Buffer overflow

Buffer overflow in XiongMai uc-httpd 1.0.0 has unspecified impact and attack vectors, a different vulnerability than CVE-2017-16725...

CVE-2018-10088

Buffer overflow in XiongMai uc-httpd 1.0.0 has unspecified impact and attack vectors, a different vulnerability than CVE-2017-16725...

CVE-2018-10088

Buffer overflow in XiongMai uc-httpd 1.0.0 has unspecified impact and attack vectors, a different vulnerability than CVE-2017-16725...

CVE-2018-10088

CVE-2018-10088 affects XiongMai uc-httpd 1.0.0. A buffer overflow in the login handling (POST /login.htm) can be triggered by a crafted username field (e.g., a long input like 85 'A's) to overflow a stack buffer. PoC Exploit code and public exploit entries demonstrate sending this crafted request...

CVE-2018-10088

Buffer overflow in XiongMai uc-httpd 1.0.0 has unspecified impact and attack vectors, a different vulnerability than CVE-2017-16725...

PT-2018-9673 · Xiongmai · Uc-Httpd

Name of the Vulnerable Software and Affected Versions: XiongMai uc-httpd version 1.0.0 Description: A buffer overflow issue has been identified, with unspecified impact and attack vectors. Recommendations: For XiongMai uc-httpd version 1.0.0, at the moment, there is no information about a newer...

CVE-2018-10088

Buffer overflow in XiongMai uc-httpd 1.0.0 has unspecified impact and attack vectors, a different vulnerability than CVE-2017-16725. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

XiongMai uc-httpd 1.0.0 Buffer Overflow

Exploit Title: XiongMai uc-httpd 1.0.0 - Buffer Overflow Date: 2018-06-08 Exploit Author: Andrew Watson Software Version: XiongMai uc-httpd 1.0.0 Vendor Homepage: http://www.xiongmaitech.com/en/ Tested on: KKMoon DVR running XiongMai uc-httpd 1.0.0 on TCP/81 CVE ID: CVE-2018-10088 DISCLAIMER: Thi...

XiongMai uc-httpd 1.0.0 - Buffer Overflow

Exploit Title: XiongMai uc-httpd 1.0.0 - Buffer Overflow Date: 2018-06-08 Exploit Author: Andrew Watson Software Version: XiongMai uc-httpd 1.0.0 Vendor Homepage: http://www.xiongmaitech.com/en/ Tested on: KKMoon DVR running XiongMai uc-httpd 1.0.0 on TCP/81 CVE ID: CVE-2018-10088 DISCLAIMER: Thi...

ucmaskenya.com XSS vulnerability

Open Bug Bounty ID: OBB-628625 Description| Value ---|--- Affected Website:| ucmaskenya.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Xiongmaitech Ahb7008F8-H_Firmware

uc-httpd-1.0.0-buffer-overflow-exploit XiongMai uc-httpd 1.0...

directory.ucmerced.edu XSS vulnerability

Open Bug Bounty ID: OBB-557641 Description| Value ---|--- Affected Website:| directory.ucmerced.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

fps.ucdavis.edu XSS vulnerability

Open Bug Bounty ID: OBB-457305 Description| Value ---|--- Affected Website:| fps.ucdavis.edu Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

XiongMai uc-httpd Directory Traversal Vulnerability

XiongMai uc-httpd is a HTTP protection program for cameras and other products from XiongMai. A directory traversal vulnerability exists in XiongMai uc-httpd. A remote attacker can send a 'GET ... /' HTTP request to exploit the vulnerability to read arbitrary files...

nalc.ucdavis.edu XSS vulnerability

Open Bug Bounty ID: OBB-318112 Description| Value ---|--- Affected Website:| nalc.ucdavis.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

registrar.ucdavis.edu XSS vulnerability

Open Bug Bounty ID: OBB-299601 Description| Value ---|--- Affected Website:| registrar.ucdavis.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

UC Browser - Fast Download Private & Secure - Base64 encoded String, Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application UC Browser - Fast Download Private & Secure published at the 'play' market has multiple vulnerabilities...

uc-httpd Local File Inclusion / Traversal

| \ | \ | | | | | | / \ | | | |/ / | |/ / | | | | | | | | | / / | | | / | / | | | | | | | | | | | | | | | |\ \ \ / / // / | | | /\ | | | | | / / / / / | | | \ | | / | | | / \ | | | | | \ | | | | \ \ / / | | | | | \ --. | | | / / | | | | | |/ / | | | | \ V / | | | . | --. \ | | | | | |...

uc-http Daemon - Local File Inclusion Directory Traversal

uc-http Daemon - Local File Inclusion Directory Traversal ''' | \ | \ | | | | | | / \ | | | |/ / | |/ / | | | | | | | | | / / | | | / | / | | | | | | | | | | | | | | | |\ \ \ / / // / | | | /\ | | | | | / / / / / | | | \ | | / | | | / \ | | | | | \ | | | | \ \ / / | | | | | \ --. | | |...

uc-http Daemon - Local File Inclusion / Directory Traversal Vulnerabilities

Exploit for hardware platform in category web applications ''' | \ | \ | | | | | | / \ | | | |/ / | |/ / | | | | | | | | | / / | | | / | / | | | | | | | | | | | | | | | |\ \ \ / / // / | | | /\ | | | | | / / / / / | | | \ | | / | | | / \ | | | | | \ | | | | \ \ / / | | | | | \ --. | |...