Memory Corruption Vulnerability in AKWorkshop by Epiphany Technology

Ltd. was founded in 2007, the R & D center is located in Shenzhen Software Park in Shenzhen High-tech Zone, the production base is located in the Shenzhen-Shantou Cooperation Zone Fashion Brand Industrial Park, is a professional engaged in the development of industry 4.0 core product development,...

Shell Backdoor List - PHP / ASP Shell Backdoor List

What is a shell backdoor ? A backdoor shell is a malicious piece of code e.g. PHP, Python, Ruby that can be uploaded to a site to gain access to files stored on that site. Once it is uploaded, the hacker can use it to edit, delete, or download any files on the site, or upload their own. How to...

Critical Bugs Open Food-Safety Systems to Remote Attacks

Two critical vulnerabilities in a food-quality management software package would allow adversaries to completely compromise the system. The issues affect the AK-EM 800 product from SCADA vendor Danfoss. It’s an enterprise management solution for the food retail industry that provides a central...

PT-2019-20350

Уязвимость веб-интерфейса серверного приложение для управления предприятием пищевой промышленности AK-EM 800 связана с использованием жестко закодированных учетных данных пользователей «admin», «administrator», «user» и «guest» с паролем по умолчанию «danfoss». Эксплуатация уязвимости может...

PT-2019-20348

Уязвимость функции downloadLogFiles серверного приложение для управления предприятием пищевой промышленности AK-EM 800 связана с непринятием мер по защите структуры запроса SQL. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнять произвольные SQL-запросы через...

PT-2019-20352

Уязвимость веб-интерфейс управления серверного приложение для управления предприятием пищевой промышленности AK-EM 800 связана с ошибками при генерации паролей. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить несанкционированный доступ к службе отладки...

PT-2019-20349

Уязвимость веб-интерфейс управления серверного приложение для управления предприятием пищевой промышленности AK-EM 800 связана блокировкой учетной записи после пяти последовательных неудачных попыток входа в систему. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно,...

PT-2019-20347

Уязвимость серверного приложение для управления предприятием пищевой промышленности AK-EM 800 связана с неправильными настройками прав доступа по умолчанию. Эксплуатация уязвимости может позволить нарушителю выполнить произвольный код с привилегиями SYSTEM...

PT-2019-20351

Уязвимость серверного приложение для управления предприятием пищевой промышленности AK-EM 800 связана с использованием жестко закодированных учетных данных. Эксплуатация уязвимости может позволить нарушителю повысить свои привилегии...

CVE-2019-2878: Undefined Security Weakness

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: HTTP data path subsystems. The supported version that is affected is 8.8.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromis...

PT-2019-2839

Name of the Vulnerable Software and Affected Versions Sun ZFS Storage Appliance Kit AK version 8.8.3 Description The issue is related to inadequate access control in the HTTP data path subsystems of the Sun ZFS Storage Appliance Kit AK component. This allows an unauthenticated attacker with netwo...

Coship Wireless Router 4.0.0.x5.0.0.x - WiFi Password Reset

Coship Wireless Router 4.0.0.x5.0.0.x - WiFi Password Reset Exploit Title: Coship Wireless Router – Wireless SSID Unauthenticated Password Reset Date: 07.02.2019 Exploit Author: Adithyan AK Vendor Homepage: http://en.coship.com/ Category: Hardware WiFi Router Affected Versions : Coship RT3052 -...

Coship Wireless Router 4.0.0.48 / 4.0.0.40 / 5.0.0.54 / 5.0.0.55 / 10.0.0.49 - Unauthenticated Admin Password Reset

history.pushState'', '', '/'...

CVE-2019-2412: Undefined Security Weakness

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: Object Store. The supported version that is affected is prior to 8.8.2. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Sun...

PT-2019-1222

Name of the Vulnerable Software and Affected Versions Sun ZFS Storage Appliance Kit AK versions prior to 8.8.2 Description The issue is related to inadequate access control in the Object Store component of the Sun ZFS Storage Appliance Kit AK, allowing a highly privileged attacker with logon acce...

CVE-2017-14455

On Insteon Hub 2245-222 devices with firmware version 1012, specially crafted replies received from the PubNub service can cause buffer overflows on a global section overwriting arbitrary data. An attacker should impersonate PubNub and answer an HTTPS GET request to trigger this vulnerability. A...

PT-2018-5653

Name of the Vulnerable Software and Affected Versions: Insteon Hub 2245-222 version 1012 Description: The issue arises from specially crafted replies received from the PubNub service, which can cause buffer overflows on a global section, overwriting arbitrary data. An attacker must impersonate...

CVE-2018-2918

The CVE-2018-2918 entry concerns the Sun ZFS Storage Appliance Kit (AK) in the Oracle Sun Systems Products Suite, specifically its API frameworks subcomponent. Affected are versions prior to 8.7.18. The vulnerability is described as exploitable by an unauthenticated attacker who has network acces...

CVE-2018-2918: Undefined Security Weakness

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: API frameworks. The supported version that is affected is Prior to 8.7.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protoco...

CVE-2018-2937: Undefined Security Weakness

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: User Interface. The supported version that is affected is Prior to 8.7.19. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...