How to Run Linux Kernel on Canon DSLRs Cameras

Last month, I Got a Canon's amazing and powerful video-capable DSLR Camera and was wondering if I could play a hack on it. Yes, Just like last time I installed and run Linux on my PlayStation 3 gaming console and the popular game console, the Nintendo Wii. What If I could port Linux Kernel to my...

Security Advisory 0009

Security Advisory 0009 PDF Date: January 28th 2015 Revision| Date| Changes ---|---|--- 1.0 | January 28th 2015 | Initial release Arista 7000 Series Products and Arista EOS are not remotely exploitable by CVE-2015-0235 On Jan 27th, information was released about a security advisory for the glibc...

Security Advisory 0008

Security Advisory 0008 PDF Date: January 9th 2015 Revision| Date| Changes ---|---|--- 1.0 | January 9th 2015 | Initial release Arista 7000 Series Products and Arista EOS are not vulnerable to NTP CVE-2014-9293, CVE-2014-9294, CVE-2014-9295, and CVE-2014-9296. In December 2014, the Network Time...

Security Advisory 0007

Security Advisory 0007 PDF Date: October 20th 2014 Revision | Date | Changes ---|---|--- 1.0 | October 20th 2014 | Initial release SSLv3 is vulnerable to potential man in the middle attacks CVE-2014-3566 On October 14th, Arista became aware of a vulnerability in the Secure Sockets Layer version 3...

Security Advisory 0006

Security Advisory 0006 PDF Date: September 29th 2014 Revision | Date | Changes ---|---|--- 1.0 | September 29th 2014 | Initial release 1.1 | September 30th 2014 | Additional details on maintenance releases 1.2 | October 29th 2014 | Additional details on fixed releases 1.3 | November 4th 2014 |...

GNU Bash CVE-2014-6271 Remote Code Execution Vulnerability

Description GNU Bash is prone to remote code execution vulnerability. An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition. Technologies Affected Advantech EKI-1320 1.98...

Security Advisory 0005

Security Advisory 0005 PDF Date: 6/9/2014 Revision | Date | Changes ---|---|--- 1.0 | June 9th 2014 | Initial release 1.1 | June 12th 2014 | Addition of patch installation details 1.2 | July 6th 2015 | Updated patch file Open SSL clients running on Arista EOS vulnerable to SSL/TLS MITM...

Security Advisory 0004

Security Advisory 0004 PDF Date: 4/9/2014 Arista 7000 Series Products and Arista EOS Not Vulnerable to OpenSSL CVE-2014-0160 On April 7th, the OpenSSL Project issued a security advisory for a TLS heartbeat read overrun vulnerability. This vulnerability allows attackers to access the memory of web...

CVE-2013-3576

ginkgosnmp.inc in HP System Management Homepage SMH allows remote authenticated users to execute arbitrary commands via shell metacharacters in the PATHINFO to smhutil/snmpchp.php.en. Recent assessments: theguly at February 28, 2020 4:42pm UTC reported: this product runs as SYSTEM by default, and...

CVE-2012-6427

The Carlo Gavazzi EOS-Box does not check the validity of the data before executing queries. By accessing the SQL table of certain pages that do not require authentication, attackers can leak information from the device. This could allow the attacker to compromise confidentiality...

CVE-2012-6428

The Carlo Gavazzi EOS-Box stores hard-coded passwords in the PHP file of the device. By using the hard-coded passwords, attackers can log into the device with administrative privileges. This could allow the attacker to have unauthorized access...

Hardcoded credentials

Carlo Gavazzi EOS-Box with firmware before 1.0.0.10802.1.10 establishes multiple hardcoded accounts, which makes it easier for remote attackers to obtain administrative access by reading a password in a PHP script, a similar issue to CVE-2012-5862...

Sql injection

Multiple SQL injection vulnerabilities in Carlo Gavazzi EOS-Box with firmware before 1.0.0.10802.1.10 allow remote attackers to execute arbitrary SQL commands via unspecified vectors, a similar issue to CVE-2012-5861...

CVE-2012-6427 Carlo Gavazzi EOS Box SQL Injection

The Carlo Gavazzi EOS-Box does not check the validity of the data before executing queries. By accessing the SQL table of certain pages that do not require authentication, attackers can leak information from the device. This could allow the attacker to compromise confidentiality...

CVE-2012-6428

CVE-2012-6428 affects the Carlo Gavazzi EOS-Box embedded system. The vulnerability stems from hard-coded credentials stored in a PHP file, enabling attackers to log in with administrative privileges and potentially gain full control of the device. Affected products are EOS-Box Firmware versions p...

CVE-2012-6428 Carlo Gavazzi EOS Box Hard-Coded Credentials

The Carlo Gavazzi EOS-Box stores hard-coded passwords in the PHP file of the device. By using the hard-coded passwords, attackers can log into the device with administrative privileges. This could allow the attacker to have unauthorized access...

CVE-2012-6427

The CVE-2012-6427 issue affects Carlo Gavazzi EOS-Box devices and is caused by SQL injection where user-supplied data is not validated before being used in queries. This vulnerability exists in firmware prior to 1.0.0.1080_2.1.10, allowing remote attackers to access the device’s SQL table and pot...

PT-2012-6275 · Carlo Gavazzi · Eos-Box

Name of the Vulnerable Software and Affected Versions: Carlo Gavazzi EOS-Box versions prior to 1.0.0.1080 2.1.10 Description: The issue allows remote attackers to obtain administrative access by reading a password in a PHP script. This is due to the establishment of multiple hardcoded accounts...

PT-2012-6274 · Carlo Gavazzi · Eos-Box

Name of the Vulnerable Software and Affected Versions: Carlo Gavazzi EOS-Box versions prior to 1.0.0.1080 2.1.10 Description: The issue allows remote attackers to execute arbitrary SQL commands, potentially leading to unauthorized data access or modification. This is achieved through SQL injectio...

Carlo Gavazzi EOS Box Multiple Vulnerabilities

Overview This advisory provides mitigation details for multiple vulnerabilities that impact the Carlo Gavazzi EOS-Box Photovoltaic Monitoring System. Carlo Gavazzi has identified two vulnerabilities in the Carlo Gavazzi EOS-Box Photovoltaic Monitoring System. Carlo Gavazzi has produced a firmware...