Lucene search
+L

8933 matches found

Tenable Nessus
Tenable Nessus
•added 2019/06/21 12:00 a.m.•25 views

Cisco IOS XR Software Protocol Independent Multicast Denial of Service Vulnerability

According to its self-reported version, Cisco IOS XR Software is affected by a vulnerability in the Protocol Independent Multicast PIM feature of Cisco IOS XR Software. This could allow an unauthenticated, remote attacker to cause the PIM process to restart, resulting in a denial of service...

7.5CVSS6.8AI score0.0264EPSS
SaveExploits0References3
NVD
NVD
•added 2019/06/17 10:15 p.m.•31 views

CVE-2017-10724

Recently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope that an attacker connected to the device Wi-Fi SSID can exploit a memory corruption issue and execute remote code on the device. This device acts as an Endoscope camera that allows...

8.8CVSS9.2AI score0.02522EPSS
SaveExploits1References3
Prion
Prion
•added 2019/06/17 10:15 p.m.•26 views

Memory corruption

Recently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope that an attacker connected to the device Wi-Fi SSID can exploit a memory corruption issue and execute remote code on the device. This device acts as an Endoscope camera that allows...

6.5CVSS9.1AI score0.02522EPSS
SaveExploits1References3
Prion
Prion
•added 2019/06/17 10:15 p.m.•31 views

Memory corruption

Recently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope that an attacker connected to the device Wi-Fi SSID can exploit a memory corruption issue and execute remote code on the device. This device acts as an Endoscope camera that allows...

6.5CVSS9.1AI score0.02522EPSS
SaveExploits1References3
CVE
CVE
•added 2019/06/17 9:36 p.m.•82 views

CVE-2017-10724

CVE-2017-10724 describes a memory corruption/overflow issue in the firmware of the Shekar Endoscope. The vulnerability arises in the UDP handling path: a crafted UDP request to change the Wi‑Fi name is processed by the control_Dev_thread, leading to a call to setwifipassword which uses memcpy wit...

8.8CVSS9.1AI score0.02522EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
•added 2019/06/17 12:00 a.m.•4 views

PT-2019-7868

Name of the Vulnerable Software and Affected Versions Shekar Endoscope affected versions not specified Description A memory corruption issue was discovered in the Shekar Endoscope device, allowing an attacker connected to the device's Wi-Fi SSID to execute remote code on the device. This device i...

8.8CVSS0.02522EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/06/17 12:00 a.m.•8 views

CVE-2017-10723: Improper Restriction of Operations within the Bounds of a Memory Buffer

Recently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope that an attacker connected to the device Wi-Fi SSID can exploit a memory corruption issue and execute remote code on the device. This device acts as an Endoscope camera that allows...

8.8CVSS6.3AI score0.02522EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2019/06/17 12:00 a.m.•5 views

PT-2019-7867

Name of the Vulnerable Software and Affected Versions Shekar Endoscope affected versions not specified Description A memory corruption issue was discovered in the Shekar Endoscope, allowing an attacker connected to the device's Wi-Fi SSID to execute remote code on the device. This device is used ...

8.8CVSS0.02522EPSS
SaveExploits1References5
Kitploit
Kitploit
•added 2019/06/13 10:09 p.m.•239 views

Salsa Tools - ShellReverse TCP/UDP/ICMP/DNS/SSL/BINDTCP and AV bypass, AMSI patched

Salsa Tools is a collection of three different tools that combined, allows you to get a reverse shell on steroids in any Windows environment without even needing PowerShell for it's execution. In order to avoid the latest detection techniques AMSI, most of the components were initially written on...

7.5AI score
SaveExploits0References3
Pen Test Partners Blog
Pen Test Partners Blog
•added 2019/06/13 10:36 a.m.•233 views

Covert Keylogging: Sniping your Typing

There have been many attempts at making key logging devices or software over the years, however, whilst a DIY solution is usually made from large Raspberry Pi devices or Arduino boards, the KeyLogger PRO offering from Maltronics has raised a few eyebrows with regards to the wealth of features...

6.7AI score
SaveExploits0
Prion
Prion
•added 2019/06/12 3:29 p.m.•32 views

Integer overflow

Fuji Electric V-Server before 6.0.33.0 is vulnerable to denial of service via a crafted UDP message sent to port 8005. An unauthenticated, remote attacker can crash vserver.exe due to an integer overflow in the UDP message handling logic...

