Lucene search
+L

6632 matches found

CNVD
CNVD
added 2017/12/12 12:00 a.m.52 views

Xiongmai Technology IP Cameras and DVRs Stack Buffer Overflow Vulnerability

Xiongmai IP Camera Module and DVR are both products of XiongMai, China.Xiongmai IP Camera Module is an IP camera module product.DVR is a hard disk recorder. A stack buffer overflow vulnerability exists in Xiongmai Technology's IP Camera and DVRs that use the NetSurveillance web interface, allowin...

10CVSS7.6AI score0.09216EPSS
SaveExploits3References1
OpenVAS
OpenVAS
added 2017/12/11 12:00 a.m.40 views

Hirschmann Devices Detection (Telnet)

Telnet based detection of Hirschmann Devices. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.8AI score
SaveExploits0
OpenVAS
OpenVAS
added 2017/12/11 12:00 a.m.18 views

Hirschmann Device Detection Consolidation

Consolidation of Hirschmann device detections. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.1AI score
SaveExploits0
Fedora
Fedora
added 2017/12/10 5:11 a.m.43 views

[SECURITY] Fedora 27 Update: curl-7.55.1-8.fc27

curl is a command line tool for transferring data with URL syntax, supporti ng FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, I MAP, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...

9.8CVSS0.11175EPSS
SaveExploits0
Fedora
Fedora
added 2017/12/09 10:30 p.m.43 views

[SECURITY] Fedora 26 Update: curl-7.53.1-13.fc26

curl is a command line tool for transferring data with URL syntax, supporti ng FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, I MAP, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...

9.8CVSS0.11175EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2017/12/08 12:00 a.m.473 views

Polycom HDX Default Credentials (Telnet)

The Polycom device has default telnet credentials or passwordless login. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.4AI score
SaveExploits0References1
ICS
ICS
added 2017/12/07 12:00 a.m.112 views

Xiongmai Technology IP Cameras and DVRs

CVSS v3 9.8 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Xiongmai Technology Equipment: IP Cameras and DVRs Vulnerability: Stack-based Buffer Overflow AFFECTED PRODUCTS The following versions of Xiongmai Technology IP cameras and DVRs are affected: All IP Cameras and DVRs...

10CVSS10AI score0.09216EPSS
SaveExploits3References3
Positive Technologies
Positive Technologies
added 2017/12/07 12:00 a.m.11 views

PT-2017-3410 · Xiongmai Technology · Xiongmai Ip Cameras +2

Name of the Vulnerable Software and Affected Versions: Xiongmai Technology IP Cameras and DVRs affected versions not specified Description: A Stack-based Buffer Overflow issue has been discovered, which may allow an attacker to execute code remotely or crash the device. After rebooting, the devic...

10CVSS9.4AI score0.09216EPSS
SaveExploits3References6
Exploit DB
Exploit DB
added 2017/12/07 12:00 a.m.81 views

Polycom Shell HDX Series - Traceroute Command Execution (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Polycom Shell HDX Series Traceroute Command Execution', 'Description' = %q Within Polycom command shell, a command execution flaw exists in lan...

5.3AI score
SaveExploits0
OpenVAS
OpenVAS
added 2017/12/07 12:00 a.m.26 views

NETGEAR ProSAFE Devices Detection (Telnet)

Telnet based detection of NETGEAR ProSAFE devices. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.8AI score
SaveExploits0
Packet Storm
Packet Storm
added 2017/12/06 12:00 a.m.76 views

Polycom Shell HDX Series Traceroute Command Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Polycom Shell HDX Series Traceroute Command Execution', 'Description' = %q Within Polycom command shell, a command execution flaw exists in lan...

0.7AI score
SaveExploits0
zdt
zdt
added 2017/12/06 12:00 a.m.37 views

Polycom Shell HDX Series Traceroute Command Execution Exploit

Within Polycom command shell, a command execution flaw exists in lan traceroute, one of the dev commands, which allows for an attacker to execute arbitrary payloads with telnet or openssl. This module requires Metasploit: https://metasploit.com/download Current source:...

0.6AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2017/12/04 12:00 a.m.12 views

The vulnerability of the TCP/IP software for the JanTek JTC-200 converter, related to deficiencies in authentication procedures, allows a hacker to gain access to the BusyBox Linux shell.

The vulnerability of the TCP/IP microprogramming software of the JanTek JTC-200 converter is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass the authentication process and gain access to the BusyBox Linux shell using the Teln...

10CVSS7.8AI score0.02392EPSS
SaveExploits2References2
BDU FSTEC
BDU FSTEC
added 2017/12/01 12:00 a.m.14 views

The vulnerability of the Telnet service of the Mobatek MobaXterm remote management software allows a intruder to execute arbitrary commands.

The vulnerability of the Telnet service provided by the Mobatek MobaXterm remote management software is related to the absence of an authentication process. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using the TCP port 23...

10CVSS8.2AI score0.03804EPSS
SaveExploits3References2
OpenVAS
OpenVAS
added 2017/11/29 12:00 a.m.36 views

Lantronix Devices Detection (Telnet)

Telnet based detection of Lantronix Devices. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.8AI score
SaveExploits0
OpenVAS
OpenVAS
added 2017/11/29 12:00 a.m.18 views

Lantronix Devices Detection Consolidation

Consolidation of Lantronix device detections. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only include"pluginfeedinfo.inc"; ifdescription...

5.8AI score
SaveExploits0
The Hacker News
The Hacker News
added 2017/11/28 3:19 a.m.71 views

New Mirai Botnet Variant Found Targeting ZyXEL Devices In Argentina

While tracking botnet activity on their honeypot traffic, security researchers at Chinese IT security firm Qihoo 360 Netlab discovered a new variant of Mirai—the well known IoT botnet malware that wreaked havoc last year. Last week, researchers noticed an increase in traffic scanning ports 2323 a...

9CVSS9.3AI score0.12113EPSS
SaveExploits5
OpenVAS
OpenVAS
added 2017/11/28 12:00 a.m.63 views

ZTE ZXDSL 831CII Detection (Telnet)

Telnet based detection of ZTE ZXDSL 831CII devices. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.3AI score
SaveExploits0
ThreatPost
ThreatPost
added 2017/11/27 9:06 a.m.50 views

Newly Published Exploit Code Used to Spread Mirai Variant

Qihoo 360 Netlab researchers reported on Friday that they are tracking an uptick in botnet activity associated with a variant of Mirai. Targeted are ports 23 and 2323 on internet-connected devices made by ZyXEL Communications that are using default admin/CenturyL1nk and admin/QwestM0dem telnet...

9CVSS1.7AI score0.12113EPSS
SaveExploits5References9
BDU FSTEC
BDU FSTEC
added 2017/11/23 12:00 a.m.10 views

The vulnerability of the Wi-Fi Konke Smart Plug’s microprogramming software lies in the lack of authentication procedures for Telnet sessions. This allows a malicious user to control the device with root privileges.

The vulnerability of the Wi-Fi Konke Smart Plug remote control software relates to the absence of authentication procedures for Telnet sessions. Exploiting this vulnerability could allow a malicious actor to control the device with root privileges through port 23...

10CVSS7.8AI score0.11743EPSS
SaveExploits6References3
Rows per page
Query Builder