The vulnerability of the Qemu-NBD hardware emulation server allows a hacker to trigger a maintenance failure.

The vulnerability of the Qemu-NBD hardware emulation server of QEMU is related to errors during connection establishment. Exploiting this vulnerability allows a remote attacker to cause a service failure by disconnecting the server from the client upon attempting to establish a connection...

D-Link Routers - Command Injection

D-Link Routers - Command Injection Shell command injection CVE: CVE-2018-10823 CVSS v3: 9.1 AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H Description: An issue was discovered on D-Link routers: DWR-116 through 1.06, DWR-512 through 2.02, DWR-712 through 2.02, DWR-912 through 2.02, DWR-921 through 2.02,...

CVE-2018-17594

AirTies Air 5443v2 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter...

FUJI XEROX DocuCentre-V 3065 Printer - Remote Command Execution

FUJI XEROX DocuCentre-V 3065 Printer - Remote Command Execution Exploit Title: FUJI XEROX DocuCentre-V 3065 Printer - Remote Command Execution Date: 2018-09-05 Exploit Author: vrsystem Vendor Homepage: https://www.fujixerox.com.cn/ Software Link: https://www.fujixerox.com.cn/ Version:...

PLANEX CS-W50HD Command Injection Vulnerability

PLANEX is a Japanese networking brand company brands PCI and PLANEX. We provide products from enterprise customers to home customers e.g., network cards, routers, switches, L3 managed switches, accessories, Bluetooth products, print servers, Apple peripherals, network storage devices, etc.. The...

Belkin IoT Smart Plug Flaw Allows Remote Code Execution in Smart Homes

A vulnerability in a popular Wi-Fi–connected electric outlet for smart homes would allow a remote attacker to take over smart TVs and other devices, as well as execute code – potentially exposing tens of thousands of consumers to cryptomining, ransomware, information disclosure, botnet enslavemen...

CVE-2018-12577

The Ping and Traceroute features on TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n devices allow authenticated blind Command Injection...

The vulnerability of the Promontory chip, which is used together with Ryzen and Ryzen Pro processors, is related to the presence of undeclared capabilities of the ASIC chip that makes part of the Promontory chip. This allows access to physical memory.

The vulnerability of the Promontory chip, which is used together with Ryzen and Ryzen Pro processors, is related to the presence of undeclared capabilities of the ASIC chip that makes up the Promontory chip. Exploiting this vulnerability allows a perpetrator who has access to the targeted compute...

The vulnerability of the Promontory chip, which is used together with Ryzen and Ryzen Pro processors, is related to the presence of undeclared capabilities in its microprogramming software. This vulnerability allows access to physical memory.

The vulnerability of the Promontory chip, which is used together with Ryzen and Ryzen Pro processors, is related to the presence of undeclared capabilities in its microprogramming environment. Exploiting this vulnerability allows a perpetrator who has access to the targeted computer and possesses...

F5 BIG-IP Kernel Reboot Vulnerability

F5 BIG-IP is an all-in-one network device from F5 USA that integrates network traffic management, application security management, load balancing and other functions. A security vulnerability exists in the F5 BIG-IP. An attacker could exploit this vulnerability to cause the Traffic Management...

Moxa OnCell G3100-HSPA Series Denial of Service Vulnerability

The Moxa OnCell G3100-HSPA is an intelligent, feature-rich wireless communications platform that enables networked and serial devices to connect to cellular TCP/IP networks. A denial of service vulnerability exists in the Moxa OnCell G3100-HSPA Series, which can be exploited by an attacker to edi...

F5 BIG-IP Policy Enforcement Manager URL Classification Denial of Service Vulnerability

F5 BIG-IP is an all-in-one network device from F5 USA that integrates network traffic management, application security management, load balancing and other functions. A denial of service vulnerability exists in the F5 BIG-IP Policy Enforcement Manager URL Classification, which allows an...

PHOENIX CONTACT mGuard

CVSS v3 7.8 ATTENTION: Low skill level to exploit. Vendor: PHOENIX CONTACT Equipment: mGuard Vulnerability: Improper Validation of Integrity Check Value AFFECTED PRODUCTS The following versions of mGuard, a network device, are affected: mGuard firmware versions 7.2 to 8.6.0 IMPACT Successful...

Huawei Router HG532 - Arbitrary Command Execution

import threading, sys, time, random, socket, re, os, struct, array, requests from requests.auth import HTTPDigestAuth ips = opensys.argv1, "r".readlines cmd = "" Your MIPS SSHD rm = "\n \n \n $" + cmd + "\n$echo HUAWEIUPNP\n\n \n " class exploitthreading.Thread: def init self, ip:...

Moderate: Red Hat Security Advisory: qemu-kvm-rhev security and bug fix update

An update for qemu-kvm-rhev is now available for Red Hat OpenStack Platform 10.0 Newton. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

CVE-2017-16673

Datto Backup Agent 1.0.6.0 and earlier does not authenticate incoming connections. This allows an attacker to impersonate a Datto Backup Appliance to "pair" with the agent and issue requests to this agent, if the attacker can reach the agent on TCP port 25566 or 25568, and send unspecified...

Information disclosure

Datto Backup Agent 1.0.6.0 and earlier does not authenticate incoming connections. This allows an attacker to impersonate a Datto Backup Appliance to "pair" with the agent and issue requests to this agent, if the attacker can reach the agent on TCP port 25566 or 25568, and send unspecified...

Circle with Disney Rclient SSH Persistent Remote Access Vulnerability(CVE-2017-12084)

Summary A backdoor vulnerability exists in remote control functionality of Circle with Disney running firmware 2.0.1. A specific set of network packets can remotely start an SSH server on the device, resulting in a persistent backdoor. An attacker send an API call to enable the SSH server. Tested...

Circle with Disney Firmware Update Signature Check Bypass Vulnerability(CVE-2017-2898)

Summary An exploitable vulnerability exists in the signature verification of the firmware update functionality of Circle with Disney. Specially crafted network packets can cause an unsigned firmware to be installed in the device resulting in arbitrary code execution. An attacker can send a series...

Circle with Disney WiFi Restart SSID Parsing Command Injection Vulnerability(CVE-2017-2915)

Summary An exploitable vulnerability exists in the WiFi configuration functionality of Circle with Disney running firmware 2.0.1. A specially crafted SSID can cause the device to execute arbitrary shell commands. An attacker needs to send a couple of HTTP requests and setup an access point...