17041 matches found
USN-3765-1: curl vulnerability
It was discovered that curl incorrectly handled certain inputs. An attacker could possibly use this to execute arbitrary code...
Netis ADSL Router DL4322D RTK 2.1.1 - Denial of Service Exploit
Exploit for hardware platform in category dos / poc Exploit Title: Netis ADSL Router DL4322D RTK 2.1.1 - Denial of Service PoC Author: Cakes Vendor Homepage: http://www.netis-systems.com Software Link: http://www.netis-systems.com/Home/detail/id/74.html Tested Version: RTK 2.1.1 Tested on OS: Kal...
Netis ADSL Router DL4322D RKS 2.1.1 Denial Of Service
Exploit Title: Netis ADSL Router DL4322D RTK 2.1.1 - Denial of Service PoC Author: Cakes Discovery Date: 2018-09-16 Vendor Homepage: http://www.netis-systems.com Software Link: http://www.netis-systems.com/Home/detail/id/74.html Tested Version: RTK 2.1.1 Tested on OS: Kali Linux CVE: N/A...
Netis ADSL Router DL4322D RTK 2.1.1 - Denial of Service (PoC)
Exploit Title: Netis ADSL Router DL4322D RTK 2.1.1 - Denial of Service PoC Author: Cakes Discovery Date: 2018-09-16 Vendor Homepage: http://www.netis-systems.com Software Link: http://www.netis-systems.com/Home/detail/id/74.html Tested Version: RTK 2.1.1 Tested on OS: Kali Linux CVE: N/A...
CVE-2018-17106
CVE-2018-17106 affects Tinyftp Tinyftpd 1.1. A buffer overflow in the text variable of the do_mkd function in ftpproto.c can allow an attacker to overwrite the saved base pointer (ebp) via a long pathname. This entry is documented across multiple ecosystems (NVD/NVD mirror, OSV, CVE lists) with t...
CVE-2018-15485
An issue was discovered on KONE Group Controller KGC devices before 4.6.5. FTP does not require authentication or authorization, aka KONE-03...
Authentication flaw
An issue was discovered on KONE Group Controller KGC devices before 4.6.5. FTP does not require authentication or authorization, aka KONE-03...
CVE-2018-15485
CVE-2018-15485 – KONE Group Controller (KGC) affects KGC devices before 4.6.5. The issue is that the FTP service does not require authentication or authorization, allowing unauthenticated access. According to NVD, this yields a high-impact potential for confidentiality and integrity (CVSS3: Criti...
CVE-2018-15485
An issue was discovered on KONE Group Controller KGC devices before 4.6.5. FTP does not require authentication or authorization, aka KONE-03...
SSA-2018-0906074602
New mozilla-thunderbird packages are available for Slackware 14.2 to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/mozilla-thunderbird-60.0-i686-1slack14.2.txz: Upgraded. This release contains security fixes and improvements. For more information,...
Slackware 14.2 mozilla-thunderbird
New mozilla-thunderbird packages are available for Slackware 14.2 to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/mozilla-thunderbird-60.0-i686-1slack14.2.txz: Upgraded. This release contains security fixes and improvements. For more information,...
KONE KGC 4.6.4 DoS / Code Execution / LFI / Bypass
Vulnerabilities in KONEs Group Controller KGC ------------------------------------------------------------------------- Introduction ============ Vulnerabilities were identified in the KONE Group Controller KGC. These were discovered during a black box assessment and therefore the vulnerability...
KONE KGC 4.6.4 - Multiple Vulnerabilities
KONE KGC versions 4.6.4 and below suffer from unauthenticated remote code execution, denial of service, local file inclusion, and missing FTP access control vulnerabilities. Vulnerabilities in KONEs Group Controller KGC -------------------------------------------------------------------------...
Thousands of MikroTik Routers Hijacked for Eavesdropping
A full 7,500+ MikroTik routers are forwarding their owners’ traffic to eavesdropping cybercriminals – while 239,000 more have had their Socks4 proxy enabled, maliciously and surreptitiously. This means the bad actors can gain access to any of the files or data being passed by the router to and fr...
CVE-2018-16231
Michael Roth Software Personal FTP Server PFTP through 8.4f allows remote attackers to cause a denial of service daemon crash via an unspecified sequence of FTP commands...
CVE-2018-16231
Michael Roth Software Personal FTP Server PFTP through 8.4f allows remote attackers to cause a denial of service daemon crash via an unspecified sequence of FTP commands...
CVE-2018-16231
The CVE-2018-16231 entry concerns Michael Roth Software Personal FTP Server (PFTP) up to version 8.4f. The issue is a remote-denial-of-service that crashes the daemon via an unspecified sequence of FTP commands. The connected documents do not provide concrete technical details such as the exact v...
BusyGasper Malware Packs a Simple but Potent Punch
A small malware campaign is leveraging spyware called BusyGasper, which is highly effective at collecting data on Android phones and exfiltrating it. The malware is unsophisticated, but loaded with 100 uniquely implemented features ranging from device sensor listeners, motion detectors and the...
[slackware-security] libX11
New libX11 packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/libX11-1.6.6-i586-1slack14.2.txz: Upgraded. This update fixes some security issues: Fixed crash on invalid reply...
