1823 matches found
CVE-2022-39074
Technical details (affected models, root cause, impact, fixes) are not publicly available in the provided documents. Monitor for updates from vendors and vulnerability trackers.
PT-2023-13685 · Zte · Zte Mobile Phones
Name of the Vulnerable Software and Affected Versions: ZTE mobile phones affected versions not specified Description: The issue allows for unauthorized access. A malicious application installed on the phone could start a non-public interface of an application without user permission...
CVE-2022-39071
There is an unauthorized access vulnerability in some ZTE mobile phones. If a malicious application is installed on the phone, it could overwrite some system configuration files and user installers without user permission...
CVE-2022-39075
There is an unauthorized access vulnerability in some ZTE mobile phones. If a malicious application is installed on the phone, it could delete some system files without user permission...
PT-2023-13686 · Zte · Zte Mobile Phones
Name of the Vulnerable Software and Affected Versions: ZTE mobile phones affected versions not specified Description: The issue allows for unauthorized access, potentially enabling a malicious application to delete system files without user permission after being installed on the phone...
ZTE 手机 安全漏洞
The ZTE cell phone is a network device from China's ZTE Corporation ZTE. ZTE's cellular device. The ZTE phone suffers from a security vulnerability that stems from the fact that if a malicious application is installed on the phone, it may launch the application's non-public interface without the...
DLL Hijacking Vulnerability in ZTE Corporation uSmartView VDI McClient
ZTE Corporation is a leading global provider of integrated communications and information technology solutions. A DLL hijacking vulnerability exists in ZTE Corporation's uSmartView VDI McClient, which can be exploited by attackers to execute malicious code...
NewStart CGSL CORE 5.05 / MAIN 5.05 : cyrus-sasl Vulnerability (NS-SA-2023-0012)
The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has cyrus-sasl packages installed that are affected by a vulnerability: - In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE statement. CVE-2022-24407 Note...
NewStart CGSL CORE 5.05 / MAIN 5.05 : zlib Vulnerability (NS-SA-2023-0021)
The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has zlib packages installed that are affected by a vulnerability: - zlib before 1.2.12 allows memory corruption when deflating i.e., when compressing if the input has many distant matches. CVE-2018-25032 Note that Nessus has no...
ZTE-H108NS Router - Stack Buffer Overflow Exploit
Exploit Title: ZTE-H108NS - Stack Buffer Overflow DoS Exploit Author: George Tsimpidas Vendor: https://www.zte.com.cn/global/ Firmware: H108NSV1.0.7uZRDGR2A68 Usage: python zte-exploit.py CVE: N/A Tested on: Debian 5.18.5 !/usr/bin/python3 import sys import socket from time import sleep host =...
Router ZTE-H108NS - Stack Buffer Overflow (DoS)
Exploit Title: ZTE-H108NS - Stack Buffer Overflow DoS Date: 19-11-2022 Exploit Author: George Tsimpidas Vendor: https://www.zte.com.cn/global/ Firmware: H108NSV1.0.7uZRDGR2A68 Usage: python zte-exploit.py CVE: N/A Tested on: Debian 5.18.5 !/usr/bin/python3 import sys import socket from time impor...
Router ZTE-H108NS - Authentication Bypass
Exploit Title: Router ZTE-H108NS - Authentication Bypass Date: 19-11-2022 Exploit Author: George Tsimpidas Vendor: https://www.zte.com.cn/global/ Firmware: H108NSV1.0.7uZRDGR2A68 CVE: N/A Tested on: Debian 5.18.5 Description : When specific http methods are listed within a security constraint, th...
ZTE-H108NS Router - Authentication Bypass Vulnerability
Exploit Title: Router ZTE-H108NS - Authentication Bypass Exploit Author: George Tsimpidas Vendor: https://www.zte.com.cn/global/ Firmware: H108NSV1.0.7uZRDGR2A68 CVE: N/A Tested on: Debian 5.18.5 Description : When specific http methods are listed within a security constraint, then only those...
NewStart CGSL MAIN 6.02 : zlib Vulnerability (NS-SA-2023-0004)
The remote NewStart CGSL host, running version MAIN 6.02, has zlib packages installed that are affected by a vulnerability: - zlib before 1.2.12 allows memory corruption when deflating i.e., when compressing if the input has many distant matches. CVE-2018-25032 Note that Nessus has not tested for...
NewStart CGSL MAIN 6.02 : sos Vulnerability (NS-SA-2023-0003)
The remote NewStart CGSL host, running version MAIN 6.02, has sos packages installed that are affected by a vulnerability: - It was found that the ovirt-log-collector/sosreport collects the RHV admin password unfiltered. Fixed in: sos-4.2-20.el86, ovirt-log-collector-4.4.7-2.el8ev CVE-2022-2806...
NewStart CGSL MAIN 6.02 : ruby Vulnerability (NS-SA-2023-0005)
The remote NewStart CGSL host, running version MAIN 6.02, has ruby packages installed that are affected by a vulnerability: - There is a buffer over-read in Ruby before 2.6.10, 2.7.x before 2.7.6, 3.x before 3.0.4, and 3.1.x before 3.1.2. It occurs in String-to-Float conversion, including...
NewStart CGSL CORE 5.04 / MAIN 5.04 : sos Vulnerability (NS-SA-2023-0002)
The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has sos packages installed that are affected by a vulnerability: - It was found that the ovirt-log-collector/sosreport collects the RHV admin password unfiltered. Fixed in: sos-4.2-20.el86, ovirt-log-collector-4.4.7-2.el8ev...
NewStart CGSL CORE 5.04 / MAIN 5.04 : zlib Vulnerability (NS-SA-2023-0002)
The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has zlib packages installed that are affected by a vulnerability: - zlib before 1.2.12 allows memory corruption when deflating i.e., when compressing if the input has many distant matches. CVE-2018-25032 Note that Nessus has no...
ZTE MF286R Command Injection Vulnerability
The ZTE MF286R is a wireless router from China's ZTE Corporation ZTE. A command injection vulnerability exists in the ZTE Mobile MF286R NordicMF286RB06, which stems from insufficient validation of input parameters and can be exploited by an attacker to execute arbitrary commands...
