Lens Peek-a-View Elevation of Privilege Vulnerability

Lens Peek-a-View is a video monitoring device for babies. An elevation of privilege vulnerability exists in Lens Peek-a-View. An attacker can exploit this vulnerability to gain root privileges...

The vulnerability of the udp.c component in the Linux operating system’s kernel allows a hacker to execute arbitrary code.

The vulnerability of the udp.c component in the Linux operating system’s kernel is related to improperly implemented security checks for standard elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending UDP packets that trigger insecure calculations of...

Default credentials

Lens Peek-a-View has a password of 2601hx for the backdoor admin account, a password of user for the backdoor user account, and a password of guest for the backdoor guest account...

CVE-2015-2885

Lens Peek-a-View has a password of 2601hx for the backdoor admin account, a password of user for the backdoor user account, and a password of guest for the backdoor guest account...

CVE-2015-2885

Lens Peek-a-View is affected by an elevation of privilege / backdoor access vulnerability due to hard-coded backdoor credentials: admin (password 2601hx), user (password user), and guest (password guest). This condition potentially allows unauthorized access to the device, depending on how backdo...

CVE-2015-2885: Use of Hard-coded Credentials

Lens Peek-a-View has a password of 2601hx for the backdoor admin account, a password of user for the backdoor user account, and a password of guest for the backdoor guest account...

ALPINE-CVE-2016-10229

udp.c in the Linux kernel before 4.5 allows remote attackers to execute arbitrary code via UDP traffic that triggers an unsafe second checksum calculation during execution of a recv system call with the MSGPEEK flag...

UBUNTU-CVE-2016-10229

udp.c in the Linux kernel before 4.5 allows remote attackers to execute arbitrary code via UDP traffic that triggers an unsafe second checksum calculation during execution of a recv system call with the MSGPEEK flag...

OpenSSL SSL_peek() Denial of Service Vulnerability

OpenSSL is an open source implementation of SSL used to enable strong encryption of network communications and is now widely used in a variety of web applications. OpenSSL 1.1.0 SSL/TLS hangs after receiving an empty record during an SSLpeek call, which can be exploited by malicious users to...

PT-2015-3333

Name of the Vulnerable Software and Affected Versions Lens Peek-a-View affected versions not specified Description The issue concerns the presence of predefined user accounts in the Lens Peek-a-View wireless video camera. Specifically, there are backdoor accounts with hardcoded passwords: admin...

CVE-2014-6023

The s-peek credit rating report aka com.rhomobile.speek application 2.1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The s-peek credit rating report aka com.rhomobile.speek application 2.1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6023

The s-peek credit rating report aka com.rhomobile.speek application 2.1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6023

The CVE-2014-6023 issue affects the Android app s-peek credit rating report (com.rhomobile.speek) version 2.1.3. The root cause is that the app does not verify X.509 certificates from SSL servers, exposing users to man-in-the-middle attacks that can spoof servers and harvest sensitive information...

CVE-2014-6023: Undefined Security Weakness

The s-peek credit rating report aka com.rhomobile.speek application 2.1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Oracle Linux 5 / 6 : unbreakable enterprise kernel (ELSA-2014-3054)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-3054 advisory. - filter: prevent nla extensions to peek beyond the end of the message Mathias Krause Orabug: 19315783 CVE-2014-3144 CVE-2014-3145 - futex: Forbid...

unbreakable enterprise kernel security update

2.6.39-400.215.6 - filter: prevent nla extensions to peek beyond the end of the message Mathias Krause Orabug: 19315782 CVE-2014-3144 CVE-2014-3145 2.6.39-400.215.5 - ntty: Fix nttywrite crash when echoing in raw mode Peter Hurley Orabug: 18756449 CVE-2014-0196 CVE-2014-0196...

PT-2013-2218 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.8 Description: The issue is related to the skb recv datagram function in the Linux kernel, which does not properly handle the MSG PEEK flag with zero-length data. This allows local users to cause a denial of...

PHP < 4.4.5/5.2.1 - 'shmop' SSL RSA Private-Key Disclosure

?php //////////////////////////////////////////////////////////////////////// // // // | || | | | | | | | || || \ // // | |/ || '|/ |/ -| ' \ / -/ |||| /| || / // // ||||,||| ,|||||||,| || |||||| // // // // Proof of concept code from the Hardened-PHP Project // // C Copyright 2007 Stefan...

DEBIAN-CVE-2004-1012

The argument parser of the PARTIAL command in Cyrus IMAP Server 2.2.6 and earlier allows remote authenticated users to execute arbitrary code via a certain command "bodyp" that is treated as a different command "body.peek" and causes an index increment error that leads to an out-of-bounds memory...