CVE-2018-18473

A hidden backdoor on PATLITE NH-FB Series devices with firmware version 1.45 or earlier, NH-FV Series devices with firmware version 1.10 or earlier, and NBM Series devices with firmware version 1.09 or earlier allow attackers to enable an SSH daemon via the "kankichi" or "kamiyo4" password to the...

CVE-2018-18473

The CVE describes a backdoor in PATLITE NH-FB (firmware ≤1.45), NH-FV (≤1.10), and NBM (≤1.09) series devices. An attacker can enable an SSH daemon via the _secret1.htm URI using the passwords “kankichi” or “kamiyo4,” after which the default root password enables remote code execution and full sy...

CVE-2018-18473

A hidden backdoor on PATLITE NH-FB Series devices with firmware version 1.45 or earlier, NH-FV Series devices with firmware version 1.10 or earlier, and NBM Series devices with firmware version 1.09 or earlier allow attackers to enable an SSH daemon via the "kankichi" or "kamiyo4" password to the...

CVE-2018-18473: Use of Hard-coded Credentials

A hidden backdoor on PATLITE NH-FB Series devices with firmware version 1.45 or earlier, NH-FV Series devices with firmware version 1.10 or earlier, and NBM Series devices with firmware version 1.09 or earlier allow attackers to enable an SSH daemon via the "kankichi" or "kamiyo4" password to the...

PT-2019-9596

Name of the Vulnerable Software and Affected Versions PATLITE NH-FB Series devices version 1.45 or earlier PATLITE NH-FV Series devices version 1.10 or earlier PATLITE NBM Series devices version 1.09 or earlier Description A hidden backdoor in the affected devices allows attackers to enable an SS...

PT-2018-2835

Name of the Vulnerable Software and Affected Versions isql-fb affected versions not specified Description The issue is caused by a buffer overflow when processing command line parameters in the isql-fb utility for Firebird databases. Exploitation of this issue may allow an attacker to cause a...

FB Inboxer 1.2 SQL Injection

Exploit Title: FB Inboxer 1.2 - 'searchfield' SQL Injection Google Dork: N/A Date: 02.08.2018 Exploit Author: Azkan Mustafa AkkuA AkkuS Vendor Homepage: https://codecanyon.net/item/pageresponse-a-fb-inboxer-addon-facebook-auto-commentprivate-reply-likeshare-for-full-page/21486371 Version: 1.2...

PageResponse FB Inboxer Add-on 1.2 - 'search_field' SQL Injection

Exploit Title: FB Inboxer 1.2 - 'searchfield' SQL Injection Google Dork: N/A Date: 02.08.2018 Exploit Author: Özkan Mustafa Akkuş AkkuS Vendor Homepage: https://codecanyon.net/item/pageresponse-a-fb-inboxer-addon-facebook-auto-commentprivate-reply-likeshare-for-full-page/21486371 Version: 1.2...

PageResponse FB Inboxer Add-on 1.2 - search_field SQL Injection

PageResponse FB Inboxer Add-on 1.2 - searchfield SQL Injection Exploit Title: FB Inboxer 1.2 - 'searchfield' SQL Injection Google Dork: N/A Date: 02.08.2018 Exploit Author: Özkan Mustafa Akkuş AkkuS Vendor Homepage:...

PageResponse FB Inboxer Add-on 1.2 - search_field SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: FB Inboxer 1.2 - 'searchfield' SQL Injection Exploit Author: Özkan Mustafa Akkuş AkkuS Vendor Homepage:...

apyinpyay.fun XSS vulnerability

Open Bug Bounty ID: OBB-655349 Description| Value ---|--- Affected Website:| apyinpyay.fun Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

openSUSE Security Update : the Linux Kernel (openSUSE-2017-1160)

The openSUSE Leap 42.3 kernel was updated to 4.4.90 to receive various security and bugfixes. The following security bugs were fixed : - CVE-2017-1000252: The KVM subsystem in the Linux kernel allowed guest OS users to cause a denial of service assertion failure, and hypervisor hang or crash via ...

Security update for the Linux Kernel (important)

The openSUSE Leap 42.3 kernel was updated to 4.4.90 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2017-1000252: The KVM subsystem in the Linux kernel allowed guest OS users to cause a denial of service assertion failure, and hypervisor hang or crash via a...

Firebird - Relational Database CNCT Group Number Buffer Overflow Exploit

Exploit for windows platform in category local exploits This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'Firebird Relational Database CNCT Group Number Buffer Overflow',...

PT-2017-2719

Name of the Vulnerable Software and Affected Versions Android CAF-сборки affected versions not specified Description The issue is related to the use of memory after it has been freed. This can be exploited by a remote attacker to impact the confidentiality, integrity, and availability of protecte...

kernel security update

kernel 2.6.18-409 - fs ext4: limit group search loop for non-extent files Lukas Czerner 1301100 - fb vm: convert fbmmap to vmiomapmemory helper Jacob Tanenbaum 1035240 CVE-2013-2596 - s390 add dummy ioremappfnrange to asm-s390/pgtable.h Jacob Tanenbaum 1035240 CVE-2013-2596 - mm vm: add...

kernel-uek security update

kernel-uek 4.1.12-32.1.2 - KEYS: Fix keyring ref leak in joinsessionkeyring Yevgeny Pats Orabug: 22563965 CVE-2016-0728 4.1.12-32.1.1 - ocfs2: return non-zero stblocks for inline data John Haxby Orabug: 22218243 - xen/events/fifo: Consume unprocessed events when a CPU dies Ross Lagerwall Orabug:...

PT-2015-7654

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.3.3 Description The issue allows local users to obtain sensitive information from kernel memory via a crafted application, due to the vivid fb ioctl function in drivers/media/platform/vivid/vivid-osd.c not...

PT-2015-6581

Name of the Vulnerable Software and Affected Versions Nextend Facebook Connect plugin versions prior to 1.5.6 Description The issue is related to a cross-site scripting XSS vulnerability. It allows remote attackers to inject arbitrary web script or HTML via the redirect to parameter in the new fb...

WordPress WP-FB-AutoConnect 4.0.5 CSRF / XSS

Title: WordPress 'WP-FB-AutoConnect' plugin - XSS/CSRF Version: 4.0.5 Author: Morten Nørtoft, Kenneth Jepsen, Mikkel Vej Date: 2014/12/12 Download: https://wordpress.org/plugins/wp-fb-autoconnect/ Contacted WordPress: 2014/11/27 ----------------------------------------------------------------...