4472 matches found
CVE-2015-7930
The CVE-2015-7930 affects the Adcon Telemetry A840 Telemetry Gateway Base Station. The vulnerability is due to hardcoded administrative credentials, allowing remote attackers to obtain admin access via unspecified vectors. NVD assigns a CVSSv3 base score of 10.0 (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A...
CVE-2015-7931
The Java client in Adcon Telemetry A840 Telemetry Gateway Base Station does not authenticate the station device, which allows man-in-the-middle attackers to spoof devices and obtain sensitive information by reading cleartext packet data, related to the lack of SSL support...
CVE-2015-7932
The CVE-2015-7932 issue affects Adcon Telemetry A840 Telemetry Gateway Base Station. Public docs describe remote disclosure caused by plaintext network traffic (no SSL) and related flaws such as hard-coded credentials and improper authentication, enabling information exposure. Affected product: A...
Pacom RTU/1000 CCU/EMCS Encryption Weak Password Vulnerability
The Pacom 1000 CCU and RTU are both products of the Swedish company Pacom. The former is a set of network security panels for controlling, monitoring and maintaining remote sites and the latter is a set of security panels for controlling access control alarm systems. A security vulnerability exis...
Idera Up.Time Monitoring Station 7.0 post2file.php Arbitrary File Upload Exploit
This Metasploit module exploits an arbitrary file upload vulnerability found within the Up.Time monitoring server 7.2 and below. A malicious entity can upload a PHP file into the webroot without authentication, leading to arbitrary code execution. Although the vendor fixed Up.Time to prevent this...
Hackers Can Remotely Record and Listen Calls from Your Samsung Galaxy Phones
If you own a Samsung Galaxy Phone – S6, S6 Edge or Note 4, in particular – there are chances that a skilled hacker could remotely intercept your voice calls to listen in and even record all your voice conversations. Two security researchers, Daniel Komaromy of San Francisco and Nico Golde of...
Idera Up.Time Monitoring Station 7.0 post2file.php Arbitrary File Upload Version 1
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Idera Up.Time Monitoring Station 7.0 post2file.php Arbitrary File Upload', 'Description' = %q This module exploits an arbitrary file...
CVE-2013-4514
Multiple buffer overflows in drivers/staging/wlags49h2/wlpriv.c in the Linux kernel before 3.12 allow local users to cause a denial of service or possibly have unspecified other impact by leveraging the CAPNETADMIN capability and providing a long station-name string, related to the 1...
ZTE a station there is a command to perform a threat within the network-vulnerability warning-the black bar safety net
http://seecom.zte.com.cn/SmartTV/pcuserinitSubmit.action 好 老 的 洞 现在 还 存在 ! !...
Microsoft Windows Kernel - Null Pointer Dereference with Window Station and Clipboard (MS15-061)
Source: https://code.google.com/p/google-security-research/issues/detail?id=294 Platform: Win7 32-bit. trigger.cpp should fire the issue, with a caveat - PoC might NOT work if compiled as a debug build. windbg.txt is a sample crash log. Analysis from Nils: --- please find attached a C trigger,...
Microsoft Windows Kernel - Null Pointer Dereference with Window Station and Clipboard (MS15-061)
Microsoft Windows Kernel - Null Pointer Dereference with Window Station and Clipboard MS15-061 Source: https://code.google.com/p/google-security-research/issues/detail?id=294 Platform: Win7 32-bit. trigger.cpp should fire the issue, with a caveat - PoC might NOT work if compiled as a debug build...
Schneider Electric StruxureWare Building Expert Security Patch
Industrial control manufacturer Schneider Electric has published new firmware for its StruxureWare Building Expert building automation system that patches a remotely exploitable vulnerability. Researcher Artyom Kurbatov discovered that the system transmits user credentials in plaintext between th...
Synology Video Station SQL Injection Vulnerability (CNVD-2015-06009)
Synology Video Station is a video manager from Synology. A SQL injection vulnerability exists in Synology Video Station versions prior to 1.5-0763, which can be exploited by remote attackers to execute arbitrary SQL commands...
Synology Video Station Arbitrary Command Execution Vulnerability
Synology Video Station is a video manager from Synology. A security vulnerability exists in Synology Video Station versions prior to 1.5-0763, which can be exploited by remote attackers to execute arbitrary shell commands...
Synology Video Station SQL Injection Vulnerability (CNVD-2015-06008)
Synology Video Station is a video manager from Synology. A SQL injection vulnerability exists in Synology Video Station versions prior to 1.5-0757, which can be exploited by remote attackers to execute arbitrary SQL commands...
Synology Download Station Cross-Site Scripting Vulnerability (CNVD-2015-06011)
Synology Download Station is a set of web-based download applications from Synology. A cross-site scripting vulnerability exists in the 'Create download task via URL' feature in Synology Download Station prior to version 3.5-2967, which can be exploited by remote attackers to inject arbitrary web...
Synology Download Station Cross-Site Scripting Vulnerability
Synology Download Station is a set of web-based download applications from Synology. A cross-site scripting vulnerability exists in the 'Create download task via file upload' feature of Synology Download Station prior to version 3.5-2962, which can be exploited to inject arbitrary web script or...
Multiple Cross-Site Scripting vulnerabilities in Synology Download Station
------------------------------------------------------------------------ Multiple Cross-Site Scripting vulnerabilities in Synology Download Station ------------------------------------------------------------------------ Han Sahin, September 2015...
Synology Video Station command injection and multiple SQL injection vulnerabilities
------------------------------------------------------------------------ Synology Video Station command injection and multiple SQL injection vulnerabilities ------------------------------------------------------------------------ Han Sahin, September 2015...