Design/Logic Flaw

A Local File Inclusion LFI vulnerability in the Sonus SBC 1000 / SBC 2000 / SBC SWe Lite web interface allows for the downloading of arbitrary files via an unspecified vector. It affects the 1000 and 2000 devices 6.0.x up to Build 446, 6.1.x up to Build 492, and 7.0.x up to Build 485. It affects...

DLINK DCS-5020L wireless cloud camera remote code execution vulnerability analysis-vulnerability warning-the black bar safety net

This article is mainly to demonstrate, how to find IOT device vulnerability. Look for the following commands of the injection process can be divided into 3 steps, somewhat similar to the 100 point CTF challenge: download the binary file, run the string, the tracking system calls to the origin of...

XMSWR-W18 of Shanghai Simmer Communication Technology Co., Ltd. suffers from an override access vulnerability

XMSWR-W18M is an intelligent wireless router from Shanghai Ximo Communication Technology Co. Ltd. XMSWR-W18 suffers from an override access vulnerability that allows an attacker to reset arbitrary devices without authentication...

CVE-2017-17137

Huawei PEM module vulnerability CVE-2017-17137 is an Out-of-Bounds memory access issue caused by insufficient verification. An authenticated local attacker can trigger processing crashes by presenting a malicious certificate, resulting in denial of service. Affected products include PEM module ac...

OnePlus Confirms Credit Card Breach Impacted Up to 40,000 Customers

OnePlus has confirmed that up to 40,000 customers have been affected by a credit card breach, in the latest embarrassing misstep for the Chinese handset maker. The news comes several days after OnePlus shut down credit card processing following complaints from customers about fraudulent charges...

TP-Link WVR, WAR and ER Device Arbitrary Command Execution Vulnerability (CNVD-2018-02028)

TP-Link WVR, WAR and ER devices are all different series of router products from China P&L TP-LINK. A security vulnerability exists in the TP-Link WVR, WAR, and ER devices. A remote attacker can exploit the vulnerability by injecting commands into the maxconn variable of the sessionlimits.lua fil...

Design/Logic Flaw

A vulnerability has been identified in RUGGEDCOM ROS for RSL910 devices All versions ROS V5.0.1, RUGGEDCOM ROS for all other devices All versions ROS V4.3.4, SCALANCE XB-200/XC-200/XP-200/XR300-WG All versions between V3.0 including and V3.0.2 excluding, SCALANCE XR-500/XM-400 All versions betwee...

The vulnerability of Brother printer’s microprogramming software, related to deficiencies in authentication procedures, allows attackers to gain access to the devices.

The vulnerability of Brother’s microprogramming software is related to deficiencies in the authentication process. After a failed attempt to access the HTTP response, the valid AuthCookie is retained. Exploiting this vulnerability could allow a malicious actor to gain access to the device remotel...

CVE-2017-8197

FusionSphere V100R006C00SPC102NFV has a command injection vulnerability. An authenticated, remote attacker could craft packets with malicious strings and send them to a target device. Successful exploit could allow the attacker to launch a command injection attack and execute system commands...

CVE-2017-16537

The imonprobe function in drivers/media/rc/imon.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service NULL pointer dereference and system crash or possibly have unspecified other impact via a crafted USB device...

CVE-2017-16530

The uas driver in the Linux kernel before 4.13.6 allows local users to cause a denial of service out-of-bounds read and system crash or possibly have unspecified other impact via a crafted USB device, related to drivers/usb/storage/uas-detect.h and drivers/usb/storage/uas.c...

IDEMIA MorphoSmart 1300 Series device certificate import module privilege acquisition vulnerability

IDEMIA formerly Morpho MorphoSmart 1300 Series a.k.a. MSO 1300 Series devices are fingerprint identification devices from IDEMIA formerly Morpho, France. certificate import component is one of the certificate import components. The certificate import component is one of the certificate import...

First only WiFi worms of the birth: a complete parsing Broadcom WiFi chip Broadpwn vulnerability to and including EXP / to POC-the exploit-warning-the black bar safety net

The past few months, Android and iOS, billions of devices are there have been terrible WiFi remote code execution vulnerability BroadPwn it. Google 7 early release a repair patch, and Apple is in the 7 on 19, released update. While the opening was in full swing the Black Hat 2017 on security...

ZyXEL PK5001Z Device ROOT Access Vulnerability

The ZyXEL PK5001Z devices is a wireless switch device from China's Hopkins Technology. A security vulnerability exists in the ZyXEL PK5001Z devices, which allows remote attackers to exploit the vulnerability to submit a special request and gain root access...

CVE-2017-2843

In the web management interface in Foscam C1 Indoor HD Camera running application firmware 2.52.2.37, a specially crafted HTTP request can allow for a user to inject arbitrary data in the "msmtprc" configuration file resulting in command execution. An attacker can simply send an HTTP request to t...

CVE-2017-2828

An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can allow for a user to inject arbitrary shell characters during account creation resulting in...

SNMP Protocol Community String Authentication Privilege Bypass Vulnerability in Some Vendor Devices

SNMP is a network management standard based on the TCP/IP protocol family and is a standard protocol for managing network nodes such as servers, workstations, routers, switches, etc. in an IP network. SNMP protocol community strings of some vendors' devices have authentication privilege bypass...

Multiple Brother device authentication bypass vulnerabilities

Brother MFC-J6973CDW and others are printer products from Brother Industries Japan. A security vulnerability exists in multiple Brother devices. An attacker could exploit the vulnerability to bypass Web authentication...

CVE-2016-10314

Jensen of Scandinavia AS Air:Link 3G AL3G version 2.23m Rev. 3, Air:Link 5000AC AL5000AC version 1.13, and Air:Link 59300 AL59300 version 1.04 Rev. 4 devices allow remote attackers to read passwords via a direct request to the x.asp page...

Authorization

With OxygenOS before 4.0.3, when a charger is connected to a powered-off OnePlus 3 or 3T device, the platform starts with adbd enabled. Therefore, a malicious charger or a physical attacker can open up, without authorization, an ADB session with the device, in order to further exploit other...