Security Setup Tool Untrusted Search Path Vulnerability

Security Setup Tool is a security setup tool from NIPPON TELEGRAPH AND TELEPHONE WEST, Japan. An untrusted search path vulnerability exists in Security Setup Tool. The vulnerability can be exploited by a remote attacker to gain privileges via a malicious DLL file in a directory...

Installer of "Remote Support Tool (Enkaku Support Tool)" may insecurely load Dynamic Link Libraries

Overview Installer of "Remote Support Tool Enkaku Support Tool" provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION and NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Eili...

Installer of "Flets Setsuzoku Tool" may insecurely load Dynamic Link Libraries

Overview Installer of "Flets Setsuzoku Tool"provided by NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Eili Masami of Tachibana Lab. reported this vulnerability to IPA. JPCERT/CC...

JVN#22272314: Installer of "Flets Setsuzoku Tool" may insecurely load Dynamic Link Libraries

Installer of "Flets Setsuzoku Tool"provided by NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the privilege of the user invoking the...

JVN#11601216: Installer of "Security Kinou Mihariban" may insecurely load Dynamic Link Libraries

Installer of "Security Kinou Mihariban" provided by NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the privilege of the user invoking the...

JVN#14926025: Installer of ”Flets Install Tool” may insecurely load Dynamic Link Libraries

Installer of "Flets Install Tool" provided by NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the privilege of the user invoking the installe...

West Bank and Gaza move DST end date to October 29, 2016

None None...

Dropping Elephant hacker group using the old Windows vulnerability to implementation attacks-vulnerability warning-the black bar safety net

! As the old saying goes:don't judge people on. For the network of criminal organizations is the same,not only from its use of the vulnerability to determine a hacker organizations. According to foreign media reports,Kaspersky Lab's global research and analysis team has discovered a network of...

CVE-2016-1228

Cross-site request forgery CSRF vulnerability on NTT EAST Hikari Denwa routers with firmware PR-400MI, RT-400MI, and RV-440MI 07.00.1006 and earlier and NTT WEST Hikari Denwa routers with firmware PR-400MI, RT-400MI, and RV-440MI 07.00.1005 and earlier allows remote attackers to hijack the...

CVE-2016-1228

Cross-site request forgery CSRF vulnerability on NTT EAST Hikari Denwa routers with firmware PR-400MI, RT-400MI, and RV-440MI 07.00.1006 and earlier and NTT WEST Hikari Denwa routers with firmware PR-400MI, RT-400MI, and RV-440MI 07.00.1005 and earlier allows remote attackers to hijack the...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability on NTT EAST Hikari Denwa routers with firmware PR-400MI, RT-400MI, and RV-440MI 07.00.1006 and earlier and NTT WEST Hikari Denwa routers with firmware PR-400MI, RT-400MI, and RV-440MI 07.00.1005 and earlier allows remote attackers to hijack the...

CVE-2016-1227

NTT EAST Hikari Denwa routers with firmware PR-400MI, RT-400MI, and RV-440MI 07.00.1006 and earlier and NTT WEST Hikari Denwa routers with firmware PR-400MI, RT-400MI, and RV-440MI 07.00.1005 and earlier allow remote authenticated users to execute arbitrary OS commands via unspecified vectors...

CVE-2016-1228

CVE-2016-1228 corresponds to a cross-site request forgery (CSRF) vulnerability in NTT Hikari Denwa routers. Affected products include NTT EAST Hikari Denwa PR-400MI, RT-400MI, and RV-440MI with firmware 07.00.1006 and earlier, and NTT WEST Hikari Denwa PR-400MI, RT-400MI, and RV-440MI with firmwa...

CVE-2016-1227

CVE-2016-1227 describes an OS command injection (CWE-78) in several Hikari Denwa routers. A logged-in attacker could execute arbitrary OS commands on affected devices: NTT EAST PR-400MI/RT-400MI/RV-440MI (firmware 07.00.1006 and earlier) and NTT WEST PR-400MI/RT-400MI/RV-440MI (firmware 07.00.100...

PT-2016-4653

Name of the Vulnerable Software and Affected Versions NTT EAST Hikari Denwa routers versions PR-400MI, RT-400MI, and RV-440MI 07.00.1006 and earlier NTT WEST Hikari Denwa routers versions PR-400MI, RT-400MI, and RV-440MI 07.00.1005 and earlier Description A cross-site request forgery CSRF issue...

CVE-2016-1227: Undefined Security Weakness

NTT EAST Hikari Denwa routers with firmware PR-400MI, RT-400MI, and RV-440MI 07.00.1006 and earlier and NTT WEST Hikari Denwa routers with firmware PR-400MI, RT-400MI, and RV-440MI 07.00.1005 and earlier allow remote authenticated users to execute arbitrary OS commands via unspecified vectors...

CVE-2016-1228: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability on NTT EAST Hikari Denwa routers with firmware PR-400MI, RT-400MI, and RV-440MI 07.00.1006 and earlier and NTT WEST Hikari Denwa routers with firmware PR-400MI, RT-400MI, and RV-440MI 07.00.1005 and earlier allows remote attackers to hijack the...

namaquawestcoast.com XSS vulnerability

Vulnerable URL: http://www.namaquawestcoast.com/accommodation/town.php?town=1%22--%3E%3Csvg/onload=;prompt/OPENBUGBOUNTY/;%3Estrandfontein Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

JVN#45034304: Multiple Hikari Denwa routers vulnerable to cross-site request forgery

Multiple Hikari Denwa routers contain a cross-site request forgery vulnerability CWE-352. Impact If a user views a malicious page while logged in, unintended operations may be performed. Solution Update the Firmware Apply the appropriate firmware update provided by the developer. Products Affecte...

JVN#77403442: Multiple Hikari Denwa routers vulnerable to OS command injection

Multiple Hikari Denwa routers contain an OS command injection vulnerability CWE-78. Impact An arbitrary OS command may be executed on the product by a logged-in attacker. Solution Update the Firmware Apply the appropriate firmware update provided by the developer. Products Affected NIPPON TELEGRA...