Contec Smart Home 4.15 - Unauthorized Password Reset

Contec Smart Home 4.15 - Unauthorized Password Reset Title : Contec smart home 4.15 Unauthorized Password Reset Shodan Dork : "content/smarthome.php" Vendor Homepage : http://contec.co.il Tested on : Google Chrome Tested version : 4.15 Date : 2018-03-14 Author : Z3ro0ne Contact :...

CVE-2018-0141

A vulnerability in Cisco Prime Collaboration Provisioning PCP Software 11.6 could allow an unauthenticated, local attacker to log in to the underlying Linux operating system. The vulnerability is due to a hard-coded account password on the system. An attacker could exploit this vulnerability by...

Huawei Mate 9 Pro Forensic Bypass Vulnerability

Huawei Mate 9 Pro is a smartphone from Huawei Huawei. A forensic bypass vulnerability in the voice wake-up module in the Huawei Mate 9 Pro phone could allow an attacker to trick a user into installing a malicious application, bypass authentication, and take control of the phone to send a short...

K7 Antivirus Premium elevation of privilege vulnerability (CNVD-2018-02143)

K7 Antivirus Premium is a suite of anti-virus software from K7 Computing India. A security vulnerability exists in versions prior to K7 Antivirus Premium 15.1.0.53. A local attacker can exploit the vulnerability to gain privileges by sending a specific IOCTL...

Cambium Networks ePMP Cross-Site Scripting Vulnerability (CNVD-2018-01043)

Cambium Networks ePMP is a suite of wireless network access platforms from Cambium Networks, USA. The platform provides video surveillance, Wi-Fi hotspot and sensor connectivity. A cross-site scripting vulnerability exists in Cambium Networks ePMP using firmware version 3.5 and earlier, which ste...

Cambium Networks cnPilot Cross-Site Request Forgery Vulnerability

Cambium Networks cnPilot is a cloud-enabled managed single-band router product from Cambium Networks, USA. A security vulnerability exists in Cambium Networks cnPilot using firmware version 4.3.2-R4 and earlier, which stems from a lack of cross-site request forgery controls. An attacker could...

The vulnerability of the ping.cgi script in NETGEAR DGN2200v1 integrated router software allows a hacker to execute arbitrary commands and gain full control over the device.

The vulnerability of the ping.cgi script in NETGEAR DGN2200v1 integrated routing software exists because measures to neutralize the special elements used in the operating system command have not been taken. Exploiting this vulnerability allows a malicious actor to execute arbitrary operating syst...

TG Soft Vir.IT eXplorer Lite Local Denial of Service Vulnerability (CNVD-2017-37075)

TG Soft VirIT eXplorer is a suite of antivirus software from the Italian company TG Soft. A local denial of service vulnerability exists in TG Soft Vir.IT eXplorer Lite. A local attacker can exploit this vulnerability to cause a denial of service blue screen of death or other impact via a...

CVE-2017-17475

TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service BSOD or possibly have unspecified other impact via a \.\Viragtlt DeviceIoControl request of 0x82736068...

CVE-2017-17468

TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to gain privileges or cause a denial of service Arbitrary Write via a \.\Viragtlt DeviceIoControl request of 0x82730020, a different vulnerability than CVE-2017-17050...

CVE-2017-17471

TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service BSOD or possibly have unspecified other impact via a \.\Viragtlt DeviceIoControl request of 0x82732140...

CVE-2017-17470

TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service BSOD or possibly have unspecified other impact via a \.\Viragtlt DeviceIoControl request of 0x82730054...

CVE-2017-17469

TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service BSOD or possibly have unspecified other impact via a \.\Viragtlt DeviceIoControl request of 0x82730008, a different vulnerability than CVE-2017-16948...

IKARUS anti.virus null pointer dereference vulnerability

IKARUS anti.virus is a set of antivirus products from IKARUS Security Software Austria. ntguardx64.sys is one of the self-protection system. IKARUS anti.virus 2.16.15 version of the ntguardx64.sys 0.18780.0.0 version has a security vulnerability. An attacker can exploit this vulnerability to caus...

CVE-2017-17114

ntguard.sys and ntguardx64.sys 0.18780.0.0 in IKARUS anti.virus 2.16.15 have a Memory Corruption vulnerability via a 0x83000084 DeviceIoControl request...

The vulnerability of the Junos operating system, related to the lack of measures for cleaning input data, allows a intruder to gain unauthorized access to the device.

The vulnerability of the Junos operating system is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability can allow a local attacker to increase their privileges and gain full control over the device, by using specially crafted combinations of CLI commands and...

Authentication flaw

On Jooan IP Camera A5 2.3.36 devices, an insecure FTP server does not require authentication, which allows remote attackers to read or replace core system files including those used for authentication such as passwd and shadow. This can be abused to take full root level control of the device...

Foscam C1 Indoor HD Camera DDNS Client Buffer Overflow Vulnerability

Foscam C1 Indoor HD Camera is a wireless high-definition IP camera from Foscam, China.DDNS client is one of the dynamic domain name service clients. A buffer overflow vulnerability exists in the DDNS client in the Foscam C1 Indoor HD Camera. When DDNS is turned on, an attacker can exploit this...

The vulnerability of D-Link and TRENDnet’s microprogrammed router services allows attackers to execute arbitrary commands or bypass authentication mechanisms, thereby gaining full control over the device.

The vulnerability of D-Link and TRENDnet’s microprogrammed router software services is related to deficiencies in the authentication process when processing the ping command. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using the pingaddr parameter...

CVE-2016-4922

Certain combinations of Junos OS CLI commands and arguments have been found to be exploitable in a way that can allow unauthorized access to the operating system. This may allow any user with permissions to run these CLI commands the ability to achieve elevated privileges and gain complete contro...