Mitsubishi FX5-C32ET/DS-TS Digital I/O Module Detection

Binary data 751989.prm...

Mitsubishi QY10-TS Digital I/O Module Detection

Binary data 752044.prm...

Siemens X308 Switch Detection

Binary data 762204.prm...

Mitsubishi QY80-TS Digital I/O Module Detection

Binary data 752057.prm...

Mitsubishi FX5-C32EYT/DSS-TS Digital I/O Module Detection

Binary data 751995.prm...

Mitsubishi RX10-TS Digital I/O Module Detection

Binary data 752062.prm...

QNAP Netatalk 3.1.12 - Authentication Bypass

QNAP Netatalk 3.1.12 - Authentication Bypass Exploit Title: QNAP Netatalk Authentication Bypass Date: 12/20/2018 Original Exploit Author: Jacob Baines Modifications for QNAP devices: Mati Aharoni Vendor Homepage: http://netatalk.sourceforge.net/ Software Link:...

QNAP TS-431 QTS Remote Command Execution

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'base64' class MetasploitModule 'QNAP TS-431 QTS %q This module creates a virtual web server and uploads the php payload into it. Admin privileges cannot access a...

QNAP TS-431 QTS < 4.2.2 - Remote Command Execution (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'base64' class MetasploitModule 'QNAP TS-431 QTS %q This module creates a virtual web server and uploads the php payload into it. Admin privileges cannot access a...

CVE-2018-18865

The Royal browser extensions TS before 4.3.60728 Release Date 2018-07-28 and TSX before 3.3.1 Release Date 2018-09-13 allow Credentials Disclosure...

Design/Logic Flaw

The Royal browser extensions TS before 4.3.60728 Release Date 2018-07-28 and TSX before 3.3.1 Release Date 2018-09-13 allow Credentials Disclosure...

CVE-2018-18865

The Royal browser extensions TS before 4.3.60728 Release Date 2018-07-28 and TSX before 3.3.1 Release Date 2018-09-13 allow Credentials Disclosure...

Royal TS/X Information Disclosure Vulnerability

Royal TS/X is a standard terminal services management tool that supports remote management and control on the macOS platform. An information disclosure vulnerability exists in Royal TS versions prior to 4.3.60728 released 2018-07-28 and TSX versions prior to 3.3.1 released 2018-09-13, which stems...

Royal TSX - Information Disclosure

Royal TSX - Information Disclosure RoyalTS/X Exploit var wsUri = "ws://127.0.0.1:54890/"; var output; function init output = document.getElementById"output"; testWebSocket; function testWebSocket writeToScreen"Let's retrieve some data..."; websocket = new WebSocketwsUri; websocket.onopen =...

Royal TS/X - Information Disclosure

RoyalTS/X Exploit var wsUri = "ws://127.0.0.1:54890/"; var output; function init output = document.getElementById"output"; testWebSocket; function testWebSocket writeToScreen"Let's retrieve some data..."; websocket = new WebSocketwsUri; websocket.onopen = functionevt...

Royal TS/X Information Disclosure

Title: Royal TS/X - Information Disclosure Author: Jakub Palaczynski Date: 10. July 2018 CVE: CVE-2018-18865 Affected product: ============= Royal TS/X RoyalTS/X Exploit var wsUri = "ws://127.0.0.1:54890/"; var output; function init output = document.getElementById"output"; testWebSocket; functio...

CVE-2018-15130

CVE-2018-15130 affects ThinkSAAS up to 2018-07-25. The vulnerability is a Cross-Site Scripting (XSS) flaw exploitable via the parameter groupdesc in the URL path index.php?app=group&ac=create&ts=do, allowing injection of arbitrary web script/HTML into the page. Root cause details beyond XSS are n...

Bento4 Buffer Overflow Vulnerability (CNVD-2019-07062)

Bento4 is an open source C++ library for reading and writing MP4 files. A buffer overflow vulnerability exists in the 'AP4Mpeg2TsAudioSampleStream::WriteSample' function in the Core/Ap4Mpeg2Ts.cpp file in Bento4 version 1.5.1-624, which can be exploited by an attacker to can be exploited to cause...

Command injection

The Crestron Console service running on DGE-100, DM-DGE-200-C, and TS-1542-C devices with default configuration and running firmware versions 1.3384.00049.001 and lower are vulnerable to command injection that can be used to gain root-level access...

CVE-2018-5553

The connected advisories confirm CVE-2018-5553 affects Crestron Console services on DGE-100, DM-DGE-200-C, and TS-1542-C devices. The flaw enables remote command injection via the PING command due to improper input validation, allowing code execution with root privileges. Exploitation requires no...