PT-2018-14781

Name of the Vulnerable Software and Affected Versions Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128 Description An issue was discovered where the CGIProxy.fcgi?cmd=setTelnetSwitch feature is authorized for hidden factory credentials. This affects the...

PT-2018-14782

Name of the Vulnerable Software and Affected Versions Foscam C2 versions System Firmware 1.11.1.8 and Application Firmware 2.72.1.32 Opticam i5 versions System Firmware 1.5.2.11 and Application Firmware 2.21.1.128 Description An issue was discovered related to the CGIProxy.fcgi feature,...

CVE-2018-19069: Use of Hard-coded Credentials

An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The CGIProxy.fcgi?cmd=setTelnetSwitch feature is authorized for the root user with a password of...

CVE-2018-9359

In processl2capcmd of l2cmain.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0...

PT-2018-19000

Name of the Vulnerable Software and Affected Versions Android versions 6.0 through 8.1 Description The issue is related to a possible out of bounds read in the process l2cap cmd function due to a missing bounds check. This could lead to remote information disclosure without requiring additional...

PT-2018-18998

Name of the Vulnerable Software and Affected Versions Android versions 6.0 through 8.1 Description The issue is related to a possible out of bounds read in the process l2cap cmd function due to a missing bounds check. This could lead to remote information disclosure without requiring additional...

Morris Worm - sendmail Debug Mode Shell Escape (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'expect' class MetasploitModule 'Morris Worm sendmail Debug Mode Shell Escape', 'Description' = %q This module exploits sendmail's well-known historical debug mo...

PT-2018-18999

Name of the Vulnerable Software and Affected Versions Android versions 6.0 through 8.1 Description The issue is related to a possible out of bounds read in the process l2cap cmd function due to a missing bounds check. This could lead to remote information disclosure without requiring additional...

Radan-http service for Linux remote code execute Exploit

Injection into a web application Hack all servers have webapp open port 8088 Ok so the web application attack has 2 steps. 1: Create a new application done with post request to /newappication, 2: Now once we done that we can execute commands inside of it. Usage Info 1 You need to scan ip list wit...

PT-2021-7362

Name of the Vulnerable Software and Affected Versions QEMU affected versions not specified Description A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. The issue occurs while handling a "PVRDMA CMD CREATE MR" command due to improper memory remapping mremap. This fl...

PT-2018-6263 · Insteon · Insteon Hub

Name of the Vulnerable Software and Affected Versions: Insteon Hub 2245-222 version 1012 Description: The issue arises from specially crafted commands sent through the PubNub service, which can cause a stack-based buffer overflow, overwriting arbitrary data. This is triggered by sending an...

Design/Logic Flaw

phpLDAPadmin 1.2.2 allows LDAP injection via a crafted serverid parameter in a cmd.php?cmd=loginform request, or a crafted username and password in the login panel...

Prime95 29.4b8 Stack Buffer Overflow

Exploit Title: Prime95 Local Buffer Overflow SEH Date: 13-4-2018 Exploit Author: crashmanucoot Contact: twitter.com/crashmanucoot Vendor Homepage: https://www.mersenne.org/ Software Link: https://www.mersenne.org/download/download Version: 29.4b8 Tested on: Windows 10 Pro x64 SPANISH Windows 7 Ho...

Prime95 29.4b8 - Stack Buffer Overflow (SEH)

Prime95 29.4b8 - Stack Buffer Overflow SEH Exploit Title: Prime95 Local Buffer Overflow SEH Date: 13-4-2018 Exploit Author: crashmanucoot Contact: twitter.com/crashmanucoot Vendor Homepage: https://www.mersenne.org/ Software Link: https://www.mersenne.org/download/download Version: 29.4b8 Tested...

Vayne-RaT - An Advanced C# .NET RAT

Vayne-RaT is Free and Open SourceRemote Administration Tool Coded In C. Features: Multi-Threaded CMD Shell File Manager Download & Upload Remote Desktop Password Recovery Assembly Builder Scan-Time Crypter FUD Requirements Stub Coded In .NET 2.0 Mono.Cecil.dll Dissembler Lib.dll BunifuUIv1.52.dll...

PT-2018-4465

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description The issue occurs in the TZ PR CMD CONTENT SET PROP function when a small size parameter is passed, resulting in an integer underflow. This affects Qualcomm Snapdragon...

PT-2018-4522

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description The issue is related to the processing of TZ application commands in the tz app cmd handler function, which could lead to potential content disclosure of secure memory. This...

PT-2018-4325

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description The issue arises from the lack of validation of the feature name length variable in the drmprov cmd verify key function. Specifically, there is a check for feature name len ...

PT-2018-4469

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description The issue occurs when the TZ WV CMD DECRYPT VIDEO function in the Widevine App is called with a size that is too large, potentially leading to an integer overflow. This...

PT-2018-4491

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description The issue arises in the widevine dash cmd handler function where response buffers are passed to widevine commands without proper validation. These buffers contain values suc...