TH692 Outdoor P2P HD Waterproof IP Camera Hard-Coded Credentials

Exploit Title: TH692- Outdoor P2P HD Waterproof IP Camera hardcoded credentials Date: 4/16/2016 Exploit Author: DLY Vendor: TENVIS Technology Co., Ltd Product: TH692- Outdoor P2P HD Waterproof IP Camera Product webpage: http://www.tenvis.com/th-692-outdoor-p2p-hd-waterproof-ip-camera-p-230.html...

Quanta LTE Router Code Execution / Backdoor Accounts

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory Information Title: Multiple vulnerabilities found in Quanta LTE routers backdoor, backdoor accounts, RCE, weak WPS ... Advisory URL: https://pierrekim.github.io/advisories/2016-quanta-0x00.txt Blog URL:...

Trend Micro Deep Discovery Inspector 3.7 / 3.8 CSRF

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/TRENDMICRO-DDI-CSRF.txt Vendor: ==================== www.trendmicro.com Product: ========================================= Trend Micro Deep Discovery Inspector V3.8, 3.7 Deep...

Trend Micro Deep Discovery Inspector 3.8/3.7 - Cross-Site Request Forgery

Exploit for php platform in category web applications + Credits: John Page aka hyp3rlinx Vendor: ==================== www.trendmicro.com Product: ========================================= Trend Micro Deep Discovery Inspector V3.8, 3.7 Deep Discovery Inspector is a network appliance that gives you...

Trend Micro Deep Discovery Inspector 3.8/3.7 - Cross-Site Request Forgery

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/TRENDMICRO-DDI-CSRF.txt Vendor: ==================== www.trendmicro.com Product: ========================================= Trend Micro Deep Discovery Inspector V3.8, 3.7 Deep...

Microsoft Edge Code Execution

The vulnerability of Microsoft Edge arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a denial-of-service attack memory corruption using a specially crafted web page...

Deluge of Apple Patches Fix Vulnerabilities in OS X, iOS, Safari, and More

In addition to fixing the serious crypto vulnerabilities in iMessage that surfaced yesterday, Apple also deployed patches for nearly all of its products, including Safari, OS X, iOS, Apple TV’s tvOS, and watchOS. The iOS update, 9.3, is arguably the most pressing given the cryptographic issue dug...

Mozilla Firefox WebRTC Conditional Competition Vulnerability

Firefox is an open source web browser. A competitive condition vulnerability in GetStaticInstance in Mozilla Firefox WebRTC allows remote attackers to exploit the vulnerability to construct a malicious WEB page, which can be tricked into parsing by the user and can crash the application...

Mozilla Firefox and Firefox ESR Memory Misreference Vulnerability

Firefox is an open source Web browser ; Firefox ESR is an extended support version of Firefox.Graphite is a set of Python language , written using the Django framework for enterprise-class open source system monitoring tools . A memory misreference vulnerability exists in Mozilla Firefox and...

Adobe Flash Player integer overflow vulnerability (CNVD-2016-01624)

Adobe Flash Player is a multimedia player product; Adobe AIR SDK and Adobe AIR SDK & Compiler are both standard development kits for Adobe AIR. An integer overflow vulnerability exists in Adobe Flash Player, which could be exploited by remote attackers to construct a malicious web page that could...

Adobe Flash Player Memory Corruption Vulnerability (CNVD-2016-01611)

Adobe Flash Player is a multimedia player product; Adobe AIR SDK and Adobe AIR SDK & Compiler are both standard development kits for Adobe AIR. A memory corruption vulnerability exists in Adobe Flash Player, which could be exploited by remote attackers to construct a malicious web page that could...

Adobe Flash Player Memory Corruption Vulnerability (CNVD-2016-01619)

Adobe Flash Player is a multimedia player product; Adobe AIR SDK and Adobe AIR SDK & Compiler are both standard development kits for Adobe AIR. A memory corruption vulnerability exists in Adobe Flash Player, which could be exploited by remote attackers to construct a malicious web page that could...

Adobe Flash Player Memory Misreference Vulnerability (CNVD-2016-01613)

Adobe Flash Player is a multimedia player product; Adobe AIR SDK and Adobe AIR SDK & Compiler are both standard development kits for Adobe AIR. A memory misreference vulnerability exists in Adobe Flash Player, which allows remote attackers to exploit the vulnerability to construct a malicious web...

Adobe Flash Player Integer Overflow Vulnerability (CNVD-2016-01625)

Adobe Flash Player is a multimedia player product; Adobe AIR SDK and Adobe AIR SDK & Compiler are both standard development kits for Adobe AIR. An integer overflow vulnerability exists in Adobe Flash Player, which could be exploited by remote attackers to construct a malicious web page that could...

Adobe Flash Player Memory Misreference Vulnerability (CNVD-2016-01628)

Adobe Flash Player is a multimedia player product; Adobe AIR SDK and Adobe AIR SDK & Compiler are both standard development kits for Adobe AIR. A memory misreference vulnerability exists in Adobe Flash Player, which allows remote attackers to exploit the vulnerability to construct a malicious web...

MS16-030: Security update for Windows OLE to address remote code execution: March 8, 2016

Resolves vulnerabilities in Windows that could allow remote code execution if Windows OLE fails to properly validate user input. An attacker could exploit the vulnerabilities to execute malicious code after convincing a user to open a specially crafted file or a program from either a webpage or a...

Safari iOS Code Execution

The vulnerability of the WebKit component in the Safari browser and the iOS operating system is caused by buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a service failure memory corruption through a specially crafted web page...

browsers Internet Explorer and

The vulnerabilities of Internet Explorer and Microsoft Edge exist due to deficiencies in the implementation of HTTP responses. Exploiting these vulnerabilities allows a malicious actor to replace websites using a specially crafted URL...

Internet Explorer Code Execution

The vulnerability of the Internet Explorer browser arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a service failure memory corruption by using a specially crafted web page...

Mac OS X iOS DoS Execution Arbitrary Code

The vulnerability of the OpenGL component in Mac OS X and iOS operating systems arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely or cause a service failure memory corruption by using a specially crafted web page...