4402 matches found
Orange Livebox Router Detection
Detection of Orange Livebox router. The script sends a connection request to the server and attempts to detect the web interface for Orange SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...
Epson WorkForce WF-2861 Denial of Service Vulnerability (CNVD-2019-43855)
The Epson WorkForce WF-2861 is a Wi-Fi duplex MFP inkjet printer. An amplification attack vulnerability exists in the Epson WorkForce WF-2861 10.48 LQ22I3, 10.51.LQ20I6, 10.52.LQ17IA. The vulnerability stems from the device using SNMP to look up certain devices on the network. An attacker could...
CVE-2018-18871
Missing password verification in the web interface on Gigaset Maxwell Basic VoIP phones with firmware 2.22.7 would allow a remote attacker in the same network as the device to change the admin password without authentication and without knowing the original password...
PT-2018-3876 · D Link · Dcs-825L
Name of the Vulnerable Software and Affected Versions: D-Link DCS-825L version 1.08 Description: The issue is related to insufficient input validation in the firmware of the D-Link DCS-825L network camera, which can be exploited by a remote attacker to cause a denial-of-service DoS condition. Thi...
Samsung Galaxy S6 bcmdhd4358 Wi-Fi driver buffer overflow vulnerability (CNVD-2018-25878)
Samsung Galaxy S6 is a smartphone released by the South Korean company Samsung Samsung. bcmdhd4358 Wi-Fi driver is one of the Wi-Fi drivers. The bcmdhd4358 Wi-Fi driver in the Samsung Galaxy S6 SM-G920F with firmware version G920FXXU5EQH7 has a 'dhd' in the file...
Samsung Galaxy S6 bcmdhd4358 Wi-Fi Driver Denial of Service Vulnerability
Samsung Galaxy S6 is a smartphone released by the South Korean company Samsung Samsung. bcmdhd4358 Wi-Fi driver is one of the Wi-Fi drivers. The bcmdhd4358 Wi-Fi driver in the Samsung Galaxy S6 SM-G920F using firmware version G920FXXU5EQH7 has the 'dhd rxframe' function in the...
ABB M2M ETHERNET Improper Authentication Vulnerability
ABB M2M ETHERNET is a network analysis device from ABB Switzerland. An authorization issue vulnerability exists in ABB M2M ETHERNET FW version 2.22 and earlier and ETH-FW version 1.01 and earlier. An attacker can exploit this vulnerability to upload malicious language files...
Huawei B315s-22 - Information Leak Vulnerability
Exploit for hardware platform in category web applications Product Family: LTE Model B315s – 22 Firmware version: 21.318.01.00.26 Author: Usman Saeed usman at xc0re.net 1. Unauthenticated access to sensitive files: It was observed that the web application running on the router, allows...
CVE-2018-20051
Mishandling of '' on the Jooan JA-Q1H Wi-Fi camera with firmware 21.0.0.91 allows remote attackers to cause a denial of service crash and reboot via certain ONVIF methods such as CreateUsers, SetImagingSettings, GetStreamUri, and so on...
WAGO PLC Detection (SNMP)
SNMP based detection of WAGO PLC Controllers. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...
Moxa NPort W2x50A 2.1 OS Command Injection
Moxa NPort W2x50A products with firmware version 2.1 Build17112017 or lower are vulnerable to several authenticated OS Command Injection vulnerabilities: 1 Authenticated OS Command Injection in web server ping functionality Reserverd CVE ID: CVE-2018-19659 A specially crafted HTTP POST request to...
Siemens SIMATIC HMI Device Detection Consolidation
Consolidation of Siemens SIMATIC HMI device detections. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...
TP-Link Archer C50 Wireless Router 171227 - CSRF (Configuration File Disclosure) Vulnerability
Exploit for hardware platform in category web applications Exploit Title: TP-Link Archer C50 Wireless Router 171227 - Cross-Site Request Forgery Configuration File Disclosure Exploit Author: Wadeek Vendor Homepage: https://www.tp-link.com/ Hardware Version: Archer C50 v3 00000001 Firmware Link:...
Foscam OptiCam i5 Design Vulnerability
Foscam OptiCam i5 is an IP camera from Foscam China. A security vulnerability exists in Foscam Opticam i5 devices with System Firmware version 1.5.2.11 and Application Firmware version 2.21.1.128. An attacker could exploit the vulnerability to take control of the device...
Foscam Opticam i5 Cross-Site Scripting Vulnerability
Foscam Opticam i5 is an IP camera from FOSCAM. A persistent cross-site scripting vulnerability exists in the ONVIF devicemgmt SetHostname method of the Foscam Opticam i5 with system firmware 1.5.2.11 and application firmware 2.21.1.128. An unauthenticated attacker could exploit this vulnerability...
CVE-2018-19077
An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. RtspServer allows remote attackers to cause a denial of service daemon hang or restart via a negative integer in the RTSP Content-Length header...
CVE-2018-19072
An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. /mnt/mtd/app has 0777 permissions, allowing local users to replace an archive file within that...
Yi Home Camera Code Execution Vulnerability (CNVD-2018-22813)
Yi Home Camera is an IoT home camera sold worldwide. A code execution vulnerability exists in the firmware update function of the Yi Home Camera 27US 1.8.7.0D. An attacker can cause a CRC conflict by inserting an SD card and exploiting the vulnerability via a specially crafted 7-Zip file, which c...
NETGEAR WiFi Router R6120 Credential Disclosure
Exploit Title: NETGEAR WiFi Router R6120 - Credential Disclosure Date: 2018-10-28 Exploit Author: Wadeek Hardware Version: R6120 Firmware Version: 1.0.0.30 Vendor Homepage: https://www.netgear.com/support/product/R6120.aspx Firmware Link:...
