Unspecified Vulnerability in Tenda AC1200

The Tenda AC1200 is a wireless router from the Chinese company Tenda. A security vulnerability exists in Tenda AC1200 Model AC6 15.03.06.51multi devices, which originates from the default router speed test settings containing a malware download link named live or CNKI E-Learning. No details of th...

CVE-2020-28094

On Tenda AC1200 Model AC6 15.03.06.51multi devices, the default settings for the router speed test contain links to download malware named elive or CNKI E-Learning...

CVE-2020-28094

On Tenda AC1200 Model AC6 15.03.06.51multi devices, the default settings for the router speed test contain links to download malware named elive or CNKI E-Learning...

Default configuration

On Tenda AC1200 Model AC6 15.03.06.51multi devices, the default settings for the router speed test contain links to download malware named elive or CNKI E-Learning...

CVE-2020-28094

On Tenda AC1200 Model AC6 15.03.06.51multi devices, the default settings for the router speed test contain links to download malware named elive or CNKI E-Learning...

CVE-2020-28094

CVE-2020-28094 affects the Tenda AC1200 (Model AC6) with firmware 15.03.06.51_multi. The root cause is that the default router speed-test settings contain links to download malware named elive or CNKI E-Learning, which could lead to malware download without user intent. According to NVD, the vuln...

PT-2020-16925

Name of the Vulnerable Software and Affected Versions Tenda AC1200 Model AC6 version 15.03.06.51 multi Description The default settings for the router speed test on the affected device contain links to download malware named elive or CNKI E-Learning. Recommendations For Tenda AC1200 Model AC6...

Tenda AC1200 安全漏洞

The Tenda AC1200 is a wireless router from the Chinese company Tenda. A security vulnerability exists in Tenda AC1200 Model AC6 15.03.06.51multi devices, which originates from the default router speed test settings containing a malware download link named live or CNKI E-Learning. No details of th...

CVE-2020-28094: Undefined Security Weakness

On Tenda AC1200 Model AC6 15.03.06.51multi devices, the default settings for the router speed test contain links to download malware named elive or CNKI E-Learning...

Command injection

An issue was discovered on Xiaomi Mi WiFi R3G devices before 2.28.23-stable. The backup file is in tar.gz format. After uploading, the application uses the tar zxf command to decompress, so one can control the contents of the files in the decompressed directory. In addition, the application's sh...

CVE-2017-9085

Multiple cross-site scripting XSS vulnerabilities in Kodak InSite 6.5 to 8.0 allow remote attackers to inject arbitrary web script via the 1 "paramFile" parameter to /Site/Troubleshooting/DiagnosticReport.asp, or 2 "paramFile" parameter to /Site/Troubleshooting/SpeedTest.asp...

Information disclosure

The RBB SPEED TEST App for Android version 2.0.3 and earlier, RBB SPEED TEST App for iOS version 2.1.0 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2017-2278

CVE-2017-2278 affects the RBB SPEED TEST App for Android (v2.0.3 and earlier) and iOS (v2.1.0 and earlier). The root cause is failure to verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information. Public entries confirm the i...

CVE-2017-2278

The RBB SPEED TEST App for Android version 2.0.3 and earlier, RBB SPEED TEST App for iOS version 2.1.0 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2017-2278: Improper Certificate Validation

The RBB SPEED TEST App for Android version 2.0.3 and earlier, RBB SPEED TEST App for iOS version 2.1.0 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2017-15318

Name of the Vulnerable Software and Affected Versions RBB SPEED TEST App for Android versions 2.0.3 and earlier RBB SPEED TEST App for iOS versions 2.1.0 and earlier Description The issue concerns the failure to verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to...

Ubiquiti Inc.: Read-Only user can execute arbitraty shell commands on AirOS

This issue is similar to 119317, but happen on the server side data actionRemote. The function "parseHeaders" in remote.inc:38 don't sanitize the input received from the other server other side of the speed test. If the attacker started an speed test against a controlled server attacker itself an...

CM Data Manager - Speed Test - External URLs, Redefined SSL Common Names verifier, Runtime command execution vulnerabilities

HackApp vulnerability scanner discovered that application CM Data Manager - Speed Test published at the 'play' market has multiple vulnerabilities...

Internet Speed Test - Dynamic Code Loading, External URLs, Possible privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application Internet Speed Test published at the 'play' market has multiple vulnerabilities...

[JSQL v0.3] Java Tool for Automatic Database Injection

jSQL Injection is a lightweight application used to find database information from a distant server. jSQL is free, open source and cross-platform Windows, Linux, Mac OS X, Solaris. Version 0.2 features: GET, POST, header, cookie methods normal, error based, blind, time based algorithms automatic...