PT-2017-15513

Name of the Vulnerable Software and Affected Versions Bastet in P10 Plus and P10 smart phones versions earlier than VKY-AL00C00B123 Bastet in P10 Plus and P10 smart phones versions earlier than VTR-AL00C00B123 Description The issue is related to a buffer overflow. An attacker with root privilege ...

PT-2017-18206

Name of the Vulnerable Software and Affected Versions Huawei smart phones with software versions earlier than Prague-AL00AC00B205 Huawei smart phones with software versions earlier than Prague-AL00BC00B205 Huawei smart phones with software versions earlier than Prague-AL00CC00B205 Huawei smart...

PT-2017-18213

Name of the Vulnerable Software and Affected Versions Huawei smart phones versions earlier than NEM-AL10C00B356 Huawei smart phones versions earlier than Berlin-L21HNC432B360 Description The issue is caused by a buffer overflow due to the lack of parameter validation in the driver. An attacker ca...

PT-2017-18214

Name of the Vulnerable Software and Affected Versions Huawei smart phones versions earlier than NEM-AL10C00B356 Huawei smart phones versions earlier than Berlin-L21HNC432B360 Description The issue is caused by a buffer overflow due to the lack of parameter validation in the driver. An attacker ca...

PT-2017-15512

Name of the Vulnerable Software and Affected Versions Bastet in P10 Plus and P10 smart phones with software earlier than VKY-AL00C00B123 versions Bastet in P10 Plus and P10 smart phones with software earlier than VTR-AL00C00B123 versions Description The issue is related to a buffer overflow. An...

PT-2017-18191

Name of the Vulnerable Software and Affected Versions Huawei mobile phones with software earlier than MHA-AL00BC00B231 Description The issue is related to a lack of parameter validation, which can lead to a denial-of-service DOS condition. An attacker could potentially trick a user into installin...

Vonage VDV-23 - Denial of Service Exploit

Exploit for hardware platform in category dos / poc Overview During an evaluation of the Vonage home phone router, it was identified that the loginUsername and loginPassword parameters were vulnerable to a buffer overflow. This overflow caused the router to crash and reboot. Further analysis will...

CVE-2017-8200: Out-of-bounds Read

MAX PRESENCE V100R001C00, TP3106 V100R002C00, TP3206 V100R002C00 have an out-of-bounds read vulnerability in H323 protocol. An attacker logs in to the system as a user and send crafted packets to the affected products. Due to insufficient verification of the packets, successful exploit will cause...

Vonage VDV-23 - Denial of Service

Overview During an evaluation of the Vonage home phone router, it was identified that the loginUsername and loginPassword parameters were vulnerable to a buffer overflow. This overflow caused the router to crash and reboot. Further analysis will be performed to find out if the the crash is...

CVE-2017-16902

On the Vonage VDV-23 115 3.2.11-0.9.40 home router, sending a long string of characters in the loginPassword and/or loginUsername field to goform/login causes the router to reboot...

CVE-2017-16902

On the Vonage VDV-23 115 3.2.11-0.9.40 home router, sending a long string of characters in the loginPassword and/or loginUsername field to goform/login causes the router to reboot...

Code injection

On the Vonage VDV-23 115 3.2.11-0.9.40 home router, sending a long string of characters in the loginPassword and/or loginUsername field to goform/login causes the router to reboot...

CVE-2017-16902

Vonage VDV-23 115 devices running firmware 3.2.11-0.9.40 are affected by CVE-2017-16902. A long string in loginUsername or loginPassword sent to goform/login can trigger a crash and router reboot, effectively a denial-of-service. CNVD-2017-37697 corroborates the reboot via a long login field; 133...

CVE-2017-16902

On the Vonage VDV-23 115 3.2.11-0.9.40 home router, sending a long string of characters in the loginPassword and/or loginUsername field to goform/login causes the router to reboot...

PT-2017-14629

Name of the Vulnerable Software and Affected Versions Vonage VDV-23 115 version 3.2.11-0.9.40 Description The issue occurs when a long string of characters is sent in the loginPassword and/or loginUsername field to the "goform/login" endpoint, causing the router to reboot. Recommendations For...

DLink DIR-605L < 2.08 - Denial of Service Exploit

Exploit for hardware platform in category dos / poc Exploit Title: D-Link DIR605L ROUTER=$1 if "$" -ne 1 ; then echo "usage: $0 " exit fi curl http://$ROUTER/Tools/ 0day.today 2018-04-14...

Huawei Honor 8 Buffer Overflow Vulnerability

The Huawei Honor 8 is a smartphone from the Chinese company Huawei Huawei. The Huawei Honor 8 suffers from a buffer overflow vulnerability due to a lack of parameter checking in the phone's CameraISP driver. An attacker exploits the vulnerability by tricking users into installing a malicious...

How to Defragment a PVS vDisk with minimum downtime

The purpose of this guide is to instruct a PVS Administrator on the quickest way to perform a defragmentation process on a vDisk, while minimizing the amount of downtime incurred for the PVS Targets. It is important to note that, while this process can be performed without having to Power Down th...

D-Link DIR-605L < 2.08 - Denial of Service

Exploit Title: D-Link DIR605L ROUTER=$1 if "$" -ne 1 ; then echo "usage: $0 " exit fi curl http://$ROUTER/Tools/...

Circle with Disney Apid Server Fork Denial of Service VulnerabilityI(CVE-2017-2889)

Summary An exploitable Denial of Service vulnerability exists in the API daemon of Circle with Disney running firmware 2.0.1. A large amount of simultaneous TCP connections causes the APID daemon to repeatedly fork, causing the daemon to run out of memory and trigger a device reboot. An attacker...