5CVSS7.5AI score0.0233EPSS
SaveExploits1References2Affected Software1
OSV
OSV
•added 2019/06/12 3:29 p.m.•18 views

CVE-2019-3946

Fuji Electric V-Server before 6.0.33.0 is vulnerable to denial of service via a crafted UDP message sent to port 8005. An unauthenticated, remote attacker can crash vserver.exe due to an integer overflow in the UDP message handling logic...

7.5CVSS7.2AI score0.0233EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2019/06/12 2:06 p.m.•41 views

CVE-2019-3946

Fuji Electric V-Server before 6.0.33.0 is vulnerable to denial of service via a crafted UDP message sent to port 8005. An unauthenticated, remote attacker can crash vserver.exe due to an integer overflow in the UDP message handling logic...

7.5AI score0.0233EPSS
SaveExploits1References2
CVE
CVE
•added 2019/06/12 2:06 p.m.•92 views

CVE-2019-3946

Affected product: Fuji Electric V-Server (pre-6.0.33.0). Component/trigger: UDP message handling on port 8005. Root cause: integer overflow in UDP processing leads to crash of vserver.exe. Impact: denial of service with partial/high availability impact as per CVSS (unauthenticated remote attacker...

7.5CVSS7.5AI score0.0233EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
•added 2019/06/12 12:00 a.m.•4 views

PT-2019-16796

Name of the Vulnerable Software and Affected Versions Fuji Electric V-Server versions prior to 6.0.33.0 Description The issue allows an unauthenticated, remote attacker to cause a denial of service by sending a crafted UDP message to port 8005. This is due to an integer overflow in the UDP messag...

7.5CVSS0.0233EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/06/12 12:00 a.m.•9 views

CVE-2019-3946: Integer Overflow or Wraparound

Fuji Electric V-Server before 6.0.33.0 is vulnerable to denial of service via a crafted UDP message sent to port 8005. An unauthenticated, remote attacker can crash vserver.exe due to an integer overflow in the UDP message handling logic...

7.5CVSS5.9AI score0.0233EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2019/06/07 12:00 a.m.•69 views

McAfee Agent 5.0.x < 5.0.6 HF1267994 / 5.5.x < 5.5.1 HF1267991 / 5.6.x < 5.6.1 UDP DoS (SB10272)

The version of McAfee Agent, formerly McAfee ePolicy Orchestrator ePO Agent, installed on the remote host is 5.0.x prior to 5.0.6 HF1267994, 5.5.x prior to 5.5.1 HF1267991, or 5.6.x prior to 5.6.1. It is, therefore, affected by a denial of service vulnerability. An unauthenticated, remote attacke...

5.3CVSS5.8AI score0.01851EPSS
SaveExploits0References2
OSS-Fuzz
OSS-Fuzz
•added 2019/06/02 9:36 p.m.•21 views

wireshark/fuzzshark_ip_proto-udp: Heap-buffer-overflow in g_strdup

Detailed report: https://oss-fuzz.com/testcase?key=5673875611844608 Project: wireshark Fuzzer: libFuzzerwiresharkfuzzsharkipproto-udp Fuzz target binary: fuzzsharkipproto-udp Job Type: libfuzzerasanwireshark Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x605000568c34...

6.8AI score
SaveExploits0Affected Software1
OSS-Fuzz
OSS-Fuzz
•added 2019/06/02 9:35 p.m.•27 views

wireshark/fuzzshark_ip_proto-udp: Heap-buffer-overflow in reassemble_continuation_state

Detailed report: https://oss-fuzz.com/testcase?key=5661584824729600 Project: wireshark Fuzzer: aflwiresharkfuzzsharkipproto-udp Fuzz target binary: fuzzsharkipproto-udp Job Type: aflasanwireshark Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x604002190634 Crash State:...

6.8AI score
SaveExploits0Affected Software1
NVD
NVD
•added 2019/05/23 2:29 p.m.•33 views

CVE-2019-12297

An issue was discovered in scopd on Motorola routers CX2 1.01 and M2 1.01. There is a Use of an Externally Controlled Format String, reachable via TCP port 8010 or UDP port 8080...

9.8CVSS9.6AI score0.01656EPSS
SaveExploits1References1
Rows per page
Query Builder