967 matches found
Comcast Cisco DPC3939 Root Access
The vulnerability in the embedded microprogramming software of Comcast’s Cisco DPC3939 router is related to deficiencies in access control for TELNET sessions. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain root access to the Linux network processor syste...
CVE-2017-9328
Shell metacharacter injection vulnerability in /usr/www/include/ajax/GetTest.php in TerraMaster TOS before 3.0.34 leads to remote code execution as root...
D-Link DIR8xx Remote Root Code Execution Exploit
D-Link DIR8xx routers suffers from a remote root code execution vulnerability. Due to error in hnap protocol implementation we can overflow stack and execute any sh commands under root priviliges. E-DB Note:...
D-Link DIR8xx Remote Root Code Execution
Due to error in hnap protocol implementation we can overflow stack and execute any sh commands under root priviliges. E-DB Note: https://embedi.com/blog/enlarge-your-botnet-top-d-link-routers-dir8xx-d-link-routers-cruisin-bruisin E-DB Note:...
CVE-2017-14127
Command Injection in the Ping Module in the Web Interface on Technicolor TD5336 OIFwv7 devices allows remote attackers to execute arbitrary OS commands as root via shell metacharacters in the pingAddr parameter to mntping.cgi...
CVE-2017-14116
The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG599 device, when IP Passthrough mode is not used, configures WAN access to a caserver https service with the tech account and an empty password, which allows remote attackers to obtain root privileges by establishing a session on port 49955 an...
NoviFlow NoviWare and NoviSwitch Device Stack Buffer Overflow Vulnerability
NoviFlow NoviWare and NoviSwitch devices are both products of NoviFlow Canada.NoviSwitch devices are a series of switching devices.NoviWare is the switching software used in... A stack buffer overflow vulnerability exists in the Network interface of the cliengine and noviengine services in NoviFl...
CVE-2017-12786
Network interfaces of the cliengine and noviengine services, included in the NoviWare software distribution through NW400.2.6 and deployed on NoviSwitch devices, can be inadvertently exposed if an operator attempts to modify ACLs, because of a bug when ACL modifications are applied. This could be...
Unitrends Backup Authorization Issues Vulnerability (CNVD-2017-28329)
Unitrends Backup UB is a set of data protection software from the American company Unitrends. The software provides data backup, data recovery and deduplication functions. A security vulnerability exists in the api/storage web interface in versions of UB prior to 10.0.0, which stems from the...
CVE-2017-12478
It was discovered that the api/storage web interface in Unitrends Backup UB before 10.0.0 has an issue in which one of its input parameters was not validated. A remote attacker could use this flaw to bypass authentication and execute arbitrary commands with root privilege on the target system...
CVE-2017-12477
It was discovered that the bpserverd proprietary protocol in Unitrends Backup UB before 10.0.0, as invoked through xinetd, has an issue in which its authentication can be bypassed. A remote attacker could use this issue to execute arbitrary commands with root privilege on the target system...
CVE-2017-9482
The Comcast firmware on Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST devices allows remote attackers to obtain root access to the Network Processor NP Linux system by enabling a TELNET daemon through CVE-2017-9479 exploitation and then establishing a TELNET session...
CVE-2017-9479
The Comcast firmware on Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST devices allows remote attackers to execute arbitrary commands as root by leveraging local network access and connecting to the syseventd server, as demonstrated by copying configuration data into a...
CVE-2017-9482: Incorrect Permission Assignment for Critical Resource
The Comcast firmware on Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST devices allows remote attackers to obtain root access to the Network Processor NP Linux system by enabling a TELNET daemon through CVE-2017-9479 exploitation and then establishing a TELNET session...
PT-2017-2835
Name of the Vulnerable Software and Affected Versions Cisco DPC3939 version dpc3939-P20-18-v303r20421746-170221a-CMCST Description The issue is related to insufficient access control to the Network Processor Linux system, allowing remote attackers to obtain root access to the Application Processo...
Citrix SD-WAN 9.1.2.26.561201 Remote Command Injection
Exploit Title: Citix SD-WAN logout cookie preauth Remote Command Injection Vulnerablity Date: 02/20/2017 Exploit Author: xort @ Critical Start Vendor Homepage: www.citrix.com Software Link: https://www.citrix.com/downloads/cloudbridge/ Version: 9.1.2.26.561201 Tested on: 9.1.2.26.561201 OS...
Netscaler SD-WAN 9.1.2.26.561201 - Command Injection (Metasploit)
Exploit Title: Citix SD-WAN logout cookie preauth Remote Command Injection Vulnerablity Date: 02/20/2017 Exploit Author: xort @ Critical Start Vendor Homepage: www.citrix.com Software Link: https://www.citrix.com/downloads/cloudbridge/ Version: 9.1.2.26.561201 Tested on: 9.1.2.26.561201 OS...
Barracuda Load Balancer Firmware 6.0.1.006 Remote Root
Exploit Title: Barracuda Load Balancer Firmware 'Barracuda Load Balancer Firmware %q This module exploits a remote command execution vulnerability in the Barracuda Load Balancer Firmware Version = v6.0.1.006 2016-08-19 by exploiting a vulnerability in the web administration interface. By sending ...
Barracuda Load Balancer Firmware 6.0.1.006 - Remote Command Injection (Metasploit)
Barracuda Load Balancer Firmware 6.0.1.006 - Remote Command Injection Metasploit Exploit Title: Barracuda Load Balancer Firmware 'Barracuda Load Balancer Firmware %q This module exploits a remote command execution vulnerability in the Barracuda Load Balancer Firmware Version = v6.0.1.006 2016-08-...