Box 2, Standard, and Plus prior to v09.04.00 and Internet-Box light prior to v08.05.02 allows remote code execution. No authentication is required to exploit this vulnerability. Sending a simple UD...

PT-2018-13635

Name of the Vulnerable Software and Affected Versions Swisscom Internet-Box 2, Standard, and Plus versions prior to v09.04.00 Swisscom Internet-Box light versions prior to v08.05.02 Description A stack-based buffer overflow in the LAN UPnP service allows remote code execution. No authentication i...

CVE-2018-16596: Out-of-bounds Write

A stack-based buffer overflow in the LAN UPnP service running on UDP port 1900 of Swisscom Internet-Box 2, Standard, and Plus prior to v09.04.00 and Internet-Box light prior to v08.05.02 allows remote code execution. No authentication is required to exploit this vulnerability. Sending a simple UD...

NEC Aterm WF1200CR and Aterm WG1200CR Operating System Command Injection Vulnerability

The NEC Aterm WF1200CR and Aterm WG1200CR are both router products from Nippon Electric NEC. An operating system command injection vulnerability exists in the SOAP interface of the 'UPnP' function in the NEC Aterm WF1200CR with firmware version 1.1.1 and earlier and the Aterm WG1200CR with firmwa...

Multiple vulnerabilities in Aterm WF1200CR and Aterm WG1200CR

Overview Aterm WF1200CR and Aterm WG1200CR provided by NEC Corporation contain multiple vulnerabilities listed below. Information disclosure CWE-200 - CVE-2018-16192 Stored cross-site scripting CWE-79 - CVE-2018-16193 OS command injection CWE-78 - CVE-2018-16194 OS command injection in SOAP...

ZTE Home Gateway ZXHN H168N 2.2 Access Control Bypass

POC: CVE-2018-7357 and CVE-2018-7358 Disclaimer: This POC is for Educational Purposes , I would Not be responsible for any misuse of the information mentioned in this blog post + Unauthenticated + Author: Usman Saeed usman at xc0re.net + Protocol: UPnP + Affected Harware/Software: Model name: ZXH...

ZTE ZXHN H168N - Improper Access Restrictions

ZTE ZXHN H168N - Improper Access Restrictions POC: CVE-2018-7357 and CVE-2018-7358 Disclaimer: This POC is for Educational Purposes , I would Not be responsible for any misuse of the information mentioned in this blog post + Unauthenticated + Author: Usman Saeed usman at xc0re.net + Protocol: UPn...

ZTE Home Gateway ZXHN H168N 2.2 Access Control Bypass Vulnerability

ZTE Home Gateway ZXHN H168N suffers from multiple access bypass and information disclosure vulnerabilities. POC: CVE-2018-7357 and CVE-2018-7358 Disclaimer: This POC is for Educational Purposes , I would Not be responsible for any misuse of the information mentioned in this blog post +...

ZTE ZXHN H168N - Improper Access Restrictions

POC: CVE-2018-7357 and CVE-2018-7358 Disclaimer: This POC is for Educational Purposes , I would Not be responsible for any misuse of the information mentioned in this blog post + Unauthenticated + Author: Usman Saeed usman at xc0re.net + Protocol: UPnP + Affected Harware/Software: Model name: ZXH...

CVE-2018-11946

The CVE-2018-11946 entry concerns CAF-derived Android/Linux builds (Android for MSM, Firefox OS for MSM, QRD Android). The vulnerability is that the UPnP daemon may be running out of the box, enabling port forwarding without authentication. Documented impacts indicate potential exposure due to un...

CVE-2018-11946

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, the UPnP daemon should not be running out of box because it enables port forwarding without authentication...

CVE-2018-11946

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, the UPnP daemon should not be running out of box because it enables port forwarding without authentication...

Authentication flaw

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, the UPnP daemon should not be running out of box because it enables port forwarding without authentication...

CVE-2018-11946: Undefined Security Weakness

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, the UPnP daemon should not be running out of box because it enables port forwarding without authentication...

PT-2018-10917

Name of the Vulnerable Software and Affected Versions Android for MSM affected versions not specified Firefox OS for MSM affected versions not specified QRD Android affected versions not specified Description The issue concerns the UPnP daemon in Android releases, which should not be running by...