CVE-2019-9189: Unrestricted Upload of File with Dangerous Type

Prima Systems FlexAir, Versions 2.4.9api3 and prior. The application allows the upload of arbitrary Python scripts when configuring the main central controller. These scripts can be immediately executed because of root code execution, not as a web server user, allowing an authenticated attacker t...

CVE-2019-4202

IBM API Connect 5.0.0.0 and 5.0.8.6 Developer Portal is vulnerable to command injection. An attacker with a specially crafted request can run arbitrary code on the server and gain complete access to the system. IBM X-Force ID: 159123...

Sun ZFS Storage Appliance Kit Object Store Full Control

The vulnerability of the Object Store component in the Sun ZFS Storage Appliance Kit is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain full control over the application...

FLIR Systems FLIR Brickstream 3D+ Unauthenticated Config Download File Disclosure

FLIR Systems FLIR Brickstream 3D+ Unauthenticated Config Download File Disclosure Vendor: FLIR Systems, Inc. Product web page: http://www.brickstream.com Affected version: Firmware: 2.1.742.1842 Api: 1.0.0 Node: 0.10.33 Onvif: 0.1.1.47 Summary: The Brickstream line of sensors provides highly...

Flaw in 4GEE WiFi Modem Could Leave Your Computer Vulnerable

A high-severity vulnerability has been discovered in 4G-based wireless 4GEE Mini modem sold by mobile operator EE that could allow an attacker to run a malicious program on a targeted computer with the highest level of privileges in the system. The vulnerability—discovered by 20-year-old Osanda...

Microhard Systems 3G/4G Cellular Ethernet And Serial Gateway Configuration Download

Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway Configuration Download Vendor: Microhard Systems Inc. Product web page: http://www.microhardcorp.com Affected version: IPn4G 1.1.0 build 1098 IPn3Gb 2.2.0 build 2160 IPn4Gb 1.1.6 build 1184-14 IPn4Gb 1.1.0 Rev 2 build 1090-2 IPn4Gb 1.1....

HomeMatic Incorrect Access Control Vulnerability

Homeputer CL Studio für HomeMatic is a home automation system from Contronics. An incorrect access control vulnerability exists in HomeMatic that allows an attacker to gain full access to the system...

Dasan Networks GPON ONT WiFi Router H64X Series System Config Download

Summary H64xx is comprised of one G-PON uplink port and four ports of Gigabit Ethernet downlink supporting 10/100/1000Base-T RJ45. It helps service providers to extend their core optical network all the way to their subscribers, eliminating bandwidth bottlenecks in the last mile. H64xx is...

Dasan Networks GPON ONT WiFi Router H64X Series - Configuration Download Vulnerability

Exploit for hardware platform in category web applications Dasan Networks GPON ONT WiFi Router H64X Series System Config Download Vendor: Dasan Networks Product web page: http://www.dasannetworks.com | http://www.dasannetworks.eu Affected version: Models: H640GR-02 H640GV-03 H640GW-02 H640RW-02...

Dasan Networks GPON ONT WiFi Router H64X Series - Configuration Download

Dasan Networks GPON ONT WiFi Router H64X Series - Configuration Download Dasan Networks GPON ONT WiFi Router H64X Series System Config Download Vendor: Dasan Networks Product web page: http://www.dasannetworks.com | http://www.dasannetworks.eu Affected version: Models: H640GR-02 H640GV-03 H640GW-...

CVE-2017-6048

A Command Injection issue was discovered in Satel Iberia SenNet Data Logger and Electricity Meters: SenNet Optimal DataLogger V5.37c-1.43c and prior, SenNet Solar Datalogger V5.03-1.56a and prior, and SenNet Multitask Meter V5.21a-1.18b and prior. Successful exploitation of this vulnerability cou...

PT-2017-16861

Name of the Vulnerable Software and Affected Versions Satel Iberia SenNet Data Logger and Electricity Meters versions prior to the following: - SenNet Optimal DataLogger V5.37c-1.43c - SenNet Solar Datalogger V5.03-1.56a - SenNet Multitask Meter V5.21a-1.18b Description A Command Injection issue...

CVE-2017-6048: Improper Neutralization of Special Elements used in a Command

A Command Injection issue was discovered in Satel Iberia SenNet Data Logger and Electricity Meters: SenNet Optimal DataLogger V5.37c-1.43c and prior, SenNet Solar Datalogger V5.03-1.56a and prior, and SenNet Multitask Meter V5.21a-1.18b and prior. Successful exploitation of this vulnerability cou...

hosting controller 6.1 hot fix <= 3.3 - Multiple Vulnerabilities

No description provided by source. Title: Multiple Security Bugs In Hosting Controller Critical: Extremely critical Impact: Full system administrator access Vendor: Hosting Controller Version: 6.1 Hot fix = 3.3 Vendor URL: www.hostingcontroller.com Solution: N/A From company - There is temporary...

Open&Compact Ftp Server <= 1.2 Full System Access

No description provided by source. Exploit Title: Open&Compact Ftp Server = 1.2 Full System Access Date: June 12, 2010 Author: Serge Gorbunov Software Link: http://sourceforge.net/projects/open-ftpd/ Version: = 1.2 Tested on: Windows 7, Windows XP SP3 !/usr/bin/python Simply by omitting login...

Open And Compact FTP Server 1.2 Full System Access

Exploit Title: Open&Compact Ftp Server = 1.2 Full System Access Date: June 12, 2010 Author: Serge Gorbunov Software Link: http://sourceforge.net/projects/open-ftpd/ Version: = 1.2 Tested on: Windows 7, Windows XP SP3 !/usr/bin/python Simply by omitting login process to the open ftp server it is...

(Gabriels FTP Server) Open Compact FTP Server 1.2 - Full System Access

Gabriels FTP Server Open Compact FTP Server 1.2 - Full System Access Exploit Title: Open&Compact Ftp Server = 1.2 Full System Access Date: June 12, 2010 Author: Serge Gorbunov Software Link: http://sourceforge.net/projects/open-ftpd/ Version: = 1.2 Tested on: Windows 7, Windows XP SP3...

(Gabriel's FTP Server) Open & Compact FTP Server 1.2 - Full System Access

Exploit Title: Open&Compact Ftp Server = 1.2 Full System Access Date: June 12, 2010 Author: Serge Gorbunov Software Link: http://sourceforge.net/projects/open-ftpd/ Version: = 1.2 Tested on: Windows 7, Windows XP SP3 !/usr/bin/python Simply by omitting login process to the open ftp server it is...

UTStarcom B-NAS 1000 / B-RAS 1000 Major Security Flaw

== Overview == UTStarcom http://www.ustar.com is a broadband DSLAM and DSL SMS hardware vendor. Their products are used to manage DSL through PPPoE, PPPoA, bridge mode etc. == Vulnerability == The vendor UTStarcom has placed 2 backdoor accounts with full system access in their BAS-1000 system B-R...