CVE-2017-7630

QNAP QTS 4.2.6 build 20171026, QTS 4.3.3 build 20170727 and earlier allows remote attackers to obtain potentially sensitive information firmware version and running services via a request to sysinfoReq.cgi...

NCR S1 Dispenser controller authentication vulnerability

CR S1 Dispenser controller is a dispenser control board product from NCR Corporation. A security vulnerability exists in the memory write mechanism in the NCR S1 Dispenser controller using firmware version 0x0108. An attacker can exploit this vulnerability to upgrade or downgrade the device...

CVE-2018-5717

Memory write mechanism in NCR S2 Dispenser controller before firmware version 0x0108 allows an unauthenticated user to upgrade or downgrade the firmware of the device, including to older versions with known vulnerabilities...

CVE-2018-7230

A XML external entity XXE vulnerability exists in the import.cgi of the web interface component of the Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67...

CVE-2018-7238

A buffer overflow vulnerability exist in the web-based GUI of Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow an unauthenticated, remote attacker to execute arbitrary code...

Design/Logic Flaw

A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow execution of commands due to lack of validation of the shell meta characters with the value of 'modelname' or 'macaddress'...

CVE-2018-0523

Buffalo WXR-1900DHP2 firmware Ver.2.48 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors...

CG-WGR1200 Security Bypass Vulnerability

The CG-WGR1200 is a wired LAN broadband router. A security bypass vulnerability exists in the CG-WGR1200 firmware version 2.20 and earlier, which can be exploited by an attacker to change the login password...

JVN#15201064: Multiple vulnerabilities in CG-WGR1200

CG-WGR1200 provided by Corega Inc is a wireless LAN router. CG-WGR1200 contains multiple vulnerabilities listed below. Buffer Overflow CWE-119 - CVE-2017-10852 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H| Base Score: 8.8 CVSS v2|...

CVE-2017-11649

Cross-site request forgery CSRF vulnerability in DrayTek Vigor AP910C devices with firmware 1.2.0RC3 build r6594 allows remote attackers to hijack the authentication of unspecified users for requests that enable SNMP on the remote device via vectors involving goform/setSnmp...

DrayTek Vigor AP910C Cross-Site Request Forgery Vulnerability

DrayTek Vigor AP910C devices is a wireless router product with firewall function from DrayTek. A cross-site request forgery vulnerability exists in DrayTek Vigor AP910C devices using firmware version 1.2.0RC3 build r6594. A remote attacker could exploit the vulnerability to open SNMP on a remote...

Schneider Electric Pelco Sarix Professional Command Execution Vulnerability (CNVD-2018-05325)

The Schneider Electric Pelco Sarix Professional is a video surveillance device from Schneider Electric France. A security vulnerability in the Schneider Electric Pelco Sarix Professional using firmware prior to version 3.29.67 exists because the program fails to validate shell metacharacters with...

Schneider Electric Pelco Sarix Professional Command Execution Vulnerability

The Schneider Electric Pelco Sarix Professional is a video surveillance device from Schneider Electric France. A security vulnerability in the Schneider Electric Pelco Sarix Professional using firmware prior to version 3.29.67 exists because the program fails to validate shell metacharacters with...

Schneider Electric Pelco Sarix Professional elevation of privilege vulnerability (CNVD-2018-05321)

The Schneider Electric Pelco Sarix Professional is a video surveillance device from Schneider Electric France. A security vulnerability exists in the Schneider Electric Pelco Sarix Professional using firmware versions prior to 3.29.67. A remote attacker could use this vulnerability to bypass...

Fuji Electric FS010W Cross-Site Scripting Vulnerability

The Fuji Electric FS010W is a wireless router product from Fuji Electric Japan. A cross-site scripting vulnerability exists in the Fuji Electric FS010W using firmware version FS010W00V1.3.0 and earlier. A remote attacker can exploit this vulnerability to inject arbitrary web scripts...

Fuji Electric FS010W Cross-Site Request Forgery Vulnerability

The Fuji Electric FS010W is a wireless router product from Fuji Electric Japan. A cross-site request forgery vulnerability exists in the Fuji Electric FS010W using firmware version FS010W00V1.3.0 and earlier. A remote attacker could exploit the vulnerability to perform unauthorized operations...

Aastra 6755i SIP SP4 - Denial of Service Vulnerability

Exploit for hardware platform in category dos / poc Exploit Title: Aastra 6755i SIP SP4 | Unauthorized Remote Reboot Date: 17/02/2018 Exploit Author: Wadeek Hardware Version: 6755i Firmware Version: 3.3.1.4053 SP4 Vendor Homepage: http://www.aastra.sg/ Firmware Link:...

JVN#83834277: Multiple vulnerabilities in FS010W

FS010W provided by FUJI SOFT INCORPORATED is a WiFi router. FS010W contains multiple vulnerabilities listed below. Stored cross-site scripting CWE-79 - CVE-2018-0519 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:A/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N| Base Score: 4.3 CVSS v2|...

CVE-2018-5475

A Stack-based Buffer Overflow issue was discovered in GE D60 Line Distance Relay devices running firmware Version 7.11 and prior. Multiple stack-based buffer overflow vulnerabilities have been identified, which may allow remote code execution...

Aastra 6755i SIP SP4 - Denial of Service

Aastra 6755i SIP SP4 - Denial of Service Exploit Title: Aastra 6755i SIP SP4 | Unauthorized Remote Reboot Date: 17/02/2018 Exploit Author: Wadeek Hardware Version: 6755i Firmware Version: 3.3.1.4053 SP4 Vendor Homepage: http://www.aastra.sg/ Firmware Link:...