CVE-2018-12925

Summary: CVE-2018-12925 affects Baseon Lantronix MSS devices, where Telnet access does not require a password, enabling unauthenticated network login. This results in an attacker gaining full network access to the device, with implicit high impact on confidentiality, integrity, and availability (...

Sollae Systems (Serial-Ethernet-Module/Remote-I/O-Device-Server etc.) Telnet-Service Unauthorized access

3,200 Sollae Systems Serial-Ethernet-Module/Remote-I/O-Device-Server etc. Telnet-Service had Exposed on the internet : https://www.zoomeye.org/searchResult?q=%22Sollae%20Systems%22%20%2Bport:%2223%22&t=all There are 1,300 in 2018,Almost in Korea. Most devices do not require password authenticatio...

Baseon Lantronix MSS IOT/Cameras Device Servers telnet-Service NO require password authentication

Baseon Lantronix MSS IOT/Cameras Device Servers telnet-Service NO require password authentication had Exposed on the internet in ZoomEye : https://www.zoomeye.org/searchResult?q=%22prompt%20for%20assistance%22%20%2Bport:%2223%22&t=all login telnet with no password...

Unspecified Vulnerability in Telesquare SDT-CS3B1 and SDT-CW3B1

Telesquare SDT-CS3B1 and SDT-CW3B1 are both wireless router products from Telesquare Korea. A security vulnerability exists in the Telesquare SDT-CS3B1 and SDT-CW3B1, which originates from a program with a default factory account. A remote attacker can exploit the vulnerability to gain access to...

CVE-2018-12526

Telesquare SDT-CS3B1 and SDT-CW3B1 devices through 1.2.0 have a default factory account. Remote attackers can obtain access to the device via TELNET using a hardcoded account...

CVE-2018-12526

Telesquare SDT-CS3B1 and SDT-CW3B1 devices through 1.2.0 have a default factory account. Remote attackers can obtain access to the device via TELNET using a hardcoded account...

Hardcoded credentials

Telesquare SDT-CS3B1 and SDT-CW3B1 devices through 1.2.0 have a default factory account. Remote attackers can obtain access to the device via TELNET using a hardcoded account...

CVE-2018-12526

Telesquare SDT-CS3B1 and SDT-CW3B1 devices through 1.2.0 have a default factory account. Remote attackers can obtain access to the device via TELNET using a hardcoded account...

CVE-2018-12526

CVE-2018-12526 affects Telesquare SDT-CS3B1 and SDT-CW3B1 devices up to firmware 1.2.0, due to a default factory account that enables remote TELNET access via a hardcoded credential. Connected sources (NVD, CNVD, CVE records) consistently describe the root cause as a hardcoded default account; ex...

TP-Link TL-WA850RE Remote Command Execution

!/usr/bin/env python Exploit Title: TP-Link Technologies TL-WA850RE Wi-Fi Range Extender - Command Execution Date: 19/06/2018 Exploit Author: yoresongo - Advisability S.A.S Colombia www.advisability.co Vendor Homepage: https://www.tp-link.com/ Firmware Link:...

Brave Software: Unsafe handling of protocol handlers

Summary: Brave browser macOS handles protocol handlers in unsafe way and differently from other browsers. Key differences between protocol handlers handling in Brave and other browsers: Open external app vs Open "Terminal" Brave only asks about opening external app. Other browsers e.g. Chrome ask...

TP-Link TL-WA850RE - Remote Command Execution

TP-Link TL-WA850RE - Remote Command Execution !/usr/bin/env python Exploit Title: TP-Link Technologies TL-WA850RE Wi-Fi Range Extender - Command Execution Date: 19/06/2018 Exploit Author: yoresongo - Advisability S.A.S Colombia www.advisability.co Vendor Homepage: https://www.tp-link.com/ Firmwar...

TP-Link TL-WA850RE - Remote Command Execution

!/usr/bin/env python Exploit Title: TP-Link Technologies TL-WA850RE Wi-Fi Range Extender - Command Execution Date: 19/06/2018 Exploit Author: yoresongo - Advisability S.A.S Colombia www.advisability.co Vendor Homepage: https://www.tp-link.com/ Firmware Link:...

TP-Link TL-WA850RE - Remote Command Execution Exploit

Exploit for hardware platform in category web applications !/usr/bin/env python Exploit Title: TP-Link Technologies TL-WA850RE Wi-Fi Range Extender - Command Execution Date: 19/06/2018 Exploit Author: yoresongo - Advisability S.A.S Colombia www.advisability.co Vendor Homepage:...

CVE-2018-6210

D-Link DIR-620 devices, with a certain Rostelekom variant of firmware 1.0.37, have a hardcoded rostel account, which makes it easier for remote attackers to obtain access via a TELNET session...

Hardcoded credentials

D-Link DIR-620 devices, with a certain Rostelekom variant of firmware 1.0.37, have a hardcoded rostel account, which makes it easier for remote attackers to obtain access via a TELNET session...

CVE-2018-6210

D-Link DIR-620 devices, with a certain Rostelekom variant of firmware 1.0.37, have a hardcoded rostel account, which makes it easier for remote attackers to obtain access via a TELNET session...

CVE-2018-6210

D-Link DIR-620 devices, with a certain Rostelekom variant of firmware 1.0.37, have a hardcoded rostel account, which makes it easier for remote attackers to obtain access via a TELNET session...

CVE-2018-6210

The CVE-2018-6210 entry concerns D-Link DIR-620 routers with a Rostelekom variant of firmware 1.0.37 that ship a hardcoded rostel account. The underlying risk is that an unauthenticated remote attacker can obtain access via TELNET, enabling privileged router access (the OS/user account context fr...

Default credentials

An issue was discovered in Cloud Media Popcorn A-200 03-05-130708-21-POP-411-000 firmware. It is configured to provide TELNET remote access without a password that pops a shell as root. If an attacker can connect to port 23 on the device, he can completely compromise it...