HD Tune Pro 5.70 - Denial of Service (PoC)

HD Tune Pro 5.70 - Denial of Service PoC Exploit Title: HD Tune Pro 5.70 - Denial Of Service PoC Author: Gionathan "John" Reale Discovey Date: 2018-08-29 Homepage: https://www.hdtune.com/ Software Link: https://www.hdtune.com/download.html Tested Version: v5.70 Tested on OS: Windows 7 32-bit Step...

Drive Power Manager 1.10 - Denial Of Service (PoC)

Exploit Title: Drive Power Manager 1.10 - Denial Of Service PoC Author: Gionathan "John" Reale Discovey Date: 2018-08-29 Homepage: https://www.hdtune.com/ Software Link: https://www.hdtune.com/download.html Tested Version: v1.10 Tested on OS: Windows 7 32-bit Steps to Reproduce: Run the python...

CVE-2016-6564 Ragentek Android software contains an over-the-air update mechanism that communicates over an unencrypted channel, which can allow a remote attacker to execute arbitrary code with root privileges

Android devices with code from Ragentek contain a privileged binary that performs over-the-air OTA update checks. Additionally, there are multiple techniques used to hide the execution of this binary. This behavior could be described as a rootkit. This binary, which resides as /system/bin/debugs,...

CVE-2017-18155

While playing HEVC content using HD DMB in Snapdragon Automobile and Snapdragon Mobile in version MSM8996AU, SD 450, SD 625, SD 820, SD 820A, SD 835, an uninitialized variable can be used leading to a kernel fault...

CVE-2017-18155

While playing HEVC content using HD DMB in Snapdragon Automobile and Snapdragon Mobile in version MSM8996AU, SD 450, SD 625, SD 820, SD 820A, SD 835, an uninitialized variable can be used leading to a kernel fault...

CVE-2017-18155

CVE-2017-18155 affects Qualcomm hardware codec used in Snapdragon Automotive and Snapdragon Mobile (MSM8996AU, SD 450/625/820/820A/835). Root cause: an uninitialized variable can be exploited to trigger a kernel fault. Impact: local kernel fault with potential privilege consequences as reflected ...

CVE-2018-12640

The webService binary on Insteon HD IP Camera White 2864-222 devices has a Buffer Overflow via a crafted pid, pwd, or usr key in a GET request on port 34100...

Buffer overflow

The webService binary on Insteon HD IP Camera White 2864-222 devices has a Buffer Overflow via a crafted pid, pwd, or usr key in a GET request on port 34100...

Stack overflow

The webService binary on Insteon HD IP Camera White 2864-222 devices has a stack-based Buffer Overflow leading to Control-Flow Hijacking via a crafted usr key, as demonstrated by a long remoteIp parameter to cgi-bin/CGIProxy.fcgi on port 34100...

CVE-2018-11560

The webService binary on Insteon HD IP Camera White 2864-222 devices has a stack-based Buffer Overflow leading to Control-Flow Hijacking via a crafted usr key, as demonstrated by a long remoteIp parameter to cgi-bin/CGIProxy.fcgi on port 34100...

CVE-2018-11560

CVE-2018-11560 affects the Insteon HD IP Camera White 2864-222 webService binary, where a stack-based buffer overflow can cause control-flow hijacking via a crafted usr key, evidenced by a long remoteIp to CGIProxy.fcgi (port 34100). Related sources describe a related remote-code execution impact...

CVE-2018-12640

CVE-2018-12640 affects Insteon HD IP Camera White 2864-222. The webService binary is vulnerable to a buffer overflow triggered by crafted pid, pwd, or usr keys in a GET request on port 34100. The vulnerability is documented in multiple sources (NVD entry and CNVD/CNVD-related advisories). A relat...

CVE-2018-12640

The webService binary on Insteon HD IP Camera White 2864-222 devices has a Buffer Overflow via a crafted pid, pwd, or usr key in a GET request on port 34100...

CVE-2018-0496

Directory traversal issues in the D-Mod extractor in DFArc and DFArc2 as well as in RTsoft's Dink Smallwood HD / ProtonSDK version before 3.14 allow an attacker to overwrite arbitrary files on the user's system...

UBUNTU-CVE-2018-0496

Directory traversal issues in the D-Mod extractor in DFArc and DFArc2 as well as in RTsoft's Dink Smallwood HD / ProtonSDK version before 3.14 allow an attacker to overwrite arbitrary files on the user's system...

CVE-2018-0496

CVE-2018-0496 affects DFArc and DFArc2’s D-Mod extractor (and RTsoft’s Dink Smallwood HD / ProtonSDK before 3.14). A directory traversal flaw allows an attacker to overwrite arbitrary files on the user’s system. Connected advisories confirm vulnerable components include the D-Mod extractor in DFA...

CVE-2018-0496

Directory traversal issues in the D-Mod extractor in DFArc and DFArc2 as well as in RTsoft's Dink Smallwood HD / ProtonSDK version before 3.14 allow an attacker to overwrite arbitrary files on the user's system...

CVE-2018-0496

Directory traversal issues in the D-Mod extractor in DFArc and DFArc2 as well as in RTsoft's Dink Smallwood HD / ProtonSDK version before 3.14 allow an attacker to overwrite arbitrary files on the user's system...

netflix-hd.net XSS vulnerability

Open Bug Bounty ID: OBB-628704 Description| Value ---|--- Affected Website:| netflix-hd.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2017-2833

The vulnerability CVE-2017-2833 affects the Foscam C1 Indoor HD Camera (firmware 2.52.2.37). During boot, the webService startup config builds an FTP command line using user-supplied credentials without sanitization, and then invokes system(). If an administrative account is compromised, an attac...