1822 matches found
Various WiMAX routers contain a authentication bypass vulnerability in custom libmtk httpd plugin
Overview WiMAX routers from several vendors making use of a custom httpd plugin for libmtk are vulnerable to an authentication bypass allowing a remote, unauthenticated attacker to change the administrator password on the device. Description CWE-306: Missing Authentication for Critical Function -...
SNMP String Bypass Vulnerability in Two ZTE ZXSS10 Voice Gateway Integrated Access Devices
ZXSS10 I524-FXS2400A and ZXSS10 I508-FXS0800B are two voice gateway integrated access devices from ZTE. An SNMP string bypass vulnerability exists in the ZTE ZXSS10 two voice gateway integrated access devices. An attacker can bypass SNMP access control by using arbitrary strings or integer values...
Telstra 4Gx Portable Router Persistent Root Shell Vulnerability
Exploit for hardware platform in category web applications Majority of this info was found from the 4dpa.ru forum but works well on Telstra Mobile routers. Telstra has been contacted and do not see it as a security issue so have fun messing with your 4g routers, not much of a security issue but i...
Arbitrary Password Reset Vulnerability in ZTE E Academy APP
ZTE E Academy APP is a professional skills learning software. There is an arbitrary password reset vulnerability in ZTE E Academy APP IOS version and Android version. By using a cell phone number to retrieve the password when the SMS verification code is returned directly to the response, you onl...
Arbitrary File Download Vulnerability in ZTE ZXECS EBG2800
The ZXECS EBG2800 is a converged communications product that integrates data, voice, security, behavior management and rich value-added business applications into a single system, providing a variety of functions required by enterprises in a modular format. An arbitrary file download vulnerabilit...
ZTE enterprise gateway system modules/system/download.php arbitrary File Download vulnerability
No description provided by source...
ZTE light cat F620 unauthorized access causes leakage of sensitive information
No description provided by source...
ZTE ZXV10 MS90 video conferencing management system SQL injection vulnerability
No description provided by source...
ZTE enterprise gateway system local_rollback.be.php command execution vulnerability
No description provided by source...
ZTE enterprise gateway system voip_eone. be. php etc file command execution vulnerability
No description provided by source...
ZTE enterprise gateway system reporting_calllogs_export.php command execution vulnerability
No description provided by source...
ZTE enterprise gateway system index.php select_lang local file inclusion vulnerability
No description provided by source...
ZTE enterprise gateway system voip_eone.be.php parameters hid_id, etc. 2 arbitrary command execution vulnerability
No description provided by source...
ZTE ZXECS EBG2800 enterprise business gateway system sys_backuprestore.be.php arbitrary file upload vulnerability
No description provided by source...
ZTE gateway device sta_service.be.php parameters hid_module command execution vulnerability
No description provided by source...
ZTE gateway device /modules/service/download.php the file id parameter local file include vulnerability
No description provided by source...
ZTE gateway device email_download.php that download.php around arbitrary File Download vulnerability
No description provided by source...
ZTE Management system网关设备通用型2处任意文件下载漏洞
No description provided by source...
ZTE ZXECS EBG2800 enterprise business gateway system arbitrary File Download
No description provided by source...
RomPager 4.34 Authentication Bypass
Title: Misfortune Cookie Exploit RomPager = 4.34 router authentication remover Date: 17/4/2016 CVE: CVE-2015-9222 http://mis.fortunecook.ie Vendors: ZyXEL,TP-Link,D-Link,Nilox,Billion,ZTE,AirLive,... Vulnerable models: http://mis.fortunecook.ie/misfortune-cookie-suspected-vulnerable.pdf Versions...