ZyXEL PK5001Z Modem - Backdoor Account

Exploit Title: ZyXEL PK5001Z Modem - CenturyLink Hardcoded admin and root Telnet Password. Google Dork: n/a Date: 2017-10-31 Exploit Author: Matthew Sheimo Vendor Homepage: https://www.zyxel.com/ Software Link: n/a Version: PK5001Z 2.6.20.19 Tested on: Linux About: ZyXEL PK5001Z Modem is used by...

Cisco Prime Collaboration Provisioning ScriptMgr HEAD request vulnerability

Added: 10/25/2017 CVE: CVE-2017-6622 BID: 98520 Background The Cisco Prime Collaboration product family facilitates installation and maintenance of Cisco Unified Communications and Cisco TelePresence components, as well as the provisioning of users and services. Problem Missing security constrain...

Cisco Prime Collaboration Provisioning ScriptMgr HEAD request vulnerability

Added: 10/25/2017 CVE: CVE-2017-6622 BID: 98520 Background The Cisco Prime Collaboration product family facilitates installation and maintenance of Cisco Unified Communications and Cisco TelePresence components, as well as the provisioning of users and services. Problem Missing security constrain...

Canada’s Spy Agency Releases its Cyber-Defense Tool for Public

By Uzair Amir The Communications Security Establishment CSE, Canada’s main signals intelligence agency, This is a post from HackRead.com Read the original post: Canada’s Spy Agency Releases its Cyber-Defense Tool for Public...

Design/Logic Flaw

Vulnerability in the Oracle Communications WebRTC Session Controller component of Oracle Communications Applications subcomponent: Security Gson. Supported versions that are affected are 7.0, 7.1 and 7.2. Difficult to exploit vulnerability allows low privileged attacker with network access via...

CVE-2017-10153

Vulnerability in the Oracle Communications WebRTC Session Controller component of Oracle Communications Applications subcomponent: Security Gson. Supported versions that are affected are 7.0, 7.1 and 7.2. Difficult to exploit vulnerability allows low privileged attacker with network access via...

Design/Logic Flaw

Vulnerability in the Oracle Communications Policy Management component of Oracle Communications Applications subcomponent: Portal, CMP. Supported versions that are affected are 11.5 and 12.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

CVE-2017-10153

Vulnerability in the Oracle Communications WebRTC Session Controller component of Oracle Communications Applications subcomponent: Security Gson. Supported versions that are affected are 7.0, 7.1 and 7.2. Difficult to exploit vulnerability allows low privileged attacker with network access via...

CVE-2017-10159

Vulnerability in the Oracle Communications Policy Management component of Oracle Communications Applications subcomponent: Portal, CMP. Supported versions that are affected are 11.5 and 12.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

CVE-2017-10153

Vulnerability in the Oracle Communications WebRTC Session Controller component of Oracle Communications Applications subcomponent: Security Gson. Supported versions that are affected are 7.0, 7.1 and 7.2. Difficult to exploit vulnerability allows low privileged attacker with network access via...

CVE-2017-10159

Vulnerability in the Oracle Communications Policy Management component of Oracle Communications Applications subcomponent: Portal, CMP. Supported versions that are affected are 11.5 and 12.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

CVE-2017-10159

Vulnerability in the Oracle Communications Policy Management component of Oracle Communications Applications subcomponent: Portal, CMP. Supported versions that are affected are 11.5 and 12.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

CVE-2017-10153

The CVE-2017-10153 issue affects Oracle Communications WebRTC Session Controller (Oracle Communications Applications), specifically the Security (Gson) subcomponent. Affected versions are 7.0, 7.1, and 7.2. The vulnerability allows a low-privilege attacker with network access via multiple protoco...

CVE-2017-10159

CVE-2017-10159 affects the Oracle Communications Policy Management component of Oracle Communications Applications (subcomponent: Portal, CMP). Affected versions are 11.5 and 12.x . The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Policy Management, ...

CVE-2017-10153

Vulnerability in the Oracle Communications WebRTC Session Controller component of Oracle Communications Applications subcomponent: Security Gson. Supported versions that are affected are 7.0, 7.1 and 7.2. Difficult to exploit vulnerability allows low privileged attacker with network access via...

PT-2017-11151

Name of the Vulnerable Software and Affected Versions Oracle Communications Policy Management versions 11.5 and 12.x Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Communications Policy Management. Successful attacks require human...

CVE-2017-10159: Undefined Security Weakness

Vulnerability in the Oracle Communications Policy Management component of Oracle Communications Applications subcomponent: Portal, CMP. Supported versions that are affected are 11.5 and 12.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

PT-2017-11145

Name of the Vulnerable Software and Affected Versions Oracle Communications WebRTC Session Controller versions 7.0 through 7.2 Description The issue allows a low-privileged attacker with network access via multiple protocols to compromise the Oracle Communications WebRTC Session Controller...

CVE-2017-10153: Undefined Security Weakness

Vulnerability in the Oracle Communications WebRTC Session Controller component of Oracle Communications Applications subcomponent: Security Gson. Supported versions that are affected are 7.0, 7.1 and 7.2. Difficult to exploit vulnerability allows low privileged attacker with network access via...

Oracle Communications WebRTC Session Controller Denial of Service Vulnerability

Oracle Communications Applications is a suite of applications for rapidly delivering and monetizing digital life communications from Oracle Corporation.Oracle Communications WebRTC Session Controller is one of the session controller components. A security vulnerability exists in the Security Gson...