Htek UC902 VoIP phone Buffer Overflow Vulnerability

Htek UC902 VoIP phone is an IP phone from China Hanlong Technology Htek. A buffer overflow vulnerability exists in the web management interface in the Htek UC902 VoIP phone using firmware version 2.0.4.4.46. The vulnerability originates when a network system or product performs operations on memo...

The vulnerability in the web-based management interfaces of Cisco RV110W Wireless-N VPN Firewalls, Cisco RV130W Wireless-N Multifunction VPN Routers, and Cisco RV215W Wireless-N VPN Routers allows a attacker to cause service interruptions.

The vulnerability in the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router web management interfaces is related to authentication process errors. Exploiting this vulnerability can allow an attacker to disable clients...

The vulnerability in the web-based management interfaces of Cisco RV110W Wireless-N VPN Firewalls, Cisco RV130W Wireless-N Multifunction VPN Routers, and Cisco RV215W Wireless-N VPN Routers allows a attacker to access a list of devices connected to the network.

The vulnerability in the web-based management interfaces of Cisco RV110W Wireless-N VPN Firewalls, Cisco RV130W Wireless-N Multifunction VPN Routers, and Cisco RV215W Wireless-N VPN Routers is related to authentication process errors. Exploiting this vulnerability can allow an attacker to gain...

CVE-2019-12325

The Htek UC902 VoIP phone web management interface contains several buffer overflow vulnerabilities in the firmware version 2.0.4.4.46, which allow an attacker to crash the device DoS without authentication or execute code authenticated as a user to spawn a remote shell as a root user...

CVE-2019-12325

The CVE-2019-12325 entry concerns the Htek UC902 VoIP phone, specifically the web management interface in firmware 2.0.4.4.46, which has buffer overflow vulnerabilities. The documented impact includes the ability to crash the device (DoS) without authentication or to execute code (authenticated a...

VANOC Enterprise Website Management System PHP v3.0 suffers from SQL injection vulnerability.

Vanno enterprise website management system PHP version is a php+MySQL development of php enterprise website management system. Vanno Enterprise Website Management System PHP version v3.0 suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database...

Cisco Small Business Switch Information Leakage / Open Redirect

Exploit Title: CISCO Small Business 200, 300, 500 Switches Multiple Vulnerabilities. Shodan query: /config/logoffpage.html Discovered Date: 07/03/2014 Reported Date: 08/04/2019 Exploit Author: Ramikan Website: http://fact-in-hack.blogspot.com Vendor...

CVE-2017-11579

In the most recent firmware for Blipcare, the device provides an open Wireless network called "Blip" for communicating with the device. The user connects to this open Wireless network and uses the web management interface of the device to provide the user's Wi-Fi credentials so that the device ca...

CVE-2017-11578

It was discovered as a part of the research on IoT devices in the most recent firmware for Blipcare device that the device allows to connect to web management interface on a non-SSL connection using plain text HTTP protocol. The user uses the web management interface of the device to provide the...

CVE-2017-11578

CVE-2017-11578 affects the Blipcare wireless blood pressure monitor. The device exposes its web management interface over plain HTTP (non-SSL), allowing an attacker on the same wireless network to conduct a MITM and sniff the user’s Wi‑Fi credentials. The impact is disclosure of credentials witho...

Cross site scripting

An issue was discovered on D-Link DCS-1130 devices. The device provides a user with the capability of changing the administrative password for the web management interface. It seems that the device does not implement any cross-site request forgery protection mechanism which allows an attacker to...

CVE-2017-8407

An issue was discovered on D-Link DCS-1130 devices. The device provides a user with the capability of changing the administrative password for the web management interface. It seems that the device does not implement any cross-site request forgery protection mechanism which allows an attacker to...

CVE-2017-8407

CVE-2017-8407 affects D-Link DCS-1130 network cameras. The issue is a lack of cross-site request forgery protection in the web management interface, allowing an attacker to trick a logged-in user into changing the user’s administrative password. The vulnerability’s impact is partial confidentiali...

Cisco RV110W, RV130W, and RV215W Authorization Issues Vulnerabilities

Cisco?RV110W and others are a VPN firewall router from Cisco USA. An authorization issue vulnerability exists in the web-based management interface in the Cisco RV110W, RV130W, and RV215W, which can be exploited by a remote attacker to access information in the syslog file...

Cisco RV110W, RV130W, and RV215W Authorization Issue Vulnerabilities (CNVD-2019-18900)

Cisco?RV110W and others are a VPN firewall router from Cisco USA. An authorization issue vulnerability exists in the Web-based management interface in the Cisco RV110W, RV130W, and RV215W, which stems from the program's failure to properly authorize HTTP requests and can be exploited by remote...

Cisco Identity Services Engine Multiple Cross-Site Scripting Vulnerabilities (cisco-sa-20190109-ise-multi-xss)

According to its self-reported version, Cisco Identity Services Engine Software is affected by multiple cross-site scripting vulnerabilities. This could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting XSS attack or a reflected cross-site scripting XSS attack...

CVE-2019-1843

The CVE-2019-1843 issue affects Cisco RV110W, RV130W, and RV215W routers. It stems from improper validation of user-supplied data in the web-based management interface, allowing an unauthenticated, remote attacker to send crafted HTTP requests to reload the device and cause a denial of service. T...

Cisco Multiple Products Remote Code Execution (CVE-2019-1821)

A remote code execution vulnerability exists in the web based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager. A remote unauthenticated attacker could exploit this vulnerability to execute code with root level privileges on the target system...

Cisco RV110W, RV130W, RV215W Management Interface Denial of Service Vulnerability

The RV110W is a Wireless-N VPN firewall router from Cisco.The RV130W is a Wireless-N multifunction VPN router from Cisco.The RV215W is a Wireless-N VPN router from Cisco.The RV130W is a Wireless-N multifunction VPN router from Cisco.The RV215W is a Wireless-N VPN router from Cisco. A...

CVE-2017-8332

An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096. The device provides a user with the capability of blocking key words passing in the web traffic to prevent kids from watching content that might be deemed unsafe using the web management interface...