CVE-2023-30146

CVE-2023-30146 - Assmann/HooToo ウェブカメラエクスプロイト - 機密データの露出 説明 HooToo および Assmann ブランドの IP カメラに問題が発見されました。ファームウェアは、管理者とユーザーの認証情報をバックアップ内に平文で保存します。バックアップは認証なしで取得・解凍できるため、リモートの攻撃者にネットワークへのアクセスを与えることになります。 脆弱性タイプ 機密データの露出 攻撃タイプ リモート 影響 ネットワーク侵害の可能性 背景 IoT 市場で販売されている IP カメラの多くは、HiSilicon H35xx SoC 1...

EUVD-2017-17965

Malware in sbrugna...

EUVD-2017-17966

Malware in sbrugna...

CVE-2018-20841

HooToo TripMate Titan HT-TM05 and HT-05 routers with firmware 2.000.022 and 2.000.082 allow remote command execution via shell metacharacters in the mac parameter of a protocol.csp?function=set=security=mactable request...

Exploit for Cleartext Storage of Sensitive Information in Assmann Ht-Ip211Hdp_Firmware

CVE-2023-30146 - Assmann/HooToo Webcam Exploit - Sensitive Dat...

VulnCheck KEV: CVE-2018-20841

HooToo TripMate Titan HT-TM05 and HT-05 routers with firmware 2.000.022 and 2.000.082 allow remote command execution via shell metacharacters in the mac parameter of a protocol.csp?function=set&fname=security&opt=mactable request...

CVE-2018-20841

HooToo TripMate Titan HT-TM05 and HT-05 routers with firmware 2.000.022 and 2.000.082 allow remote command execution via shell metacharacters in the mac parameter of a protocol.csp?function=set&fname=security&opt=mactable request...

Cross site request forgery (csrf)

HooToo TripMate Titan HT-TM05 and HT-05 routers with firmware 2.000.022 and 2.000.082 allow remote command execution via shell metacharacters in the mac parameter of a protocol.csp?function=set&fname=security&opt=mactable request...

CVE-2018-20841

HooToo TripMate Titan HT-TM05 and HT-05 routers with firmware 2.000.022 and 2.000.082 allow remote command execution via shell metacharacters in the mac parameter of a protocol.csp?function=set&fname=security&opt=mactable request...

CVE-2018-20841

HooToo TripMate Titan HT-TM05 and HT-05 routers (firmware 2.000.022 and 2.000.082) are affected by CVE-2018-20841. The issue allows remote command execution via shell metacharacters in the mac parameter of a protocol.csp?function=set&fname=security&opt=mac_table request. This is documented across...

CVE-2018-20841

HooToo TripMate Titan HT-TM05 and HT-05 routers with firmware 2.000.022 and 2.000.082 allow remote command execution via shell metacharacters in the mac parameter of a protocol.csp?function=set&fname=security&opt=mactable request...

HooToo HT-05 Remote Code Execution

A remote code execution vulnerability exists in HooToo HT-05 travel router. A remote attacker can exploit this weakness to execute arbitrary code in the affected router via a crafted request...

Hootoo HT-05 Remote Code Execution

require 'msf/core' require 'net/http' require "uri" class MetasploitModule 'Hootoo HT-05 remote shell exploit', 'Description' = %q This module tries to open a door in the device by exploiting the RemoteCodeExecution by creating a backdoor inside the device This exploit was written by Andrei Manol...

Hootoo HT-05 - Remote Code Execution Exploit

require 'msf/core' require 'net/http' require "uri" class MetasploitModule 'Hootoo HT-05 remote shell exploit', 'Description' = %q This module tries to open a door in the device by exploiting the RemoteCodeExecution by creating a backdoor inside the device This exploit was written by Andrei Manol...

Hootoo HT-05 - Remote Code Execution (Metasploit)

Hootoo HT-05 - Remote Code Execution Metasploit require 'msf/core' require 'net/http' require "uri" class MetasploitModule 'Hotoo HT-05 remote shell exploit', 'Description' = %q This module tries to open a door in the device by exploiting the RemoteCodeExecution by creating a backdoor inside the...

Hootoo HT-05 - Remote Code Execution (Metasploit)

require 'msf/core' require 'net/http' require "uri" class MetasploitModule 'Hotoo HT-05 remote shell exploit', 'Description' = %q This module tries to open a door in the device by exploiting the RemoteCodeExecution by creating a backdoor inside the device This exploit was written by Andrei Manole...

HooToo TripMate Web Interface Detection

Binary data hootootripmatedetect.nbin...

HooToo HT-TM06 TripMate Elite Web Server 'protocol.csp' HTTP Cookie Header Handling RCE

The HooToo TripMate web interface running on the remote host is affected by a remote code execution vulnerability in the ioos web server vshttpd due to improper validation of overly long strings passed via the HTTP cookie header to protocol.csp. An unauthenticated, remote attacker can exploit thi...

HooToo Trip Mate 6 vshttpd buffer overflow vulnerability (CNVD-2017-07295)

The HooToo Trip Mate 6 TM6 is a portable wireless router from HooToo USA. vshttpd aka ioos is one of the http servers. A stack buffer overflow vulnerability exists in vshttpd in HooToo TM6 firmware version 2.000.030 and earlier. A remote attacker can exploit this vulnerability to control the...

HooToo Trip Mate 6 vshttpd Buffer Overflow Vulnerability

The HooToo Trip Mate 6 TM6 is a portable wireless router from HooToo USA. vshttpd aka ioos is one of the http servers. A heap buffer overflow vulnerability exists in vshttpd in HooToo TM6 firmware version 2.000.030 and earlier. A remote attacker can exploit this vulnerability to control the progr...