666 matches found
Cisco Application Policy Infrastructure Controller Binary Files Privilege Escalation Vulnerability
A vulnerability in the installation procedure for Cisco Application Policy Infrastructure Controller APIC devices could allow an authenticated, local attacker to gain root-level privileges. The vulnerability is due to the use of incorrect installation and permissions settings for binary files...
Cisco Application Policy Infrastructure Controller Binary Files Privilege Escalation Vulnerability
A vulnerability in the installation procedure for Cisco Application Policy Infrastructure Controller APIC devices could allow an authenticated, local attacker to gain root-level privileges. The vulnerability is due to the use of incorrect installation and permissions settings for binary files...
Cisco Prime Infrastructure Remote Code Execution Vulnerability (cisco-sa-20160406-remcode) - Version Check
A vulnerability in the web interface of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to execute arbitrary code on a targeted system. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...
Cisco Prime Infrastructure and Evolved Programmable Network Manager Remote Code Execution Vulnerability
A vulnerability in the web interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager EPNM could allow an unauthenticated, remote attacker to execute arbitrary code on a targeted system. The vulnerability is due to insufficient sanitization of HTTP user-supplied input...
HPSBHF03439 rev.2 - HP Commercial PCs with Sure Start, Local Denial of Service
Potential Security Impact Denial of Service DoS Source: HewlettPackard Company, HP Software Security Response Team VULNERABILITY SUMMARY HP has identified a potential security vulnerability with the Sure Start implementation on certain 2015 commercial platforms. This vulnerability could be...
Cisco Cloud Services Router 1000V Command Injection Vulnerability (cisco-sa-20151130-csr)
A vulnerability in the event manager environment and publish-event function of the Cisco Cloud Services Router 1000V Series could allow an authenticated, local attacker to perform a command injection attack with root-level privileges. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptio...
Cisco Cloud Services Router 1000V Command Injection Vulnerability
A vulnerability in the event manager environment and publish-event function of the Cisco Cloud Services Router 1000V Series could allow an authenticated, local attacker to perform a command injection attack with root-level privileges. The vulnerability is due to a lack of proper input validation ...
Cisco Web Security Appliance Certificate Generation Command Injection Vulnerability
A vulnerability in the certificate generation process in the admin web interface of the Cisco Web Security Appliance WSA could allow an authenticated, remote attacker to execute arbitrary commands on an affected system with root-level privileges. The vulnerability is due to the improper...
Thunderstrike 2 Mac OS X Firmware Worm
A new attack against Intel firmware running in Apple computers is expected to be unveiled at this week’s Black Hat conference. The research is an extension of the Thunderstrike Mac OS X firmware bootkit disclosed this spring that enables the undetectable installation of malicious firmware that...
Cradlepoint MBR 1200 / 1400 Local File Inclusion
Exploit Title: Cradlepoint MBR LFI Date: 7/7/2015 Exploit Author: DocHak Vendor Homepage: https://cradlepoint.com/ Version: 1200/1400 REQUIRED Tested on: Embedded linux I found a local file include with root level permissions on cradlepoint routers. So far looks like it works on MBR1400 and MBR12...
Cradlepoint MBR1400 and MBR1200 Local File Inclusion Vulnerability
Exploit for hardware platform in category web applications Exploit Title: Cradlepoint MBR LFI Date: 7/7/2015 Exploit Author: DocHak Vendor Homepage: https://cradlepoint.com/ Version: 1200/1400 REQUIRED Tested on: Embedded linux I found a local file include with root level permissions on cradlepoi...
Cradlepoint MBR1400 and MBR1200 - Local File Inclusion
Cradlepoint MBR1400 and MBR1200 - Local File Inclusion Exploit Title: Cradlepoint MBR LFI Date: 7/7/2015 Exploit Author: DocHak Vendor Homepage: https://cradlepoint.com/ Version: 1200/1400 REQUIRED Tested on: Embedded linux I found a local file include with root level permissions on cradlepoint...
Cradlepoint MBR1400 and MBR1200 - Local File Inclusion
Exploit Title: Cradlepoint MBR LFI Date: 7/7/2015 Exploit Author: DocHak Vendor Homepage: https://cradlepoint.com/ Version: 1200/1400 REQUIRED Tested on: Embedded linux I found a local file include with root level permissions on cradlepoint routers. So far looks like it works on MBR1400 and MBR12...
Linux Australia Breached by Hackers
Linux Australia, a consortium in charge of organizing Linux conferences Down Under, acknowledged over the weekend it was breached by attackers who were able to secure access to one of its servers, and with it, potential user information. In a detailed email to users on Saturday, the group’s...
Gap Widens Between Attackers, BIOS Forensics, Research
Vendors have made important strides in locking down operating systems, patching memory-related vulnerabilities and other bugs that could lead to remote code execution or give hackers a stealthy presence on a machine. As the hurdles get higher for the bad guys, the better ones will certainly look...
Cisco Prime Infrastructure Command Execution Vulnerability
A vulnerability in Cisco Prime Infrastructure could allow an authenticated, remote attacker to execute arbitrary commands with root-level privileges. The vulnerability is due to improper validation of URL requests. An attacker could exploit this vulnerability by requesting an unauthorized command...
Cisco Releases Security Advisory for Prime Infrastructure Command Execution Vulnerability
Cisco has released a security advisory to address a vulnerability in Cisco Prime Infrastructure software versions 1.2, 1.3, 1.4, and 2.0 which could allow an unauthenticated, remote attacker to execute arbitrary commands with root-level privileges. US-CERT encourages users and administrators to...
Netgear D6300B routers backdoor
Specially crafted network packet activates root level telnet access...
Undocumented Test Interface in Cisco Small Business Devices
A vulnerability in the Cisco WAP4410N Wireless-N Access Point, Cisco WRVS4400N Wireless-N Gigabit Security Router, and the Cisco RVS4000 4-port Gigabit Security Router could allow an unauthenticated, remote attacker to gain root-level access to an affected device. Note: Additional research...
VUPEN Researchers Say They Have Zero-Day Windows 8 Exploit
Controversial bug hunters and exploit sellers VUPEN claimed to have cracked the low-level security enhancements featured in Windows 8, Microsoft’s latest operating system. VUPEN CEO and head of research Chaouki Bekrar sent out a pair of ominous Tweets yesterday claiming to have developed the firs...