4489 matches found
PT-2017-13657
Name of the Vulnerable Software and Affected Versions logstash-bin versions prior to 5.5.3 logstash-bin versions 5.6.x prior to 5.6.1 Description The issue allows local users to gain privileges by creating a hard link in a user-writable directory tree. This is due to the init script having "chown...
CVE-2017-14730: Incorrect Permission Assignment for Critical Resource
The init script in the Gentoo app-admin/logstash-bin package before 5.5.3 and 5.6.x before 5.6.1 has "chown -R" calls for user-writable directory trees, which allows local users to gain privileges by leveraging access to a $LSUSER account for creation of a hard link...
D-Link DIR8xx Router Firmware Upload Vulnerability
Exploit for hardware platform in category web applications !/bin/bash If you have access to an ethernet port you can upload custom firmware to a device because system recovery service is started and available for a few seconds after restart. E-DB Note:...
CVE-2017-11350
Cross-Site Request Forgery CSRF exists in cgi-bin/ConfigSet on Axesstel MU553S MU55XS-V1.14 devices...
PT-2017-11951
Name of the Vulnerable Software and Affected Versions Axesstel MU553S MU55XS-V1.14 Description A Cross-Site Request Forgery CSRF issue exists in the cgi-bin/ConfigSet endpoint. This allows for potential unauthorized actions on affected devices. Recommendations For Axesstel MU553S MU55XS-V1.14,...
CVE-2017-11350: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF exists in cgi-bin/ConfigSet on Axesstel MU553S MU55XS-V1.14 devices...
PT-2017-13331
Name of the Vulnerable Software and Affected Versions Samsung NVR devices affected versions not specified Description The issue allows remote attackers to read the MD5 password hash of the 'admin' account by sending certain szUserName JSON data to the "cgi-bin/main-cgi" API endpoint. This hash ca...
Linux/ARM (Raspberry Pi) - Bind TCP Shell (4444/TCP) Shellcode (192 bytes)
/ Andrea Sindoni - @invictus1306 This schellcode is part of my episodes: - ARM exploitation for IoT - https://quequero.org/2017/07/arm-exploitation-iot-episode-2/ Enviroment: Raspberry pi 3 Default settings for port:4444 @.syntax unified .global start start: mov r1, 0x5C @ r1=0x5c mov r5, 0x11 @...
CVE-2017-14262: Inadequate Encryption Strength
On Samsung NVR devices, remote attackers can read the MD5 password hash of the 'admin' account via certain szUserName JSON data to cgi-bin/main-cgi, and login to the device with that hash in the szUserPasswd parameter...
PT-2017-13039
Name of the Vulnerable Software and Affected Versions T&W WIFI Repeater BE126 version not specified Description The issue allows remote authenticated users to execute arbitrary code via shell metacharacters in the user parameter to "cgi-bin/webupg". Recommendations For T&W WIFI Repeater BE126,...
PT-2017-13090
Name of the Vulnerable Software and Affected Versions Lexmark Scan To Network SNF versions 3.2.9 and earlier Description The issue allows remote attackers to obtain sensitive information. This is due to network configuration credentials being stored in plaintext and transmitted in requests...
CVE-2017-13713: Improper Neutralization of Special Elements used in an OS Command
T&W WIFI Repeater BE126 allows remote authenticated users to execute arbitrary code via shell metacharacters in the user parameter to cgi-bin/webupg...
PT-2017-13220
Name of the Vulnerable Software and Affected Versions OpenJPEG version 2.2.0 Description The issue is related to an invalid write access in the bin/jp2/convert.c file, which triggers a crash in the tgatoimage function. This may lead to a denial of service or possibly other unspecified impacts...
CVE-2017-14040: Out-of-bounds Write
An invalid write access was discovered in bin/jp2/convert.c in OpenJPEG 2.2.0, triggering a crash in the tgatoimage function. The vulnerability may lead to remote denial of service or possibly unspecified other impact...
Linux x86 - /bin/sh Shellcode (24 bytes)
/ ;Title: Linux/x86 - /bin/sh Shellcode ;Author: Touhid M.Shaikh ;Contact: https://github.com/touhidshaikh ;Category: Shellcode ;Architecture: Linux x86 ;Description: This shellcode baased on stack method to Execute "/bin//sh". Length of shellcode is 24 bytes. ;Tested on : 3.2.0-23-generic-pae...
Linux x86 - /bin/sh Shellcode (24 bytes)
Linux x86 - /bin/sh Shellcode 24 bytes. Shellcode exploit for Linx86 platform / ;Title: Linux/x86 - /bin/sh Shellcode ;Author: Touhid M.Shaikh ;Contact: https://github.com/touhidshaikh ;Category: Shellcode ;Architecture: Linux x86 ;Description: This shellcode baased on stack method to Execute...
GPS Component DoS
The vulnerability of the Android operating system’s GPS component is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause a service failure a suspension of GPS signal detection, by using incorrect xtra.bin or xtra2.bin files on the Qualcomm...
CVE-2017-7315
An issue was discovered on Humax Digital HG100R 2.0.6 devices. To download the backup file it's not necessary to use credentials, and the router credentials are stored in plaintext inside the backup, aka GatewaySettings.bin...
CVE-2017-7317
An issue was discovered on Humax Digital HG100 2.0.6 devices. The attacker can find the root credentials in the backup file, aka GatewaySettings.bin...
CVE-2017-9833: Improper Limitation of a Pathname to a Restricted Directory
/cgi-bin/wapopen in Boa 0.94.14rc21 allows the injection of "../.." using the FILECAMERA variable sent by GET to read files with root privileges. NOTE: multiple third parties report that this is a system-integrator issue e.g., a vulnerability on one type of camera because Boa does not include any...