libupnp Detection (UPnP)

UPnP based detection of libupnp. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.108015";...

libupnp Detection (HTTP)

HTTP based detection of libupnp. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.106376";...

MiCasa VeraLite Remote Code Execution Exploit

Exploit for hardware platform in category remote exploits Exploit Title: MiCasa VeraLite Remote Code Execution Date: 10-20-2016 Software Link: http://getvera.com/controllers/veralite/ Exploit Author: Jacob Baines Contact: https://twitter.com/JuniorBaines CVE: CVE-2013-4863 & CVE-2016-6255 Platfor...

MiCasa VeraLite Remote Code Execution

Exploit Title: MiCasa VeraLite Remote Code Execution Date: 10-20-2016 Software Link: http://getvera.com/controllers/veralite/ Exploit Author: Jacob Baines Contact: https://twitter.com/JuniorBaines CVE: CVE-2013-4863 & CVE-2016-6255 Platform: Hardware 1. Description A remote attacker can execute...

MiCasaVerde VeraLite - Remote Code Execution

Exploit Title: MiCasa VeraLite Remote Code Execution Date: 10-20-2016 Software Link: http://getvera.com/controllers/veralite/ Exploit Author: Jacob Baines Contact: https://twitter.com/JuniorBaines CVE: CVE-2013-4863 & CVE-2016-6255 Platform: Hardware 1. Description A remote attacker can execute...

Old versions of the libupnp library security risk analysis-vulnerability warning-the black bar safety net

0x1 libupnp description libupnp is a Portable, Portable UPnP C language development package, UPnP is a network Protocol that allows the device to automatically search for and set. Libupnp to the latest version is 1. 6. 2 0, the compile time for 2 0 1 6 7 May 7, last version of 1. 6. 1 9, The...

Portable SDK for UPnP Devices (libupnp) HTTP Arbitrary File Write

The Portable SDK for UPnP Devices libupnp running on the remote host is affected by a flaw that is triggered when handling HTTP POST or GET requests. An unauthenticated, remote attacker can exploit this to write arbitrary files to the web server file system. C Tenable Network Security, Inc...

[SECURITY] [DLA 597-1] libupnp security update

Package : libupnp Version : 1.6.17-1.2+deb7u1 CVE ID : CVE-2016-6255 Debian Bug : 831857 It has been discovered that libupnps default behaviour allows anyone to write to the filesystem of the system running a libupnp-based server application. For Debian 7 "Wheezy", these problems have been fixed ...

Debian DLA-597-1 : libupnp security update

It has been discovered that libupnp's default behaviour allows anyone to write to the filesystem of the system running a libupnp-based server application. For Debian 7 'Wheezy', these problems have been fixed in version 1.6.17-1.2+deb7u1. We recommend that you upgrade your libupnp packages. NOTE:...

DLA-597-1 libupnp - security update

Bulletin has no description...

libupnp: arbitrary filesystem access

A vulnerability was found in libupnp. If there's no registered handler for a POST or GET request, the default behavior is to write to or read from the filesystem. This allows an unauthenticated attacker to store or retrieve arbitrary data. This issue allows full host filesystem access if the...

Libupnp Arbitrary File Write Vulnerability

libupnp is a portable open source provides an API and open source code UPnP development toolkit . A security vulnerability exists in libupnp. A remote attacker can exploit this vulnerability to read and write arbitrary files on the file system...

libupnp Unhandled POST Write Vulnerability

libupnp is prone to a unhandled POST write vulnerability SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:libupnpproject:libupnp";...

MGASA-2016-0266 Updated libupnp packages fix security vulnerability

libupnp's default behavior allows an unauthenticated user access to a server's filesystem through POST and GET requests CVE-2016-6255...

Updated libupnp packages fix security vulnerability

libupnp's default behavior allows an unauthenticated user access to a server's filesystem through POST and GET requests CVE-2016-6255...

Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the libupnp package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

upnp -- multiple vulnerabilities

Matthew Garett reports: Reported this to upstream 8 months ago without response, so: libupnp's default behaviour allows anyone to write to your filesystem. Seriously. Find a device running a libupnp based server Shodan says there's rather a lot, and POST a file to /testfile. Then GET /testfile...

Three years ago the libupnp library vulnerabilities, Tencent QQ music finally fix it-vulnerability warning-the black bar safety net

Since 3 years ago of a vulnerability, today there is still 6 1 0 million units of the device may be remote code execution, including smartphones, routers, Smart TV, etc., and this vulnerability as early as 3 years ago has been fixed. The vulnerability exists in the UPnP™device is a portable SDK,...

libupnp vulnerability attributed to affect a large number of intelligent system devices-vulnerability warning-the black bar safety net

! The current trend of technology Trend Micro released a report display, the portable UPnP device SDK which there is a 3 year-old security vulnerability, this is called libupnp vulnerability, appeared in millions of Smart TVs, smartphones and routers. The vulnerability is more widely Even more...

Saved the day: QQ music“wormhole”adventures-vulnerability warning-the black bar safety net

0x00 background A weekend afternoon, the terminal security team of little friends at the seaside mission built to roast meat and drink wine, TSRC vulnerability report mailbox receive Trend Micro's classmates sent the vulnerability report, the report referred to the mobile phone QQ music using the...