616 matches found
CVE-2019-9556
FiberHome an5506-04-f RP2669 devices have XSS...
Cross site scripting
FiberHome an5506-04-f RP2669 devices have XSS...
CVE-2019-9556
CVE-2019-9556 affects FiberHome AN5506-04-F RP2669 devices. The vulnerability is a Cross-Site Scripting (XSS) issue in the web management interface, arising from insufficient input filtering in the application (stored XSS). Exploitation is discussed in public advisories and exploits (e.g., Exploi...
CVE-2019-9556
FiberHome an5506-04-f RP2669 devices have XSS...
CVE-2019-17186
/var/WEB-GUI/cgi-bin/telnet.cgi on FiberHome HG2201T 1.00.M5007JS201804 devices allows pre-authentication remote code execution...
CVE-2019-17186
/var/WEB-GUI/cgi-bin/telnet.cgi on FiberHome HG2201T 1.00.M5007JS201804 devices allows pre-authentication remote code execution...
Remote code execution
/var/WEB-GUI/cgi-bin/telnet.cgi on FiberHome HG2201T 1.00.M5007JS201804 devices allows pre-authentication remote code execution...
CVE-2019-17186
/var/WEB-GUI/cgi-bin/telnet.cgi on FiberHome HG2201T 1.00.M5007JS201804 devices allows pre-authentication remote code execution...
CVE-2019-17186
CVE-2019-17186 affects FiberHome HG2201T devices (firmware 1.00.M5007_JS_201804). The issue is pre-authentication remote code execution via /var/WEB-GUI/cgi-bin/telnet.cgi. Multiple sources (NVD, Red Hat, CVE lists) confirm the same description. The documents do not provide a patch version or rem...
CVE-2019-17187
/var/WEB-GUI/cgi-bin/downloadfile.cgi on FiberHome HG2201T 1.00.M5007JS201804 devices allows pre-authentication Directory Traversal for reading arbitrary files...
CVE-2019-17187
/var/WEB-GUI/cgi-bin/downloadfile.cgi on FiberHome HG2201T 1.00.M5007JS201804 devices allows pre-authentication Directory Traversal for reading arbitrary files...
Directory traversal
/var/WEB-GUI/cgi-bin/downloadfile.cgi on FiberHome HG2201T 1.00.M5007JS201804 devices allows pre-authentication Directory Traversal for reading arbitrary files...
CVE-2019-17187
CVE-2019-17187 affects FiberHome HG2201T devices (version 1.00.M5007_JS_201804) via pre-authentication Directory Traversal in /var/WEB-GUI/cgi-bin/downloadfile.cgi, enabling reading arbitrary files. The connected sources corroborate the path and device context but do not provide a public patch or...
CVE-2019-17187
/var/WEB-GUI/cgi-bin/downloadfile.cgi on FiberHome HG2201T 1.00.M5007JS201804 devices allows pre-authentication Directory Traversal for reading arbitrary files...
Puzzling Gwmndy Botnet Focuses on Low-Volume Proxy Connections
An odd botnet has been spotted targeting Fiberhome routers, in a quest to add 200 of them per day to its botnet web. That’s a low number in the world of botnets, according to 360 Netlab researchers, which observed a previously unknown malware strain called Gwmndy after the attackers’ domain name...
Security Bulletin: Vyatta 5600 vRouter Software Patches - Release 1801-za
Summary AT&T has released versions 1801-za for the Vyatta 5600. Details of these releases can be found at https://cloud.ibm.com/docs/infrastructure/virtual-router-appliance?topic=virtual-router-appliance-at-t-vyatta-5600-vrouter-software-patchesat-t-vyatta-5600-vrouter-software-patches...
SQL Injection Vulnerability in Fiberhome's Eyeshot Series of Network Video Surveillance Platforms
Eyeshot series network video surveillance platform is an integrated video surveillance management system developed by Fiberhome Zongzhi based on IP network technology as the core of large-scale image remote monitoring, transmission, storage and management. Fiberhome Eyeshot series network video...
FiberHome Fiberhome AN5506-04-F Cross-Site Scripting Vulnerability
FiberHome Fiberhome AN5506-04-F is a router from China FiberHome. A cross-site scripting vulnerability exists in the Fiberhome AN5506-04-F RP2669 version, which originates from the program failing to properly filter user input. A remote attacker could exploit this vulnerability to run malicious...
Fiberhome AN5506-04-F RP2669 Cross Site Scripting
Exploit Title: Fiberhome AN5506-04-F - Stored Cross Site Scripting Date: 04.03.2019 Exploit Author: Tauco Vendor Homepage: http://www.fiberhomegroup.com/en/ Version: RP2669 Tested on: Windows 10 CVE : CVE-2019-9556 Description:...
Fiberhome AN5506-04-F RP2669 - Persistent Cross-Site Scripting
Exploit Title: Fiberhome AN5506-04-F - Stored Cross Site Scripting Date: 04.03.2019 Exploit Author: Tauco Vendor Homepage: http://www.fiberhomegroup.com/en/ Version: RP2669 Tested on: Windows 10 CVE : CVE-2019-9556 Description:...