Buffer overflow vulnerability in SIP backup module of multiple Huawei products (CNVD-2017-37974)

Huawei DP300 and so on are products of Huawei, China.Huawei DP300 is a video conferencing end device.IPS Module is an intrusion prevention module.SIP backup is one of the SIP backup modules. A buffer overflow vulnerability exists in the SIP backup module in several Huawei products due to the...

Buffer overflow vulnerability in SIP backup module of multiple Huawei products (CNVD-2017-37975)

Huawei DP300 and so on are products of Huawei, China.Huawei DP300 is a video conferencing end device.IPS Module is an intrusion prevention module.SIP backup is one of the SIP backup modules. A buffer overflow vulnerability exists in the SIP backup module in several Huawei products due to the...

Buffer overflow vulnerability in SIP backup module of multiple Huawei products (CNVD-2017-37976)

Huawei DP300 and so on are products of Huawei, China.Huawei DP300 is a video conferencing end device.IPS Module is an intrusion prevention module.SIP backup is one of the SIP backup modules. A buffer overflow vulnerability exists in the SIP backup module in several Huawei products due to the...

Buffer overflow vulnerability in SIP backup module of multiple Huawei products (CNVD-2017-37973)

Huawei DP300 and so on are products of Huawei, China.Huawei DP300 is a video conferencing end device.IPS Module is an intrusion prevention module.SIP backup is one of the SIP backup modules. A buffer overflow vulnerability exists in the SIP backup module in multiple Huawei products due to the...

Arbitrary File Download Vulnerability in Filepath Parameter of Mixcall Attendant Management System

Mixcall seat management system is based on B/S architecture, the management personnel can directly log into the Mixcall seat management center through the computer, and view the detailed situation related to the seat personnel's voice services. An arbitrary file download vulnerability exists in t...

The vulnerability of the iOS operating system, allowing a hacker to read arbitrary files

The vulnerability of the Mobile Backup module in the Photos app of the iOS operating system is related to deficiencies in path name restrictions for the catalog. Exploiting this vulnerability allows a malicious actor to read arbitrary files through a specially crafted path name...

Barracuda Backup "remote_host"脚本注入漏洞

Barracuda Networks Backup是一款网络备份解决方案。 由于通过"remotehost" POST参数传递到Extern Backup模块的输入在被使用前没有正确过滤，攻击者可以利用漏洞在受影响站点上下文的用户浏览器会话中注入并执行任意HTML和脚本代码。 0 Barracuda Backup Barracuda Backup 固件版本4.3.06或5.1.00已修复此漏洞，建议用户下载使用： http://www.barracudanetworks.com/ns/products/backupoverview.php...

FreePBX Backup Module page.backup.php 'dir' Parameter RCE

The version of FreePBX hosted on the remote web server is affected by a remote command injection vulnerability due to a weakness in the 'strpos' function when sanitizing user-supplied input to the 'dir' parameter in 'page.backup.php'. A remote, unauthenticated attacker can exploit this issue to...

FreePBX 2.9 Backup Module Remote Command Execution Vulnerability

As mentioned on subject i would like to submit the vulnerability "FreePBX 2.9 Backup Module Remote Command Execution" Title: FreePBX 2.9 Backup Module Remote Command Execution Vulnerability Author: Ahmed Aboul-Ela Contact: Ahmed.Aboul3laatgmaildotcom Vendor: http://www.freepbx.org Software Link:...

FreePBX 2.9 Remote Command Execution

Title: FreePBX 2.9 Backup Module Remote Command Execution Vulnerability Author: Ahmed Aboul-Ela Contact: Ahmed.Aboul3laatgmaildotcom Vendor: http://www.freepbx.org Software Link: http://mirror.freepbx.org/freepbx-2.9.0.tar.gz Version: 2.9 and prior versions should be affected too Tested on: Linux...

Syneto EMail Protection 1.5.1 - Code Execution Vulnerability

Document Title: =============== Syneto EMail Protection 1.5.1 - Code Execution Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=548 Syneto ID: 2601 Release Date: ============= 2012-06-23 Vulnerability Laboratory ID VL-ID:...

Lanai Core 0.6 Remote File Disclosure / Info Disclosure Vulns

No description provided by source. Lanai Core v 0.6 Remote File Disclosure / IG AUTHOR : Sina Yazdanmehr R3d.W0rm Discovered by : Sina Yazdanmehr R3d.W0rm Our Site : http://IrCrash.com My Official WebSite : http://R3dW0rm.ir IRCRASH Team Members : Khashayar Fereidani - R3d.w0rm Sina Yazdanmehr...

cPanel Remote Backup Module Information Disclosure

Binary data 2392.prm...