Lucene search
+L

1414 matches found

exploitpack
exploitpack
added 2020/03/30 12:00 a.m.209 views

Multiple DrayTek Products - Pre-authentication Remote Root Code Execution

Multiple DrayTek Products - Pre-authentication Remote Root Code Execution package main / CVE-2020-8515: DrayTek pre-auth remote root RCE Mon Mar 30 2020 - 0xsha.io Affected: DrayTek Vigor2960 1.3.1Beta, Vigor3900 1.4.4Beta, and Vigor300B 1.3.3Beta, 1.4.2.1Beta, and 1.4.4Beta You should upgrade as...

10CVSS0.3AI score0.99993EPSS
SaveExploits7
zdt
zdt
added 2020/03/30 12:00 a.m.302 views

DrayTek Products - Pre-authentication Remote Root Code Execution Exploit

package main / CVE-2020-8515: DrayTek pre-auth remote root RCE Mon Mar 30 2020 - 0xsha.io Affected: DrayTek Vigor2960 1.3.1Beta, Vigor3900 1.4.4Beta, and Vigor300B 1.3.3Beta, 1.4.2.1Beta, and 1.4.4Beta You should upgrade as soon as possible to 1.5.1 firmware or later This issue has been fixed in...

10CVSS0.2AI score0.99993EPSS
SaveExploits7
The Hacker News
The Hacker News
added 2020/03/27 9:22 p.m.140 views

Hackers Exploit Zero-Day Bugs in Draytek Devices to Target Enterprise Networks

Cybersecurity researchers with Qihoo 360's NetLab today unveiled details of two recently spotted zero-day cyberattack campaigns in the wild targeting enterprise-grade networking devices manufactured by Taiwan-based DrayTek. According to the report, at least two separate groups of hackers exploite...

10CVSS1.4AI score0.99993EPSS
SaveExploits7
The Hacker News
The Hacker News
added 2020/03/27 9:22 p.m.8 views

Hackers Exploit Zero-Day Bugs in Draytek Devices to Target Enterprise Networks

Cybersecurity researchers with Qihoo 360's NetLab today unveiled details of two recently spotted zero-day cyberattack campaigns in the wild targeting enterprise-grade networking devices manufactured by Taiwan-based DrayTek. According to the report, at least two separate groups of hackers exploite...

10CVSS7.7AI score0.99993EPSS
SaveExploits7
CNVD
CNVD
added 2020/03/27 12:00 a.m.7 views

Draytek Vigor3900, Vigor2960 and Vigor300B Buffer Overflow Vulnerability (CNVD-2020-29579)

DrayTek Vigor3900 and others are products of DrayTek Taiwan, China.DrayTek Vigor3900 is a broadband router/VPN gateway appliance.Vigor2960 is a load-balancing router and VPN gateway appliance.Vigor300B is a load-balancing router. A buffer overflow vulnerability exists in the /cgi-bin/activate.cgi...

9.8CVSS8.2AI score0.04082EPSS
SaveExploits1References1
CNVD
CNVD
added 2020/03/27 12:00 a.m.12 views

Draytek Vigor3900, Vigor2960 and Vigor300B Buffer Overflow Vulnerability (CNVD-2020-29580)

DrayTek Vigor3900 and others are products of DrayTek Taiwan, China.DrayTek Vigor3900 is a broadband router/VPN gateway appliance.Vigor2960 is a load-balancing router and VPN gateway appliance.Vigor300B is a load-balancing router. A buffer overflow vulnerability exists in the /cgi-bin/activate.cgi...

9.8CVSS8.2AI score0.04082EPSS
SaveExploits1References1
CNVD
CNVD
added 2020/03/27 12:00 a.m.7 views

Draytek Vigor3900, Vigor2960 and Vigor300B Buffer Overflow Vulnerability (CNVD-2020-29582)

DrayTek Vigor3900 and others are products of DrayTek Taiwan, China.DrayTek Vigor3900 is a broadband router/VPN gateway appliance.Vigor2960 is a load-balancing router and VPN gateway appliance.Vigor300B is a load-balancing router. A buffer overflow vulnerability exists in apmd in Draytek Vigor3900...

9.8CVSS8.2AI score0.20881EPSS
SaveExploits1References1
CNVD
CNVD
added 2020/03/27 12:00 a.m.13 views

Draytek Vigor3900, Vigor2960 and Vigor300B Buffer Overflow Vulnerability

DrayTek Vigor3900 and others are products of DrayTek Taiwan, China.DrayTek Vigor3900 is a broadband router/VPN gateway appliance.Vigor2960 is a load-balancing router and VPN gateway appliance.Vigor300B is a load-balancing router. A buffer overflow vulnerability exists in cvmd in Draytek Vigor3900...

