Code injection

testserver.cgi of the web service on VIVOTEK Network Cameras before XXXXX-VVTK-2.2002.xx.01x and before XXXXX-VVTK-0XXXXBeta2 allows an authenticated user to obtain arbitrary files from a camera's local filesystem. For example, this affects IT9388-HT devices...

CVE-2020-11950

CVE-2020-11950 affects VIVOTEK Network Cameras prior to XXXXX-VVTK-2.2002.xx.01x and prior to XXXXX-VVTK-0XXXX_Beta2, where an authenticated user can upload and execute a script, resulting in OS command execution (example affected device: IT9388-HT).

CVE-2020-11949

testserver.cgi of the web service on VIVOTEK Network Cameras before XXXXX-VVTK-2.2002.xx.01x and before XXXXX-VVTK-0XXXXBeta2 allows an authenticated user to obtain arbitrary files from a camera's local filesystem. For example, this affects IT9388-HT devices...

CVE-2020-11949

CVE-2020-11949 affects VIVOTEK Network Cameras and their web service (testserver.cgi) before XXXXX-VVTK-2.2002.xx.01x and before XXXXX-VVTK-0XXXX_Beta2. An authenticated user can obtain arbitrary files from a camera’s local filesystem (affecting devices such as IT9388-HT). The underlying cause is...

PIMS online order management system ht***.php file has SQL injection vulnerability

PIMS online order management system for single-page ordering sites, general product ordering sites and other ordering sites, designed to facilitate the full background management through the fast integration of Alipay, Paypal, eBao, netbank online, PayPal and other payment interfaces, management ...

CVE-2012-5867

HT Editor 2.0.20 has a Remote Stack Buffer Overflow Vulnerability...

Stack overflow

HT Editor 2.0.20 has a Remote Stack Buffer Overflow Vulnerability...

CVE-2012-5867

HT Editor 2.0.20 has a Remote Stack Buffer Overflow Vulnerability...

UBUNTU-CVE-2012-5867

HT Editor 2.0.20 has a Remote Stack Buffer Overflow Vulnerability...

CVE-2012-5867

HT Editor 2.0.20 is affected by a Remote Stack Buffer Overflow vulnerability (CVE-2012-5867). The available documents consistently identify HT Editor 2.0.20 as the vulnerable component and describe a remote stack overflow, but do not provide technical specifics about the root cause, vulnerable fu...

CVE-2012-5867

HT Editor 2.0.20 has a Remote Stack Buffer Overflow Vulnerability...

ht-deko.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-896581 Security Researcher geeknik Helped patch 8815 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting ht-deko.com website and its...

HooToo HT-05 Remote Code Execution

A remote code execution vulnerability exists in HooToo HT-05 travel router. A remote attacker can exploit this weakness to execute arbitrary code in the affected router via a crafted request...

WordPress Plugin HT-Poi Arbitrary File Upload Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. An arbitrary file upload vulnerability exists in the WordPress plugin HT-Poi. An attacker can exploit the vulnerability to...

Security Bulletin: IBM BladeCenter Advanced Management Module is affected by glibc vulnerabilities (CVE-2015-1472, CVE-2013-7423, CVE-2014-7817, and CVE-2014-9402)

Summary Security vulnerabilities in glibc affect IBM BladeCenter Advanced Management Module AMM. Vulnerability Details Summary Security vulnerabilities in glibc affect IBM BladeCenter Advanced Management Module AMM. Vulnerability Details: CVE-ID: CVE-2013-7423 Description: GNU glibc could allow a...

Hootoo HT-05 Remote Code Execution

require 'msf/core' require 'net/http' require "uri" class MetasploitModule 'Hootoo HT-05 remote shell exploit', 'Description' = %q This module tries to open a door in the device by exploiting the RemoteCodeExecution by creating a backdoor inside the device This exploit was written by Andrei Manol...

Hootoo HT-05 - Remote Code Execution Exploit

require 'msf/core' require 'net/http' require "uri" class MetasploitModule 'Hootoo HT-05 remote shell exploit', 'Description' = %q This module tries to open a door in the device by exploiting the RemoteCodeExecution by creating a backdoor inside the device This exploit was written by Andrei Manol...

Hootoo HT-05 - Remote Code Execution (Metasploit)

Hootoo HT-05 - Remote Code Execution Metasploit require 'msf/core' require 'net/http' require "uri" class MetasploitModule 'Hotoo HT-05 remote shell exploit', 'Description' = %q This module tries to open a door in the device by exploiting the RemoteCodeExecution by creating a backdoor inside the...

Hootoo HT-05 - Remote Code Execution (Metasploit)

require 'msf/core' require 'net/http' require "uri" class MetasploitModule 'Hotoo HT-05 remote shell exploit', 'Description' = %q This module tries to open a door in the device by exploiting the RemoteCodeExecution by creating a backdoor inside the device This exploit was written by Andrei Manole...

HT-MP3Player 1.0 HT3 File Parsing Buffer Overflow (CVE-2009-2485)

A buffer overflow vulnerability exists in HT-MP3Player 1.0. The vulnerability exists because the affected software fails to perform sufficient boundary checks on user-supplied input when processing .ht3 files. A successful exploitation could lead to execution of arbitrary code on the targeted...