Core Security Technologies Advisory - AirLive MD-3025, BU-3026, BU-2015, WL-2000CAM, and POE-200CAM are IP cameras designed for professional surveillance and security applications. The built-in IR LEDs provide high quality nighttime monitoring. These AirLive devices are vulnerable to an OS Command Injection Vulnerability. In the case of the MD-3025, BU-3026 and BU-2015 cameras, the vulnerability lies in the cgi_test.cgi binary file. In the case of the WL-2000CAM and POE-200CAM cameras, the command injection can be performed using the vulnerable wireless_mft.cgi binary file.
4f5dfe0ba3159b241b97dd31fdce3b6857722610dfebf00e92c39d6677ccf2b6phpLiteAdmin version 1.1 suffers from cross site request forgery and cross site scripting vulnerabilities.
4283cc61827ee3aa0bb5b327467b0f012ea503321ee6a96b94ce7e7159313d17127 ipTIME routers are vulnerable to a DHCP-related remote command execution vulnerability.
865d438b672a41ac61eb57eb48a11d1384ed8671a7926efec5bf3004fedfd4feOrchard CMS versions 1.7.3, 1.8.2, and 1.9.0 suffer from a persistent cross site scripting vulnerability.
7ff983c48832653c8a02fa6f3cfe44629029272031e2a5f1ac4aea0b203b015dWordPress S3Bubble Cloud Video with Adverts and Analytics plugin version 2.0 suffers from an arbitrary file download vulnerability.
d57b649542e4c5d4a0cb2c033844a4320b10785e1a9d189c8cb8e0ecae0b0c4aWideImage version 11.02.19 suffers from a cross site scripting vulnerability.
900c12794e1e9d1fb7199b00e2aab8bd40774c04b5c3ac5ffa6e745c499cbb00WK UDID version 1.0.1 suffers from a command injection vulnerability.
92265986e2f75ed3b342490966f7eeba2d2cde8d0548087e8f2e6eb2b30742b0This module, once loaded, gives the thread/user calling it root instantly without spawning an extra shell.
18f30618ad3713cc726b74e9d186be2cf70a0e5d6a1cb305881c92ffc22f512bWordPress ACF Frontend Display plugin suffers from a remote shell upload vulnerability.
b436367d1b2e6861679d45c236d703fc26b9355258a0a2ab8a23ca34f38c9343WordPress Vulcan theme suffers from WAF bypass, cross site scripting, path disclosure, denial of service, and remote file upload vulnerabilities.
8bd7ba052699616ab801ed1ba3417c1b390d988ab10d6e874a2053b9e4e5fc32Gentoo Linux Security Advisory 201507-1 - Multiple vulnerabilities have been found in chrony, the worst of which can cause arbitrary code execution. Versions less than 1.31.1 are affected.
2beceab188b5a326f8c1949abab1b3e4e637e4803c1a30abe30fe93b67a275bbEbay's Magento suffered from a cross site request forgery vulnerability.
897b5d8a3313b9d1c287cda6b135e03b5b677c8cd1d0e3cd4bff4881c07c459d
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed