Lucene search
+L

468 matches found

Cvelist
Cvelist
•added 2018/07/15 3:00 p.m.•33 views

CVE-2018-14064

The uc-http service 1.0.0 on VelotiSmart WiFi B-380 camera devices allows Directory Traversal, as demonstrated by /../../etc/passwd on TCP port 80...

9.6AI score0.37177EPSS
SaveExploits5References2
CVE
CVE
•added 2018/07/15 3:00 p.m.•115 views

CVE-2018-14064

VelotiSmart WiFi B-380 cameras are affected by CVE-2018-14064 due to a Directory Traversal (LFI) in the uc-http service 1.0.0, exploitable via /../../etc/passwd on TCP port 80. The Nuclei template and related advisories confirm unauthenticated access can read arbitrary device files and sensitive ...

9.8CVSS9.4AI score0.37177EPSS
SaveExploits5References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/07/15 12:00 a.m.•3 views

CVE-2018-14064: Improper Limitation of a Pathname to a Restricted Directory

The uc-http service 1.0.0 on VelotiSmart WiFi B-380 camera devices allows Directory Traversal, as demonstrated by /../../etc/passwd on TCP port 80...

9.8CVSS8.2AI score0.37177EPSS
SaveExploits5References2
Positive Technologies
Positive Technologies
•added 2018/07/15 12:00 a.m.•4 views

PT-2018-12316

Name of the Vulnerable Software and Affected Versions VelotiSmart WiFi B-380 camera devices uc-http service version 1.0.0 Description The issue allows Directory Traversal. An example of this is accessing /../../etc/passwd on TCP port 80, which is the "API Endpoint: /../../etc/passwd"...

9.8CVSS0.37177EPSS
SaveExploits5References5
HackRead
HackRead
•added 2018/07/02 12:31 p.m.•30 views

Android devices since 2012 vulnerable to RAMpage vulnerability

By Waqas A group of security researchers from the University of Amsterdam, UC This is a post from HackRead.com Read the original post: Android devices since 2012 vulnerable to RAMpage vulnerability...

3.6AI score
SaveExploits0
VulnCheck KEV
VulnCheck KEV
•added 2018/06/15 12:00 a.m.•22 views

VulnCheck KEV: CVE-2018-10088

Buffer overflow in XiongMai uc-httpd 1.0.0 has unspecified impact and attack vectors, a different vulnerability than CVE-2017-16725...

10CVSS7.3AI score0.39715EPSS
SaveIn wildExploits8References6
CNVD
CNVD
•added 2018/06/12 12:00 a.m.•85 views

XiongMai uc-httpd Buffer Overflow Vulnerability

XiongMai uc-httpd is a HTTP protection program for cameras and other products from XiongMai. A buffer overflow vulnerability exists in version 1.0.0 of XiongMai uc-httpd. An attacker can exploit this vulnerability to cause a denial of service via the Web camera reader interface...

10CVSS7.2AI score0.39715EPSS
SaveExploits8References1
zdt
zdt
•added 2018/06/09 12:00 a.m.•1312 views

XiongMai uc-httpd 1.0.0 - Buffer Overflow Exploit

Exploit for hardware platform in category web applications Exploit Title: XiongMai uc-httpd 1.0.0 - Buffer Overflow Exploit Author: Andrew Watson Software Version: XiongMai uc-httpd 1.0.0 Vendor Homepage: http://www.xiongmaitech.com/en/ Tested on: KKMoon DVR running XiongMai uc-httpd 1.0.0 on...

0.1AI score0.39715EPSS
SaveExploits8
OSV
OSV
•added 2018/06/08 12:29 p.m.•9 views

CVE-2018-10088

Buffer overflow in XiongMai uc-httpd 1.0.0 has unspecified impact and attack vectors, a different vulnerability than CVE-2017-16725...

9.8CVSS5.8AI score0.39715EPSS
SaveExploits8References2
Prion
Prion
•added 2018/06/08 12:29 p.m.•82 views

Buffer overflow

Buffer overflow in XiongMai uc-httpd 1.0.0 has unspecified impact and attack vectors, a different vulnerability than CVE-2017-16725...

10CVSS9.6AI score0.39715EPSS
SaveExploits8References2Affected Software1
NVD
NVD
•added 2018/06/08 12:29 p.m.•34 views

CVE-2018-10088

Buffer overflow in XiongMai uc-httpd 1.0.0 has unspecified impact and attack vectors, a different vulnerability than CVE-2017-16725...

10CVSS9.7AI score0.39715EPSS
SaveExploits8References2
Cvelist
Cvelist
•added 2018/06/08 12:00 p.m.•61 views

CVE-2018-10088

Buffer overflow in XiongMai uc-httpd 1.0.0 has unspecified impact and attack vectors, a different vulnerability than CVE-2017-16725...

9.7AI score0.39715EPSS
SaveExploits8References2
CVE
CVE
•added 2018/06/08 12:00 p.m.•497 views

CVE-2018-10088

CVE-2018-10088 affects XiongMai uc-httpd 1.0.0. A buffer overflow in the login handling (POST /login.htm) can be triggered by a crafted username field (e.g., a long input like 85 'A's) to overflow a stack buffer. PoC Exploit code and public exploit entries demonstrate sending this crafted request...

10CVSS9.4AI score0.39715EPSS
SaveIn wildExploits8References2Affected Software1
Positive Technologies
Positive Technologies
•added 2018/06/08 12:00 a.m.•15 views

PT-2018-9673 · Xiongmai · Uc-Httpd

Name of the Vulnerable Software and Affected Versions: XiongMai uc-httpd version 1.0.0 Description: A buffer overflow issue has been identified, with unspecified impact and attack vectors. Recommendations: For XiongMai uc-httpd version 1.0.0, at the moment, there is no information about a newer...

10CVSS9.6AI score0.39715EPSS
SaveExploits8References6
attackerkb
attackerkb
•added 2018/06/08 12:00 a.m.•454 views

CVE-2018-10088

Buffer overflow in XiongMai uc-httpd 1.0.0 has unspecified impact and attack vectors, a different vulnerability than CVE-2017-16725. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

10CVSS9.2AI score0.39715EPSS
SaveIn wildExploits8References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/06/08 12:00 a.m.•3 views

CVE-2018-10088: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in XiongMai uc-httpd 1.0.0 has unspecified impact and attack vectors, a different vulnerability than CVE-2017-16725...

10CVSS8.1AI score0.39715EPSS
SaveExploits8References2
Exploit DB
Exploit DB
•added 2018/06/08 12:00 a.m.•317 views

XiongMai uc-httpd 1.0.0 - Buffer Overflow

Exploit Title: XiongMai uc-httpd 1.0.0 - Buffer Overflow Date: 2018-06-08 Exploit Author: Andrew Watson Software Version: XiongMai uc-httpd 1.0.0 Vendor Homepage: http://www.xiongmaitech.com/en/ Tested on: KKMoon DVR running XiongMai uc-httpd 1.0.0 on TCP/81 CVE ID: CVE-2018-10088 DISCLAIMER: Thi...

10CVSS8.3AI score0.39715EPSS
SaveExploits8
Packet Storm
Packet Storm
•added 2018/06/08 12:00 a.m.•314 views

XiongMai uc-httpd 1.0.0 Buffer Overflow

Exploit Title: XiongMai uc-httpd 1.0.0 - Buffer Overflow Date: 2018-06-08 Exploit Author: Andrew Watson Software Version: XiongMai uc-httpd 1.0.0 Vendor Homepage: http://www.xiongmaitech.com/en/ Tested on: KKMoon DVR running XiongMai uc-httpd 1.0.0 on TCP/81 CVE ID: CVE-2018-10088 DISCLAIMER: Thi...

0.3AI score0.39715EPSS
SaveExploits8
Openbugbounty
Openbugbounty
•added 2018/06/07 1:35 p.m.•16 views

ucmaskenya.com XSS vulnerability

Open Bug Bounty ID: OBB-628625 Description| Value ---|--- Affected Website:| ucmaskenya.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

SaveExploits0
GithubExploit
GithubExploit
•added 2018/04/13 7:43 a.m.•99 views

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Xiongmaitech Ahb7008F8-H_Firmware

uc-httpd-1.0.0-buffer-overflow-exploit XiongMai uc-httpd 1.0...

10CVSS8.6AI score0.39715EPSS
SaveExploits8
Rows per page
Query Builder