Command injection

The ZyXEL P660HN-T1A v1 TCLinux Fw $7.3.15.0 v001 / 3.40ULM.0b31 router distributed by TrueOnline has a command injection vulnerability in the Remote System Log forwarding function, which is accessible by an unauthenticated user. The vulnerability is in the ViewLog.asp page and can be exploited...

CVE-2017-18374

The CVE-2017-18374 entry concerns the ZyXEL P660HN-T1A router (TrueOnline distribution) running TCLinux FW 7.3.15.0 v001 / 3.40(ULM.0)b31. Affected component: router web interface authentication. Root cause: two user accounts exist with default credentials, including a hardcoded service account (...

CVE-2017-18372

CVE-2017-18372 affects the Billion 5200W-T TCLinux FW 7.3.8.0 v008 130603 router distributed by TrueOnline. The vulnerability is a command injection in the Time Setting function via tools_time.asp, exploitable through uiViewSNTPServer and requires an authenticated user. Authentication can be achi...

CVE-2017-18368

The ZyXEL P660HN-T1A v1 TCLinux Fw $7.3.15.0 v001 / 3.40ULM.0b31 router distributed by TrueOnline has a command injection vulnerability in the Remote System Log forwarding function, which is accessible by an unauthenticated user. The vulnerability is in the ViewLog.asp page and can be exploited...

Sierra Wireless AirLink ES450 ACEManager template_load.cgi Information Disclosure Exploit

An exploitable information disclosure vulnerability exists in the ACEManager templateload.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A specially crafted HTTP request can cause a information leak, resulting in the disclosure of internal paths and files. An attacker can make an...

Sierra Wireless AirLink ES450 ACEManager Information Exposure Exploit

An information disclosure vulnerability exists in the ACEManager authentication functionality of Sierra Wireless AirLink ES450 FW 4.9.3. The ACEManager authentication functionality is done in plaintext XML to the web server. An attacker can listen to network traffic upstream from the device to...

Authentication flaw

The product M2M ETHERNET FW Versions 2.22 and prior, ETH-FW Versions 1.01 and prior is vulnerable in that an attacker can upload a malicious language file by bypassing the user authentication mechanism...

Buffer overflow

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, Possible buffer overflow in TX and RX FIFOs of microcontroller in camera subsystem used to exchange commands and messages between Micro FW and CPP driver...

ABB M2M ETHERNET

1. EXECUTIVE SUMMARY CVSS v3 6.3 ATTENTION: Exploitable from an adjacent network/low skill level to exploit Vendor: ABB Equipment: M2M ETHERNET Vulnerability: Improper Authentication 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to upload a malicious...

D-LINK Central WifiManager CWM-100 - Server-Side Request Forgery

Exploit Title: D-LINK Central WifiManager CWM-100 - Server-Side Request Forgery Author: John Page aka hyp3rlinx Date: 2018-11-09 Vendor: http://us.dlink.com Product Link: http://us.dlink.com/products/business-solutions/central-wifimanager-software-controller/ Version: Version 1.03 r0098 CVE: N/A...

fw-host-discovery (>=1.0.0, <=1.0.5) potentially affected by CVE-2018-16461 via libnmap (0.2.33)

libnmap NPM version 0.2.33 is affected by a known vulnerability. The following packages have a transitive dependency on libnmap and may be impacted: - fw-host-discovery =1.0.0, =1.0.5 Source cves: CVE-2018-16461 Source advisory: OSV:GHSA-7G2W-6R25-2J7P...

CVE-2018-11828

When FW tries to get random mac address generated from new SW RNG and ADC values read are constant then DUT get struck in loop while trying to get random ADC samples in Snapdragon Mobile in version SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52...

CVE-2018-11828

CVE-2018-11828 affects Snapdragon Mobile platforms (SD210/SD212/SD205, SD425, SD430, SD450, SD625, SD650/52). The issue occurs when firmware tries to generate a random MAC address from a new software RNG and the ADC readings are constant, causing the device under test (DUT) to loop while collecti...

CVE-2018-12158

The CVE-2018-12158 issue affects Intel NUC Firmware Kits’ BIOS update utility. Insufficient input validation in the BIOS update executable for kits downloaded before May 24, 2018 could allow a local, privileged user to trigger a denial of service or information disclosure. Affected devices are In...

Integer overflow

In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, while processing preferred network offload scan results integer overflow may lead to buffer overflow when large frame length is received from FW...

CVE-2018-11297

In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, a buffer over-read can occur In the WMA NDP event handler functions due to lack of validation of input value eventinfo which is received from FW...

CVE-2018-11297

In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, a buffer over-read can occur In the WMA NDP event handler functions due to lack of validation of input value eventinfo which is received from FW...

CVE-2018-11263

In all Android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the Linux kernel, radioid is received from the FW and is used to access the buffer to copy the radio stats received for each radio from FW. If the radioid received from the FW is greater than or equal to...

CVE-2018-12980

An issue was discovered on WAGO e!DISPLAY 762-3000 through 762-3003 devices with firmware before FW 02. The vulnerability allows an authenticated user to upload arbitrary files to the file system with the permissions of the web server...

CVE-2016-10481

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, QCA4531, QCA6174A, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9378, QCA9379, SD 210/SD 212/SD 205, SD 425, SD 600, SD 625, SD 650/52, SD 808...