9.8CVSS8.2AI score0.20881EPSS
SaveExploits1References1
CNVD
CNVD
added 2020/03/27 12:00 a.m.10 views

Draytek Vigor3900, Vigor2960 and Vigor300B Buffer Overflow Vulnerability (CNVD-2020-29578)

DrayTek Vigor3900 and others are products of DrayTek Taiwan, China.DrayTek Vigor3900 is a broadband router/VPN gateway appliance.Vigor2960 is a load-balancing router and VPN gateway appliance.Vigor300B is a load-balancing router. A buffer overflow vulnerability exists in the /cgi-bin/activate.cgi...

9.8CVSS8.2AI score0.04425EPSS
SaveExploits1References1
CNVD
CNVD
added 2020/03/27 12:00 a.m.11 views

Draytek Vigor3900, Vigor2960 and Vigor300B Operating System Command Injection Vulnerability

DrayTek Vigor3900 and others are products of DrayTek Taiwan, China.DrayTek Vigor3900 is a broadband router/VPN gateway appliance.Vigor2960 is a load-balancing router and VPN gateway appliance.Vigor300B is a load-balancing router. A security vulnerability exists in the /cgi-bin/activate.cgi file i...

10CVSS7.1AI score0.39389EPSS
SaveExploits1References1
OSV
OSV
added 2020/03/26 5:15 p.m.7 views

CVE-2020-10827

A stack-based buffer overflow in apmd on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1 allows remote attackers to achieve code execution via a remote HTTP request...

9.8CVSS8AI score0.20881EPSS
SaveExploits1References2
OSV
OSV
added 2020/03/26 5:15 p.m.10 views

CVE-2020-10823

A stack-based buffer overflow in /cgi-bin/activate.cgi through var parameter on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1 allows remote attackers to achieve code execution via a remote HTTP request issue 1 of 3...

9.8CVSS6.5AI score0.04425EPSS
SaveExploits1References2
OSV
OSV
added 2020/03/26 5:15 p.m.8 views

CVE-2020-10824

A stack-based buffer overflow in /cgi-bin/activate.cgi through ticket parameter on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1 allows remote attackers to achieve code execution via a remote HTTP request issue 2 of 3...

9.8CVSS8AI score0.04082EPSS
SaveExploits1References2
NVD
NVD
added 2020/03/26 5:15 p.m.26 views

CVE-2020-10824

A stack-based buffer overflow in /cgi-bin/activate.cgi through ticket parameter on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1 allows remote attackers to achieve code execution via a remote HTTP request issue 2 of 3...

9.8CVSS9.8AI score0.04082EPSS
SaveExploits1References2
OSV
OSV
added 2020/03/26 5:15 p.m.8 views

CVE-2020-10828

A stack-based buffer overflow in cvmd on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1 allows remote attackers to achieve code execution via a remote HTTP request...

9.8CVSS8AI score0.20881EPSS
SaveExploits1References2
NVD
NVD
added 2020/03/26 5:15 p.m.22 views

CVE-2020-10826

/cgi-bin/activate.cgi on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1 allows remote attackers to achieve command injection via a remote HTTP request in DEBUG mode...

10CVSS9.7AI score0.39389EPSS
SaveExploits1References2
NVD
NVD
added 2020/03/26 5:15 p.m.25 views

CVE-2020-10827

A stack-based buffer overflow in apmd on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1 allows remote attackers to achieve code execution via a remote HTTP request...

9.8CVSS9.8AI score0.20881EPSS
SaveExploits1References2
NVD
NVD
added 2020/03/26 5:15 p.m.30 views

CVE-2020-10828

A stack-based buffer overflow in cvmd on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1 allows remote attackers to achieve code execution via a remote HTTP request...

9.8CVSS9.8AI score0.20881EPSS
SaveExploits1References2
OSV
OSV
added 2020/03/26 5:15 p.m.5 views

CVE-2020-10826

/cgi-bin/activate.cgi on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1 allows remote attackers to achieve command injection via a remote HTTP request in DEBUG mode...

9.8CVSS5.8AI score0.39389EPSS
SaveExploits1References2
NVD
NVD
added 2020/03/26 5:15 p.m.25 views

CVE-2020-10823

A stack-based buffer overflow in /cgi-bin/activate.cgi through var parameter on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1 allows remote attackers to achieve code execution via a remote HTTP request issue 1 of 3...

9.8CVSS9.9AI score0.04425EPSS
SaveExploits1References2
Rows per page
Query Builder