Authentication flaw

On Jooan IP Camera A5 2.3.36 devices, an insecure FTP server does not require authentication, which allows remote attackers to read or replace core system files including those used for authentication such as passwd and shadow. This can be abused to take full root level control of the device...

Foscam C1 Indoor HD Camera DDNS Client Buffer Overflow Vulnerability

Foscam C1 Indoor HD Camera is a wireless high-definition IP camera from Foscam, China.DDNS client is one of the dynamic domain name service clients. A buffer overflow vulnerability exists in the DDNS client in the Foscam C1 Indoor HD Camera. When DDNS is turned on, an attacker can exploit this...

D-Link TRENDnet Router Firmware Command Execution Authentication Bypass

The vulnerability of D-Link and TRENDnet’s microprogrammed router software services is related to deficiencies in the authentication process when processing the ping command. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using the pingaddr parameter...

CVE-2016-4922

Certain combinations of Junos OS CLI commands and arguments have been found to be exploitable in a way that can allow unauthorized access to the operating system. This may allow any user with permissions to run these CLI commands the ability to achieve elevated privileges and gain complete contro...

BlueBorne – Bluetooth’s airborne influenza

Armis Labs has discovered a new attack vector that targets any device that has Bluetooth capability. This includes mobile, desktop, and IoT — roughly accounting for 8.2 billion devices. All operating systems are susceptible — Android, iOS, Windows, and Linux. Dubbed BlueBorne, it exposes several...

Bluetooth Network Encapsulation Protocol Privilege Escalation

The vulnerability in the Bluetooth Network Encapsulation Protocol BNEP service of the Android operating system lies in the loss of a whole bit. Exploiting this vulnerability allows an attacker to compromise the integrity of memory and gain full control over the device...

Android PAN Remote Code Execution Vulnerability

The Bluetooth Network Encapsulation Protocol BNEP is used to transfer data from another protocol stack via L2CAP. A remote code execution vulnerability exists in the BNEP service's high-level-Personal Area Network PAN configuration file, which is used to establish an IP network connection between...

The IoT Attack Vector “BlueBorne” Exposes Almost Every Connected Device (BlueBorne)

General Overview Armis Labs revealed a new attack vector endangering major mobile, desktop, and IoT operating systems, including Android, iOS, Windows, and Linux, and the devices using them. The new vector is dubbed “BlueBorne”, as it spread through the air airborne and attacks devices via...

CVE-2017-7649

The network enabled distribution of Kura before 2.1.0 takes control over the device's firewall setup but does not allow IPv6 firewall rules to be configured. Still the Equinox console port 5002 is left open, allowing to log into Kura without any user credentials over unencrypted telnet and...

CVE-2017-14263

Honeywell NVR devices allow remote attackers to create a user account in the admin group by leveraging access to a guest account to obtain a session ID, and then sending that session ID in a userManager.addUser request to the /RPC2 URI. The attacker can login to the device with that new user...

CVE-2017-14263

Summary of CVE-2017-14263 Affected product: Honeywell NVR devices (network video recorder). Vulnerability details: Remote attackers can create a user account in the admin group by abusing access to a guest account to obtain a session ID, then sending that session ID in a userManager.addUser reque...

Monitoring Windows Console Activity (Part 2)

This is the second of two blogs that discuss the implementation of the Windows console architecture from years past, with a primary focus on the current implementation present on modern versions of Windows. Read our first blog, "Monitoring Windows Console Activity Part 1," for more. Capturing the...

eCos Embedded Web Servers Authentication Bypass Vulnerability

eCos Embedded Web Servers is an embedded web server used in routers and other devices. A security vulnerability exists in eCos Embedded Web Servers. An attacker could use this vulnerability to bypass authentication and take control of the device...

WDTV Live SMP 2.03.20 - Remote Password Reset Exploit

Exploit for hardware platform in category web applications WDTV Live SMP Remote Password Reset Vulnerability Date: Jul 14 2017 Author: sw1tch Demo: https://www.sw1tch.net/2017/07/12/wdtv-live-smb-exploit/ Description: A simple remotely exploitable web application vulnerability for the WDTV Live...

Juniper Junos elevation of privilege vulnerability (CNVD-2017-21780)

Juniper Networks Junos OS is a network operating system dedicated to the company's hardware systems. An elevation of privilege vulnerability exists in Juniper Networks Junos, which allows a remotely authorized attacker to exploit the vulnerability to elevate privileges and take full control of th...

Ghost to reproduce: part of the WiMAX routing device to authenticate the existence of the bypass and back door vulnerability-vulnerability warning-the black bar safety net

The SEC's security personnel in some of the WiMAX router on found a vulnerability, this vulnerability allows an attacker to change the router administrator password, and then get on the vulnerabilities of the device control. Worse, if an attacker took control of these contains a vulnerability in...

Weak Password Vulnerability in Android APP of Intelligent Cold Chain Monitoring Cloud Platform

Intelligent cold chain monitoring cloud platform adopts advanced cloud platform + mobile terminal / cell phone APP method to build the whole process of controllable and scalable monitoring cloud platform. There is a weak password in the Android APP system of Intelligent Cold Chain Monitoring Clou...

Over 85% Of Smart TVs Can Be Hacked Remotely Using Broadcasting Signals

The Internet-connected devices are growing at an exponential rate, and so are threats to them. Due to the insecure implementation, a majority of Internet-connected embedded devices, including Smart TVs, Refrigerators, Microwaves, Security Cameras, and printers, are routinely being hacked and used...

Revive Adserver Elevation of Privilege Vulnerability (CNVD-2017-05631)

Revive Adserver is an open source advertising management system from the Revive Adserver team. The system provides ad placement, ad space management, data statistics and other functions. A security vulnerability exists in the www/delivery/asyncspc.php file in Revive Adserver. An attacker can...

Backdoor Vulnerability in Foxconn's Android Phone Firmware

Foxconn is an electronic parts manufacturer that assembles Android smartphones. The main products are tablets, laptops and smartphones. A backdoor vulnerability exists in the firmware of Foxconn's Android phones. Due to a vulnerability in the bootloader code responsible for launching the Android...