85 matches found
PT-2020-9331
Name of the Vulnerable Software and Affected Versions: NETGEAR Nighthawk X10-R900 versions prior to 1.0.4.24 Description: The issue allows an attacker to execute stored XSS attacks against the device by supplying a malicious X-Forwarded-For header during an incorrect login attempt. The supplied...
PT-2020-9332
Name of the Vulnerable Software and Affected Versions: NETGEAR Nighthawk X10-R900 versions prior to 1.0.4.24 Description: The issue allows an attacker to execute stored XSS attacks against the device by sending a DHCP discover request with a malicious hostname field. When the malicious request is...
PT-2020-9330
Name of the Vulnerable Software and Affected Versions: NETGEAR Nighthawk X10-R9000 versions prior to 1.0.4.26 Description: The issue allows an attacker to execute arbitrary system commands as root by sending a specially-crafted MAC address to the "NETGEAR Genie" SOAP endpoint at...
CVE-2019-12510: Insufficient Verification of Data Authenticity
In NETGEAR Nighthawk X10-R900 prior to 1.0.4.26, an attacker may bypass all authentication checks on the device's "NETGEAR Genie" SOAP API "/soap/serversa" by supplying a malicious X-Forwarded-For header of the device's LAN IP address 192.168.1.1 in every request. As a result, an attacker may...
CVE-2019-12513: Improper Neutralization of Input During Web Page Generation
In NETGEAR Nighthawk X10-R900 prior to 1.0.4.24, by sending a DHCP discover request containing a malicious hostname field, an attacker may execute stored XSS attacks against this device. When the malicious DHCP request is received, the device will generate a log entry containing the malicious...
CVE-2019-12512: Improper Neutralization of Input During Web Page Generation
In NETGEAR Nighthawk X10-R900 prior to 1.0.4.24, an attacker may execute stored XSS attacks against this device by supplying a malicious X-Forwarded-For header while performing an incorrect login attempt. The value supplied by this header will be inserted into administrative logs, found at Advanc...
CVE-2019-12511: Improper Neutralization of Special Elements used in an OS Command
In NETGEAR Nighthawk X10-R9000 prior to 1.0.4.26, an attacker may execute arbitrary system commands as root by sending a specially-crafted MAC address to the "NETGEAR Genie" SOAP endpoint at AdvancedQoS:GetCurrentBandwidthByMAC. Although this requires QoS being enabled, advanced QoS being enabled...
CVE-2019-16650
On Supermicro X10 and X11 products, a client's access privileges may be transferred to a different client that later has the same socket file descriptor number. In opportunistic circumstances, an attacker can simply connect to the virtual media service, and then connect virtual USB devices to the...
CVE-2019-16649
On Supermicro H11, H12, M11, X9, X10, and X11 products, a combination of encryption and authentication problems in the virtual media service allows capture of BMC credentials and data transferred over virtual media devices. Attackers can use captured credentials to connect virtual USB devices to...
CVE-2019-16650
CVE-2019-16650 affects Supermicro X10/X11 BMCs. The vulnerability stems from improper authentication in the virtual media service, allowing an attacker to transfer a client’s access privileges to another client that shares the same socket file descriptor. In practice, a remote attacker could conn...
PT-2019-14739
Name of the Vulnerable Software and Affected Versions Supermicro X10 and X11 products affected versions not specified Description The issue allows a client's access privileges to be transferred to a different client that later has the same socket file descriptor number. An attacker can exploit th...
CVE-2019-16650: Undefined Security Weakness
On Supermicro X10 and X11 products, a client's access privileges may be transferred to a different client that later has the same socket file descriptor number. In opportunistic circumstances, an attacker can simply connect to the virtual media service, and then connect virtual USB devices to the...
CVE-2019-16649: Improper Authentication
On Supermicro H11, H12, M11, X9, X10, and X11 products, a combination of encryption and authentication problems in the virtual media service allows capture of BMC credentials and data transferred over virtual media devices. Attackers can use captured credentials to connect virtual USB devices to...
Supermicro Releases Security Updates
Supermicro has released security updates to address vulnerabilities affecting the Baseboard Management Controller BMC component of Supermicro X9, X10, and X11 platforms. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. The Cybersecurity and...
CVE-2018-13787: Undefined Security Weakness
Certain Supermicro X11S, X10, X9, X8SI, K1SP, C9X299, C7, B1, A2, and A1 products have a misconfigured Descriptor Region, allowing OS programs to modify firmware...
x10-hk.com Open Redirect vulnerability
Vulnerable URL: http://x10-hk.com/store/redirect.php?action=url=openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.12.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 6469426 VIP website status:| No Coordinat...
Allwinner 3.4 Legacy Kernel - Local Privilege Escalation (Metasploit)
Exploit for Android platform in category local exploits This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require "msf/core" class MetasploitModule "Allwinner 3.4 Legacy Kernel Local Privilege Escalation", "Description" ...
Allwinner 3.4 Legacy Kernel Local Privilege Escalation
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require "msf/core" class MetasploitModule "Allwinner 3.4 Legacy Kernel Local Privilege Escalation", "Description" = %q This module attempts to exploit a debug backdoor...
Allwinner 3.4 Legacy Kernel Local Privilege Escalation
Exploit for hardware platform in category remote exploits This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require "msf/core" class MetasploitModule "Allwinner 3.4 Legacy Kernel Local Privilege Escalation", "Description...
x10 mirco blogging 121 - SQL Injection Vulnerability
No description provided by source. =========================================== x10 mirco blogging V121 SQL Injection Vulnerability =========================================== Title: x10 mirco blogging Sql Injection Vendor: www.x10media.com/micro-blog-script Dork: mirco blogging AUTHOR: ITSecTeam...