ZyXEL P-660HW UDP Denial Of Service

Exploit Title: ZyXEL P-660HW UDP fragmentation Denial of Service CVE: CVE-2018-5330 CWE: CWE-400 Exploit Author: Hosein Askari Vendor HomePage: https://www.zyxel.com/ Version : v3 Tested on: ZyXEL P-660HW Category: Network Appliance Author Mail : [email protected] description: ZyXEL P-660HW v...

p-city.com XSS vulnerability

Open Bug Bounty ID: OBB-503234 Description| Value ---|--- Affected Website:| p-city.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

p-a.paris-turf.com XSS vulnerability

Open Bug Bounty ID: OBB-481528 Description| Value ---|--- Affected Website:| p-a.paris-turf.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure...

Zivif PR115-204-P-RS Security Bypass Vulnerability

The Zivif PR115-204-P-RS is a webcam device. A security bypass vulnerability exists in the Zivif PR115-204-P-RS version 2.3.4.2103, which stems from the program's failure to perform sufficient authentication checks on requests sent to a CGI page. A remote attacker can exploit the vulnerability by...

ZyXEL P-660HW Denial of Service Vulnerability

ZyXEL P-660HW is a wireless router from ZyXEL Hutchinson. A denial of service vulnerability exists in the ZyXEL P-660HW v3. A remote attacker can exploit this vulnerability to cause a denial of service CPU consumption via a large number of IP packets with a TTL of 1...

Code injection

ZyXEL P-660HW v3 devices allow remote attackers to cause a denial of service CPU consumption via a flood of IP packets with a TTL of 1...

CVE-2017-17901

ZyXEL P-660HW v3 devices allow remote attackers to cause a denial of service CPU consumption via a flood of IP packets with a TTL of 1...

CVE-2017-17901

ZyXEL P-660HW v3 devices allow remote attackers to cause a denial of service CPU consumption via a flood of IP packets with a TTL of 1...

CVE-2017-17901

The CVE-2017-17901 entry applies to ZyXEL P-660HW v3 devices. Affected component is the router’s IP processing TTL handling, where a flood of IP packets with TTL=1 can cause CPU exhaustion, leading to a remote denial of service. The DoS impact is explicitly stated; no patch/version information or...

CVE-2017-17873

Vanguard Marketplace Digital Products PHP 1.4 has SQL Injection via the PATHINFO to the /p URI...

ZyXEL P-660HW TTL Expiry Denial Of Service

Exploit Title: ZyXEL TTL Expiry Denial of Service CVE: CVE-2017-17901 CWE: CWE-400 Exploit Author: Hosein Askari Vendor HomePage: https://www.zyxel.com/ Version : v3 Tested on: ZyXEL P-660HW Category: Network Appliance Author Mail : [email protected] description: According to RFC 791, the...

CVE-2017-17107

Zivif PR115-204-P-RS V2.3.4.2103 web cameras contain a hard-coded cat1029 password for the root user. The SONIX operating system's setup renders this password unchangeable and it can be used to access the device via a TELNET session...

CVE-2017-17106

Credentials for Zivif PR115-204-P-RS V2.3.4.2103 Webcams can be obtained by an unauthenticated remote attacker using a standard web /cgi-bin/hi3510/param.cgi?cmd=getuser HTTP request. This vulnerability exists because of a lack of authentication checks in requests to CGI pages...

Hardcoded credentials

Zivif PR115-204-P-RS V2.3.4.2103 web cameras contain a hard-coded cat1029 password for the root user. The SONIX operating system's setup renders this password unchangeable and it can be used to access the device via a TELNET session...

Design/Logic Flaw

Credentials for Zivif PR115-204-P-RS V2.3.4.2103 Webcams can be obtained by an unauthenticated remote attacker using a standard web /cgi-bin/hi3510/param.cgi?cmd=getuser HTTP request. This vulnerability exists because of a lack of authentication checks in requests to CGI pages...

Command injection

Zivif PR115-204-P-RS V2.3.4.2103 and V4.7.4.2121 and possibly in-between versions web cameras are vulnerable to unauthenticated, blind remote command injection via CGI scripts used as part of the web interface, as demonstrated by a...

CVE-2017-17105

Zivif PR115-204-P-RS V2.3.4.2103 and V4.7.4.2121 and possibly in-between versions web cameras are vulnerable to unauthenticated, blind remote command injection via CGI scripts used as part of the web interface, as demonstrated by a...

CVE-2017-17106

Credentials for Zivif PR115-204-P-RS V2.3.4.2103 Webcams can be obtained by an unauthenticated remote attacker using a standard web /cgi-bin/hi3510/param.cgi?cmd=getuser HTTP request. This vulnerability exists because of a lack of authentication checks in requests to CGI pages. Recent assessments...

CVE-2017-17106

Credentials for Zivif PR115-204-P-RS V2.3.4.2103 Webcams can be obtained by an unauthenticated remote attacker using a standard web /cgi-bin/hi3510/param.cgi?cmd=getuser HTTP request. This vulnerability exists because of a lack of authentication checks in requests to CGI pages...

CVE-2017-17107

Zivif PR115-204-P-RS V2.3.4.2103 web cameras contain a hard-coded cat1029 password for the root user. The SONIX operating system's setup renders this password unchangeable and it can be used to access the device via a TELNET session...