58 matches found
EUVD-2004-0306
Malware in sbrugna...
EUVD-2018-16639
Malware in sbrugna...
EUVD-2007-1639
Malware in sbrugna...
EUVD-2013-0182
Malware in sbrugna...
CVE-2013-0139
The Arecont Vision AV1355DN MegaDome camera allows remote attackers to cause a denial of service video-capture outage via a packet to UDP port 69...
Backdoor.Win32.Psychward.03.a Weak Hardcoded Password
Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/d069738f18957117367b8a79195a6a96.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Psychward.03.a Vulnerability: Weak Hardcoded Password Description: The malware listen...
Pinkie 2.15 - TFTP Remote Buffer Overflow Exploit
Exploit Title: Pinkie 2.15 - TFTP Remote Buffer Overflow PoC Discovered by: Yehia Elghaly Vendor Homepage: http://www.ipuptime.net/ Software Link : http://ipuptime.net/PinkieSetup.zip Tested Version: 2.15 Vulnerability Type: Buffer Overflow DoS Remote Tested on OS: Windows XP SP3 - Windows 7...
CVE-2020-24990
An issue was discovered in QSC Q-SYS Core Manager 8.2.1. By utilizing the TFTP service running on UDP port 69, a remote attacker can perform a directory traversal and obtain operating system files via a TFTP GET request, as demonstrated by reading /etc/passwd or /proc/version...
CVE-2020-24990: Improper Limitation of a Pathname to a Restricted Directory
An issue was discovered in QSC Q-SYS Core Manager 8.2.1. By utilizing the TFTP service running on UDP port 69, a remote attacker can perform a directory traversal and obtain operating system files via a TFTP GET request, as demonstrated by reading /etc/passwd or /proc/version...
PT-2020-15879
Name of the Vulnerable Software and Affected Versions QSC Q-SYS Core Manager version 8.2.1 QSC Q-SYS Core Manager versions prior to 8.2.1 Description An issue was discovered in QSC Q-SYS Core Manager. A remote attacker can perform a directory traversal via the TFTP service running on UDP port 69...
CVE-2018-4853
A vulnerability has been identified in SICLOCK TC100 All versions and SICLOCK TC400 All versions. An attacker with network access to port 69/udp could modify the firmware of the device...
CVE-2018-4854
A vulnerability has been identified in SICLOCK TC100 All versions and SICLOCK TC400 All versions. An attacker with network access to port 69/udp could modify the administrative client stored on the device. If a legitimate user downloads and executes the modified client from the affected device,...
CVE-2018-4853
A vulnerability has been identified in SICLOCK TC100 All versions and SICLOCK TC400 All versions. An attacker with network access to port 69/udp could modify the firmware of the device...
CVE-2018-4853: Missing Authentication for Critical Function
A vulnerability has been identified in SICLOCK TC100 All versions and SICLOCK TC400 All versions. An attacker with network access to port 69/udp could modify the firmware of the device...
PT-2018-16572
Name of the Vulnerable Software and Affected Versions SICLOCK TC100 All versions SICLOCK TC400 All versions Description A vulnerability has been identified that allows an attacker with network access to port 69/udp to modify the administrative client stored on the device. If a legitimate user...
PT-2018-16571
Name of the Vulnerable Software and Affected Versions SICLOCK TC100 All versions SICLOCK TC400 All versions Description A vulnerability has been identified that allows an attacker with network access to port 69/udp to modify the firmware of the device. Recommendations For SICLOCK TC100, restrict...
CVE-2018-4854: Missing Authentication for Critical Function
A vulnerability has been identified in SICLOCK TC100 All versions and SICLOCK TC400 All versions. An attacker with network access to port 69/udp could modify the administrative client stored on the device. If a legitimate user downloads and executes the modified client from the affected device,...
CVE-2017-7237
The Spiceworks TFTP Server, as distributed with Spiceworks Inventory 7.5, allows remote attackers to access the Spiceworks data\configurations directory by leveraging the unauthenticated nature of the TFTP service for all clients who can reach UDP port 69, as demonstrated by a WRQ aka Write reque...
PT-2017-17599
Name of the Vulnerable Software and Affected Versions Spiceworks Inventory version 7.5 Description The issue allows remote attackers to access the Spiceworks data/configurations directory by leveraging the unauthenticated nature of the TFTP service for all clients who can reach UDP port 69. This...
3Com TFTP Service <= 2.0.1 (Long Transporting Mode) Overflow Exploit
No description provided by source. 3comtftpdxpsp2.rb Copyright C cthulhu This is a poc intended to exploit the 3Com TFTP Service version 2.0.1 long transporting mode buffer overflow under xp sp2 english Vulnerability discovered by Liu Qixu Usage : ruby 3comftpdxpsp2.rb victimhost victimport Defau...