NETGEAR WNR854T 安全漏洞

The NETGEAR WNR854T is a wireless router from NETGEAR. A command execution vulnerability exists in the NETGEAR WNR854T version 1.5.2, which stems from the nvram parameter of the ppoepeermac function of the post.cgi file failing to correctly filter for constructed command special characters,...

Dell DM5500 Operating System Command Injection Vulnerability

The Dell DM5500 is an integrated solution from Dell, Inc. It provides industry-leading deduplication, data protection solutions and multi-cloud capabilities. The Dell DM5500 suffers from an operating system command injection vulnerability that stems from a failure to properly filter construct...

Dell DM5500 Path Traversal Vulnerability

The Dell DM5500 is an integrated solution from Dell, Inc. It provides industry-leading deduplication, data protection solutions and multi-cloud capabilities. The Dell DM5500 suffers from a path traversal vulnerability that stems from a failure to properly filter special elements in the path of a...

Dell DM5500 Information Disclosure Vulnerability

The Dell DM5500 is an integrated solution from Dell, Inc. It provides industry-leading deduplication, data protection solutions and multi-cloud capabilities. The Dell DM5500 suffers from an information disclosure vulnerability that originates from the inclusion of a plain text password in the PPO...

CVE-2023-44300

CVE-2023-44300 applies to Dell DM5500 (version 5.14.0.0). The vulnerability is a plain-text password storage issue in the PPOE component, enabling a local privileged attacker to disclose service credentials and access the vulnerable application with the compromised account’s privileges. Supported...

CVE-2023-44306

Dell DM5500 exposes a path traversal vulnerability in the PPOE component that could allow a remote attacker with high privileges to overwrite configuration files on the server filesystem. The affected product is the Dell DM5500 appliance; the vulnerability arises from improper filtering of path e...

CVE-2023-44305

Dell PowerProtect Data Manager DM5500 (version 5.14.0.0) is affected by a stack-based buffer overflow in the appliance. An unauthenticated remote attacker could crash the affected process or execute arbitrary code by sending specially crafted input data. Affected component is the DM5500 appliance...

CVE-2023-44304

CVE-2023-44304 affects the Dell DM5500 appliance. A privilege escalation exists that could allow a remote attacker with low privileges to escape the restricted shell and gain root access to the device. The connected PT-2023-29201 entry references an issue in the PPOE component with the same effec...

CVE-2023-44291

Dell PowerProtect Data Manager DM5500 (v5.14.0.0) is affected by an OS command injection in the PPOE component. The root cause is improper neutralization of special characters in commands, allowing a remote, high-privilege attacker with network access to run arbitrary OS commands on the underlyin...

Dell DM5500 操作系统命令注入漏洞

The Dell DM5500 is an integrated solution from Dell, Inc. It provides industry-leading deduplication, data protection solutions and multi-cloud capabilities. The Dell DM5500 suffers from an operating system command injection vulnerability that stems from a failure to properly filter construct...

NETGEAR WNDR3400 N600 Wireless Dual Band - Multiple Vulnerabilities

NETGEAR WNDR3400 N600 Wireless Dual Band - Multiple Vulnerabilities Title: Multiple vulnerabilities in NETGEAR N600 WIRELESS DUAL BAND WNDR3400 ==================================================================================== Notification Date: 4/14/2014 Affected Vendor: NETGEAR N600 WIRELESS...

Tenda W309R Router 5.07.46 - Configuration Disclosure

Tenda W309R Router 5.07.46 - Configuration Disclosure --------------------------------------------------- Exploit Title: Tenda W309R Configuration Enumeration without Authentication Author: SANTHO Vendor Homepage: http://www.tenda.cn Product link:...

Netgear DGN2200B pppoe.cgi Remote Command Execution Vulnerability

Some Netgear Routers are vulnerable to an authenticated OS command injection on their web interface. Default credentials for the web interface are admin/admin or admin/password. Since it is a blind os command injection vulnerability, there is no output for the executed command when using the cmd...

D-Link DSL-2640U PPoE Data Disclosure (ADSL Router)

Exploit for hardware platform in category web applications ================================================================================ || | | || || || |/ | || |/ | | | | | | | | | | | \ | | | | \ ================================================================================ Exploit Title:...

MoroccoTel Box Default Open Telnet Password

Exploit for windows platform in category remote exploits a "vulnerability" was identified on MoroccoTel Boxes: a telnet server is running, open to the web, with a default password of admin or 123456 This critical vulnerability can affect the entire network of a Country. Solution: change the defau...

MoroccoTel Default Password

Hi, a "vulnerability" was identified on MoroccoTel Boxes: a telnet server is running, open to the web, with a default password of admin or 123456 This critical vulnerability can affect the entire network of a Country. Solution: change the default password account or modify the default firmware NB...

CVE-2004-0564

CVE-2004-0564 concerns rp-pppoe (pppoe) when the rp-pppoe package is configured to run setuid root. The description states that if rp-pppoe is installed or configured to operate with setuid root contrary to its design, local users can overwrite arbitrary files. Several connected sources (SUSE and...