CVE-2016-1888

The telnetd service in FreeBSD 9.3, 10.1, 10.2, 10.3, and 11.0 allows remote attackers to inject arguments to login and bypass authentication via vectors involving a "sequence of memory allocation failures."...

CVE-2016-1888

The CVE-2016-1888 issue affects FreeBSD telnetd(8) on FreeBSD releases including 9.3, 10.x, and 11.x. A vulnerability arises from an unexpected sequence of memory allocation failures combined with insufficient error checking during the construction of the argument array passed to login(1). This c...

CVE-2016-1888

The telnetd service in FreeBSD 9.3, 10.1, 10.2, 10.3, and 11.0 allows remote attackers to inject arguments to login and bypass authentication via vectors involving a "sequence of memory allocation failures."...

CVE-2016-1888: Improper Authentication

The telnetd service in FreeBSD 9.3, 10.1, 10.2, 10.3, and 11.0 allows remote attackers to inject arguments to login and bypass authentication via vectors involving a "sequence of memory allocation failures."...

TP-Link C2 / C20i Command Injection / Denial Of Service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory Information Title: TP-Link C2 and C20i vulnerable to command injection authenticated root RCE, DoS, improper firewall rules Advisory URL: https://pierrekim.github.io/advisories/2017-tplink-0x00.txt Blog URL:...

D-Link DWR-932B SHELL Command Execution Vulnerability

The D-Link DWR-932B is a popular router device. An input validation vulnerability exists in the D-Link DWR-932B, which allows remote attackers to exploit the vulnerability to submit a special request to execute the command "/sbin/telnetd -l /bin/sh"...

CVE-2016-10178

An issue was discovered on the D-Link DWR-932B router. HELODBG on port 39889 UDP launches the "/sbin/telnetd -l /bin/sh" command...

Command injection

An issue was discovered on the D-Link DWR-932B router. HELODBG on port 39889 UDP launches the "/sbin/telnetd -l /bin/sh" command...

CVE-2016-10178

An issue was discovered on the D-Link DWR-932B router. HELODBG on port 39889 UDP launches the "/sbin/telnetd -l /bin/sh" command...

CVE-2016-10178: Undefined Security Weakness

An issue was discovered on the D-Link DWR-932B router. HELODBG on port 39889 UDP launches the "/sbin/telnetd -l /bin/sh" command...

Netgear R7000 - Command Injection Vulnerability

Exploit for cgi platform in category web applications Exploit Title: Netgear R7000 - Command Injection Date: 6-12-2016 Exploit Author: Acew0rm Contact: https://twitter.com/Acew0rm1 Vendor Homepage: https://www.netgear.com/ Category: Hardware Version: V1.0.7.21.1.93 -Vulnerability An unauthenticat...

FreeBSD telnetd(8) login(1) parameter injection vulnerability

telnetd is the FreeBSD server-side TELNET virtual terminal protocol. FreeBSD telnetd8 has an injection vulnerability in the implementation of the login1 parameter, which can result in a memory sequence allocation failure and invalid error detection, leading to the illegal construction and executi...

FreeBSD : FreeBSD -- Possible login(1) argument injection in telnetd(8) (e00304d2-bbed-11e6-b1cf-14dae9d210b8)

An unexpected sequence of memory allocation failures combined with insufficient error checking could result in the construction and execution of an argument sequence that was not intended. Impact : An attacker who controls the sequence of memory allocation failures and success may cause login1 to...

FreeBSD-SA-16:36.telnetd

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-16:36.telnetd Security Advisory The FreeBSD Project Topic: Possible login1 argument injection in telnetd8 Category: core Module: telnetd Announced: 2016-12-06...

FreeBSD -- Possible login(1) argument injection in telnetd(8)

Problem Description: An unexpected sequence of memory allocation failures combined with insufficient error checking could result in the construction and execution of an argument sequence that was not intended. Impact: An attacker who controls the sequence of memory allocation failures and success...

Dlink DWR-932B router is explosion multiple security vulnerabilities-vulnerability warning-the black bar safety net

Foreword According to security experts the latest discovery, the Dlink DWR-932B router in the presence of a large number of security vulnerabilities, including back doors, the back door account, the weak WPS, as well as a remote code execution vulnerability and so on. If you're on IOT Security...

D-Link DWR-932B Backdoors / Default WPS PIN

D-Link DWR-932B suffers from backdoor accounts, default WPS PIN, weak WPS PIN generation, and various other bad security practices and issues. Advisory Information Title: Multiple vulnerabilities found in the Dlink DWR-932B backdoor, backdoor accounts, weak WPS, RCE ... Advisory URL:...

Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information

The multiple vulnerabilities in the krb5-telnetd package of the Debian GNU/Linux operating system may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...

Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the telnetd-ssl package of the Debian GNU/Linux operating system can be exploited, leading to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

TP-Link SC2020n Authenticated Telnet Injection

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'TP-Link SC2020n Authenticated Telnet Injection', 'Description' = %q The TP-Link SC2020n Network Video Camera is vulnerable to O...