COMTREND ADSL Router CT-5624 C01_R03 Unauthenticated Remote DNS Changer

!/bin/bash COMTREND ADSL Router CT-5624 C01R03 Unauthenticated Remote DNS Change Exploit Copyright 2016 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Description: The vulnerability exist in the web interface, which is accessible without authentication. On...

CandyTech® CT-04 - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application CandyTech® CT-04 published at the 'play' market has multiple vulnerabilities...

Hollywood Hospital Pays $17,000 Ransom to Hacker for Unlocking Medical Records

Ransomware has seriously turned on to a noxious game of Hackers to get paid effortlessly. Once again the heat was felt by the Los Angeles-based Presbyterian Medical Center when a group of hackers had sealed all its sensitive files and demanded $17,000 USD to regain the access to those compromised...

publicschools.manchesterct.gov XSS vulnerability

Vulnerable URL: http://publicschools.manchesterct.gov/cfnews/forward.cfm?dest=javascript:alert/XSSPOSED/ Details: Description| Value ---|--- Patched:| Yes, at 11.04.2016 Latest check for patch:| 11.04.2016 17:30 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

Arris TG1682G Modem - Persistent Cross-Site Scripting

Unauth Stored CSRF/XSS - Xfinity Modem alert1" /...

Default credentials

GE Healthcare Optima CT680, CT540, CT640, and CT520 has a default password of bigguy for the root user, which has unspecified impact and attack vectors...

CVE-2010-5306

GE Healthcare Optima CT680, CT540, CT640, and CT520 has a default password of bigguy for the root user, which has unspecified impact and attack vectors...

CVE-2010-5306

This CVE concerns GE Healthcare Optima imaging systems (Optima 520/540/640/680) with default or hard-coded credentials, enabling remote authentication bypass. The ICS-CERT advisory (ICSMA-18-037-02) confirms multiple GE products affected; exploitation could allow an attacker to bypass authenticat...

CVE-2014-9406

ARRIS Touchstone TG862G/CT Telephony Gateway with firmware 7.6.59S.CT and earlier has a default password of password for the admin account, which makes it easier for remote attackers to obtain access via a request to homeloggedout.php...

Default credentials

ARRIS Touchstone TG862G/CT Telephony Gateway with firmware 7.6.59S.CT and earlier has a default password of password for the admin account, which makes it easier for remote attackers to obtain access via a request to homeloggedout.php...

CVE-2014-9406

ARRIS Touchstone TG862G/CT Telephony Gateway with firmware 7.6.59S.CT and earlier has a default password of password for the admin account, which makes it easier for remote attackers to obtain access via a request to homeloggedout.php...

CVE-2014-9406

CVE-2014-9406 affects the ARRIS Touchstone TG862G/CT Telephony Gateway (firmware 7.6.59S.CT and earlier). The underlying issue is a default admin password of 'password' , which allows remote attackers to gain access via a request to home_loggedout.php. The entry documents a network-accessible, hi...

CVE-2014-5438

Cross-site scripting XSS vulnerability in ARRIS Touchstone TG862G/CT Telephony Gateway with firmware 7.6.59S.CT and earlier allows remote authenticated users to inject arbitrary web script or HTML via the computername parameter to connecteddevicescomputersedit.php...

CVE-2014-5437

Multiple cross-site request forgery CSRF vulnerabilities in ARRIS Touchstone TG862G/CT Telephony Gateway with firmware 7.6.59S.CT and earlier allow remote attackers to hijack the authentication of administrators for requests that 1 enable remote management via a request to remotemanagement.php, 2...

CVE-2014-5437

CVE-2014-5437 affects Arris Touchstone TG862G/CT Telephony Gateway (firmware 7.6.59S.CT and earlier). Reported CSRF vulnerabilities allow remote attackers to hijack administrator authentication to perform admin actions via requests to remote_management.php (enable remote management), port_forward...

CVE-2014-5438

Cross-site scripting XSS vulnerability in ARRIS Touchstone TG862G/CT Telephony Gateway with firmware 7.6.59S.CT and earlier allows remote authenticated users to inject arbitrary web script or HTML via the computername parameter to connecteddevicescomputersedit.php...

CVE-2014-5437

Multiple cross-site request forgery CSRF vulnerabilities in ARRIS Touchstone TG862G/CT Telephony Gateway with firmware 7.6.59S.CT and earlier allow remote attackers to hijack the authentication of administrators for requests that 1 enable remote management via a request to remotemanagement.php, 2...

CVE-2014-5438

CVE-2014-5438 affects ARRIS Touchstone TG862G/CT Telephony Gateway (firmware 7.6.59S.CT and earlier). The vulnerability is a cross-site scripting (XSS) flaw in connected_devices_computers_edit.php, exploitable via the computer_name parameter. Post-authentication remote vectors are demonstrated wi...

Arris Touchstone TG862G/CT Cross Site Request Forgery

----------- Vendor: ----------- Arris Interactive, LLC http://www.arrisi.com/ ISP: Comcast Xfinity ----------------------------------------- Affected Products/Versions: ----------------------------------------- HW: Arris Touchstone TG862G/CT Xfinity branded SW: Version 7.6.59S.CT Tested...

CVE-2014-4891

The CT iHub aka com.concursive.ctihub application 1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...