Multiple Huawei products cross-border read vulnerability (CNVD-2017-34419)

Huawei RP200 and TE series are Huawei's all-in-one desktop and high-definition videoconferencing products for high-end customers. The out-of-bounds read vulnerability exists in several Huawei products, as the devices fail to adequately verify user input. A remote attacker could exploit this...

Multiple Huawei products cross-border read vulnerability (CNVD-2017-34420)

Huawei RP200 and TE series are Huawei's all-in-one desktop and high-definition videoconferencing products for high-end customers. The out-of-bounds read vulnerability exists in several Huawei products, as the devices fail to adequately verify user input. A remote attacker could exploit this...

CVE-2017-6666

A vulnerability in the forwarding component of Cisco IOS XR Software for Cisco Network Convergence System NCS 5500 Series Routers could allow an authenticated, local attacker to cause the router to stop forwarding data traffic across Traffic Engineering TE tunnels, resulting in a denial of servic...

CVE-2017-6666

Cisco IOS XR Software on Cisco Network Convergence System (NCS) 5500 Series Routers is affected by CVE-2017-6666. The vulnerability resides in the forwarding component where adjacency information for a Traffic Engineering (TE) tunnel’s physical source interface is not propagated to hardware after...

Huawei HG532n - Command Injection (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'base64' class MetasploitModule 'Huawei HG532n Command Injection', 'Description' = %q This module exploits a command injection vulnerability in...

Huawei HG532n Command Injection Exploit

This Metasploit module exploits a command injection vulnerability in the Huawei HG532n routers provided by TE-Data Egypt, leading to a root shell. The router's web interface has two kinds of logins, a "limited" user:user login given to all customers and an admin mode. The limited mode is used her...

Huawei HG532n Command Injection

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'base64' class MetasploitModule 'Huawei HG532n Command Injection', 'Description' = %q This module exploits a command injection vulnerability in...

Huawei HG532n Command Injection

This module exploits a command injection vulnerability in the Huawei HG532n routers provided by TE-Data Egypt, leading to a root shell. The router's web interface has two kinds of logins, a "limited" user:user login given to all customers and an admin mode. The limited mode is used here to expose...

te-kyu.com XSS vulnerability

Vulnerable URL: http://te-kyu.com/inc/twitteroauth/twitter.php?callback=prompt/OPENBUGBOUNTY/...

Denial of Service Vulnerability in Multiple Huawei Products

The Huawei TE30, TE40, TE50 and TE60 are all-in-one HD video conferencing endpoints from Huawei China that support intelligent voice calling and Wi-Fi wireless connectivity. A security vulnerability in the presentation transmission permission management mechanism of the Huawei TE30, TE40, TE50, a...

Security Advisory - Two Vulnerabilities in Huawei TE Series Product

Huawei TE series is a multimedia video conferencing endpoint that transfers audio, video, and desktop resources based on IP networks. It offers point-to-point and multiparty conferences for attendees at different places to enjoy face-to-face audio/video communication experience. A security...

Huawei Home Gateway UPnP/1.0 IGD/1.00 - Password Change Vulnerability

Exploit for hardware platform in category web applications ! /usr/bin/python Exploit Title: Huawei Home Gateway password change vulnerability Date: June 27, 2015 Exploit Author: Fady Mohamed Osman @fadyosman Vendor Homepage: http://www.huawei.com/en/ Software Link: N/A. Version: UPnP/1.0 IGD/1.00...

Huawei Home Gateway UPnP/1.0 IGD/1.00 - Password Disclosure

!/usr/bin/python Exploit Title: Huawei Home Gateway password disclosure Date: June 27, 2015 Exploit Author: Fady Mohamed Osman @fadyosman Vendor Homepage: http://www.huawei.com/en/ Software Link: N/A. Version: UPnP/1.0 IGD/1.00 Tested on: HG530 - HG520b Provided by TE-DATA egypt Exploit-db :...

Heap overflow

Heap-based buffer overflow in the License Server LicenseServer.exe in Wavelink Terminal Emulation TE allows remote attackers to execute arbitrary code via a large HTTP header...

Cisco TelePresence High Speed IP Message Processing Denial of Service Vulnerability

Cisco TelePresence is a telepresence conferencing solution developed by Cisco. A security vulnerability exists in Cisco TelePresence TC and TE, which allows remote attackers to cause a denial-of-service attack due to the program's failure to properly handle high-rate IP messages, allowing them to...

LinPHA <= 1.3.2 - (rotate.php) Remote Command Execution Vulnerability

No description provided by source. /'\ /\ \ /'\ /\ /\/\L\ \ \ \ ,/\ /\ \ /\ \ /' \ /\ //\ /'\ \ /\ \ \ \ /'\ /'\ / \ /' \ \ \ /\ /\ \ \ \ /\ \L\ /\ /\ \ \ \ \ \ \ / /\ //\ \L\ /\ /\ /\ \ \ \ \ \\ \ \ /\ \\ \\ /\ \ /\ \ /\ \ \ \ //////\ \ // // // // //...

Te Ecard - 'id' Parameter Multiple SQL Injection Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/29478/info Te Ecard is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input before using it in an SQL query. Exploiting these issues could allow an attacker to...

VbsEdit 4.7.2.0 - (.vbs) Buffer Overflow Vulnerability

No description provided by source. Title: VbsEdit v 4.7.2.0.vbs Buffer Overflow Vulnerability Author : anT!-Tr0J4n Email : D3v-PoinTathotmaild0tcom & C1EHatHotmaild0tcom Greetz : Dev-PoinT.com ; GlaDiatOr,SILVER STAR , HoBeeZ, Coffin Of Evil special thanks : r0073r,Sid3^effects,L0rd...

Cisco TelePresence TC and TE Software Multiple Security Vulnerabilities

Cisco TelePresence TC and TE Software are prone to multiple security vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2014-2170

Cisco TelePresence TC Software 4.x and 5.x before 5.1.7 and 6.x before 6.0.1 and TE Software 4.x and 6.0 allow remote authenticated users to execute arbitrary commands by using the commands as arguments to tshell aka tcsh scripts, aka Bug ID CSCue60202...