Sony IPELA Engine IP Cameras Backdoor Vulnerability (Dec 2016)

Sony IPELA Engine IP Camera devices are prone to a backdoor vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Backdoor Vulnerability in Multiple Sony IPELA ENGINE IP Cameras

SNC-CH115, SNC-CH120 and SNC-CH160 are IP camera products from Sony. A backdoor vulnerability exists in multiple Sony IPELA ENGINE IP Cameras. A remote attacker can exploit the vulnerabilities to remotely manage the camera using Telnet/SSH services to gain root access to the Linux shell, affectin...

Backdoor Vulnerability in Foxconn's Android Phone Firmware

Foxconn is an electronic parts manufacturer that assembles Android smartphones. The main products are tablets, laptops and smartphones. A backdoor vulnerability exists in the firmware of Foxconn's Android phones. Due to a vulnerability in the bootloader code responsible for launching the Android...

Arbitrary File Download and Backdoor Vulnerability in Call Center System of Shenzhen Jishu Communication Co.

Ltd. The kernel of the call center system is the communication-based enterprise internal and external communication and liaison system, and the core part is the switching system PBX Private Branch Exchange. There are arbitrary file downloads and backdoor vulnerabilities in the call center system ...

Hacking Smartphones Running on MediaTek Processors

A dangerous backdoor has been discovered in the MediaTek processor that could be exploited to hack Android devices remotely. MediaTek is a Taiwan-based hardware company that manufacture hardware chips and processor used in the smartphones and tablets. The backdoor was discovered by security...

Backdoor Vulnerability in Juniper Networks ScreenOS (CNVD-2015-08306)

ScreenOS is an operating system developed by Juniper Networks that runs on the NetScreen family of firewall products. An unauthorized code vulnerability exists in Juniper Networks ScreenOS, which could be exploited by an attacker to decrypt VPN traffic on a NetScreen device...

PHP File Manager Backdoor Vulnerability

PHP File Manager consists of a default backdoor user. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

phpFileManager 0.9.8 - CSRF Vulnerability

Exploit for php platform in category web applications Exploit Title: CSRF Remote Backdoor Shell Google Dork: intitle: CSRF Remote Backdoor Shell Date: 2015-07-29 Exploit Author: John Page hyp3rlinx Website: hyp3rlinx.altervista.org Vendor Homepage: phpfm.sourceforge.net Software Link:...

Analysis WordPress a js Backdoor-vulnerability warning-the black bar safety net

We were recently in a lot of WordPress sites to find a for a collection the administrator login credentials for the backdoor, the injured site is to insert a concealment code, when an administrator logs on, the code is triggered, the Administrator's login credentials are encrypted by the GET...

Threat warning: a lot of ubnt devices is Backdoor-vulnerability warning-the black bar safety net

This article elaborated: the discovery of a hacker attack, intrusion analysis, counter hack Server, successfully obtain permission and complete evidence of the whole process. Such an invasion is now also very much, especially for a specific system of orientation, but“blind scan”in the attack...

Built-In Backdoor Found in Popular Chinese Android Smartphones

Chinese smartphone manufacturers have been criticized many times for suspected backdoors in its products, the popular Chinese smartphone brands, Xiaomi and Star N9500 smartphones are the top examples. Now, the China's third-largest mobile and world's sixth-largest phone manufacturer 'Coolpad', ha...

metasploit get the vsftp server root access-vulnerability warning-the black bar safety net

vsftpd version 2 to 2. 3. 4 the presence of a backdoor vulnerability, an attacker may by the vulnerability to gain root privileges. This with backtrack integration of metasploit to do the test,metasploit integrates with a wide variety of vulnerabilities, we can use the server, personal PC and...

Amazing exposure Netcore routers exist back door, anyone can be a remote access-vulnerability warning-the black bar safety net

The Trend Micro researchers said yesterday at the official website shows, the Chinese manufacturers produce a series of routers contain a severe vulnerability, the hacker through the loopholes in monitoring user's Internet traffic. Router in China the Brand Name Netcore in foreign countries the...

Millions of PCs Affected by Mysterious Computrace Backdoor

UPDATE: A previous version of this story incorrectly stated that Anibal Sacco works for Core Security. Sacco left Core Security last year to start Cubica Labs. LAS VEGAS – Nearly every PC has an anti-theft product called Computrace embedded in its BIOS PCI Optional ROM or its unified extensible...

Underground CMS 1.x Search.Cache.Inc.PHP Backdoor Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/26521/info Underground CMS is prone to a backdoor vulnerability. Attackers can exploit this issue to gain unauthorized access to the application. Successful attacks will compromise the affected application and possibly th...

Phorum 3.0.7 auth.php3 Backdoor Vulnerabililty

No description provided by source. source: http://www.securityfocus.com/bid/2274/info Phorum is a freely available, open source, popular WWW Board written by Brian Moon. It is designed to enhance the services offered on a web page, allow users to interact with one another through bulletin board...

Linksys E4200 8083 后门漏洞

No description provided by source...

Routers TCP 32764 Backdoor Vulnerability Secretly Re-Activated Again

At the beginning of this year, we reported about the secret backdoor ‘TCP 32764’ discovered in several routers including, Linksys, Netgear, Cisco and Diamond that allowed an attacker to send commands to the vulnerable routers at TCP port 32764 from a command-line shell without being authenticated...

D-Link Releases Router Firmware Updates for backdoor vulnerability

In October, A Security researcher 'Craig Heffner' discovered a backdoor vulnerability CVE-2013-6027 with certain D-Link routers that allow cyber criminals to alter a router setting without a username or password. Last week, D-Link has released new version of Firmware for various vulnerable router...

D-Link Router Vulnerable to Reflected, Stored XSS

D-Link’s 2760N DSL-2760U-BN routers allegedly contain a number of stored and reflective cross-site scripting XSS vulnerabilities. Researcher Liad Mizrachi said he contacted D-Link to disclose the details of the bugs to them on six separate occasions – twice in August, twice in September, and once...