CVE-2016-3962-Exploit

CVE-2016-3962, CVE-2016-3989 PoC 익스플로잇 이것은 Meinberg NTP 시간 서버의 웹 구성 인터페이스 버전 V5.30p에 대한 개념 증명 익스플로잇입니다. 또한 이 익스플로잇은 CVE-2016-3989을 사용하여 루트 사용자로 권한 상승을 수행합니다. 취약점에 대한 자세한 내용은 다음에서 확인할 수 있습니다: https://www.securifera.com/advisories/cve-2016-3962-3988-3989/...

EUVD-2014-5305

Malware in sbrugna...

Meinberg NTP Permissions, Privileges, and Access Controls (CVE-2016-3989)

The NTP time-server interface on Meinberg IMS-LANTIME M3000, IMS- LANTIME M1000, IMS-LANTIME M500, LANTIME M900, LANTIME M600, LANTIME M400, LANTIME M300, LANTIME M200, LANTIME M100, SyncFire 1100, and LCES devices with firmware before 6.20.004 allows remote authenticated users to obtain root...

Meinberg NTP Time Server ELX800/GPS M4x V5. 30p remote code execution and elevation of Privilege vulnerabilities

No description provided by source...

Meinberg NTP Time Server ELX800/GPS M4x 5.30p Command Execution

!/usr/bin/python EDB Note: Source https://github.com/securifera/CVE-2016-3962-Exploit EDB Note: More info https://www.securifera.com/blog/2016/07/17/time-to-patch-rce-on-meinberg-ntp-time-server/ 271 - trigger notifications 299 - copy user defined notifications Kernel Version: 2.6.15.1 System...

Meinberg NTP Time Server ELX800/GPS M4x V5.30p - Remote Command Execution / Escalate Privileges

Exploit for hardware platform in category remote exploits !/usr/bin/python EDB Note: Source https://github.com/securifera/CVE-2016-3962-Exploit EDB Note: More info https://www.securifera.com/blog/2016/07/17/time-to-patch-rce-on-meinberg-ntp-time-server/ 271 - trigger notifications 299 - copy user...

Meinberg NTP Time Server ELX800GPS M4x V5.30p - Remote Command Execution Escalate Privileges

Meinberg NTP Time Server ELX800GPS M4x V5.30p - Remote Command Execution Escalate Privileges !/usr/bin/python EDB Note: Source https://github.com/securifera/CVE-2016-3962-Exploit EDB Note: More info https://www.securifera.com/blog/2016/07/17/time-to-patch-rce-on-meinberg-ntp-time-server/ 271 -...

Meinberg NTP Time Server ELX800/GPS M4x V5.30p - Remote Command Execution / Escalate Privileges

!/usr/bin/python EDB Note: Source https://github.com/securifera/CVE-2016-3962-Exploit EDB Note: More info https://www.securifera.com/blog/2016/07/17/time-to-patch-rce-on-meinberg-ntp-time-server/ 271 - trigger notifications 299 - copy user defined notifications Kernel Version: 2.6.15.1 System...

CVE-2016-3988

Multiple stack-based buffer overflows in the NTP time-server interface on Meinberg IMS-LANTIME M3000, IMS-LANTIME M1000, IMS-LANTIME M500, LANTIME M900, LANTIME M600, LANTIME M400, LANTIME M300, LANTIME M200, LANTIME M100, SyncFire 1100, and LCES devices with firmware before 6.20.004 allow remote...

CVE-2014-5417

Cross-site scripting XSS vulnerability in Meinberg NTP Server firmware on LANTIME M-Series devices 6.15.019 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in Meinberg NTP Server firmware on LANTIME M-Series devices 6.15.019 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-5417 Meinberg Radio Clocks LANTIME M-Series

Cross-site scripting XSS vulnerability in Meinberg NTP Server firmware on LANTIME M-Series devices 6.15.019 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-5417

CVE-2014-5417 affects Meinberg NTP Server firmware on LANTIME M-Series (≤ 6.15.019). The web interface contains a reflected/XSS flaw in input handling that could allow remote attackers to inject arbitrary script/HTML via unspecified vectors. Mitigation: Meinberg released firmware 6.15.020 to reso...

PT-2014-6461

Name of the Vulnerable Software and Affected Versions Meinberg NTP Server firmware on LANTIME M-Series devices versions 6.15.019 and earlier Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For...

CVE-2014-5417: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Meinberg NTP Server firmware on LANTIME M-Series devices 6.15.019 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...