Design/Logic Flaw

Adcon Telemetry A840 Telemetry Gateway Base Station allows remote attackers to obtain sensitive information by sniffing the network...

CVE-2015-7934

The Java client in Adcon Telemetry A840 Telemetry Gateway Base Station allows remote attackers to discover log-file pathnames via unspecified vectors...

CVE-2015-7934

The CVE-2015-7934 entry concerns the Adcon Telemetry A840 Telemetry Gateway Base Station’s Java client, where the Java client reveals the full pathname of log files on the server. The vulnerability is an information disclosure (log-file pathnames) that could be exploited remotely, with no client ...

CVE-2015-7932

Adcon Telemetry A840 Telemetry Gateway Base Station allows remote attackers to obtain sensitive information by sniffing the network...

CVE-2015-7931

The Java client in Adcon Telemetry A840 Telemetry Gateway Base Station does not authenticate the station device, which allows man-in-the-middle attackers to spoof devices and obtain sensitive information by reading cleartext packet data, related to the lack of SSL support...

CVE-2015-7932

The CVE-2015-7932 issue affects Adcon Telemetry A840 Telemetry Gateway Base Station. Public docs describe remote disclosure caused by plaintext network traffic (no SSL) and related flaws such as hard-coded credentials and improper authentication, enabling information exposure. Affected product: A...

CVE-2015-7930

The CVE-2015-7930 affects the Adcon Telemetry A840 Telemetry Gateway Base Station. The vulnerability is due to hardcoded administrative credentials, allowing remote attackers to obtain admin access via unspecified vectors. NVD assigns a CVSSv3 base score of 10.0 (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A...

CVE-2015-7930: Undefined Security Weakness

Adcon Telemetry A840 Telemetry Gateway Base Station has hardcoded credentials, which allows remote attackers to obtain administrative access via unspecified vectors...

CVE-2015-7932: Exposure of Sensitive Information to an Unauthorized Actor

Adcon Telemetry A840 Telemetry Gateway Base Station allows remote attackers to obtain sensitive information by sniffing the network...

CVE-2015-7934: Exposure of Sensitive Information to an Unauthorized Actor

The Java client in Adcon Telemetry A840 Telemetry Gateway Base Station allows remote attackers to discover log-file pathnames via unspecified vectors...

PT-2015-7677

Name of the Vulnerable Software and Affected Versions Adcon Telemetry A840 Telemetry Gateway Base Station affected versions not specified Description The issue concerns the Java client in the Adcon Telemetry A840 Telemetry Gateway Base Station, which fails to authenticate station devices. This la...

Pacom RTU/1000 CCU/EMCS Encryption Weak Password Vulnerability

The Pacom 1000 CCU and RTU are both products of the Swedish company Pacom. The former is a set of network security panels for controlling, monitoring and maintaining remote sites and the latter is a set of security panels for controlling access control alarm systems. A security vulnerability exis...

PT-2015-2900

Name of the Vulnerable Software and Affected Versions Adcon Telemetry A840 Telemetry Gateway Base Station affected versions not specified Description The issue is related to hardcoded credentials in the software, allowing remote attackers to gain administrative access. The vulnerability exists du...

CVE-2015-7931: Improper Input Validation

The Java client in Adcon Telemetry A840 Telemetry Gateway Base Station does not authenticate the station device, which allows man-in-the-middle attackers to spoof devices and obtain sensitive information by reading cleartext packet data, related to the lack of SSL support...

Idera Up.Time Monitoring Station 7.0 post2file.php Arbitrary File Upload Exploit

This Metasploit module exploits an arbitrary file upload vulnerability found within the Up.Time monitoring server 7.2 and below. A malicious entity can upload a PHP file into the webroot without authentication, leading to arbitrary code execution. Although the vendor fixed Up.Time to prevent this...

Hackers Can Remotely Record and Listen Calls from Your Samsung Galaxy Phones

If you own a Samsung Galaxy Phone – S6, S6 Edge or Note 4, in particular – there are chances that a skilled hacker could remotely intercept your voice calls to listen in and even record all your voice conversations. Two security researchers, Daniel Komaromy of San Francisco and Nico Golde of...

Idera Up.Time Monitoring Station 7.0 post2file.php Arbitrary File Upload Version 1

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Idera Up.Time Monitoring Station 7.0 post2file.php Arbitrary File Upload', 'Description' = %q This module exploits an arbitrary file...

CVE-2013-4514

Multiple buffer overflows in drivers/staging/wlags49h2/wlpriv.c in the Linux kernel before 3.12 allow local users to cause a denial of service or possibly have unspecified other impact by leveraging the CAPNETADMIN capability and providing a long station-name string, related to the 1...

ZTE a station there is a command to perform a threat within the network-vulnerability warning-the black bar safety net

http://seecom.zte.com.cn/SmartTV/pcuserinitSubmit.action 好 老 的 洞 现在 还 存在 ! !...

Microsoft Windows Kernel - Null Pointer Dereference with Window Station and Clipboard (MS15-061)

Microsoft Windows Kernel - Null Pointer Dereference with Window Station and Clipboard MS15-061 Source: https://code.google.com/p/google-security-research/issues/detail?id=294 Platform: Win7 32-bit. trigger.cpp should fire the issue, with a caveat - PoC might NOT work if compiled as a debug build...