|
266061
|
8.1 |
HIGH
Network
|
infinixauthority bluproducts xolo beeline iku-mobile leagoo doogee
|
hot_x507_firmware hot_2_x510_firmware zero_x506_firmware zero_2_x509_firmware studio_g_firmware studio_g_plus_firmware studio_6.0_hd_firmware studio_x_firmware studio_x_plus_f…
|
Android devices with code from Ragentek contain a privileged binary that performs over-the-air (OTA) update checks. Additionally, there are multiple techniques used to hide the execution of this bina…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2016-6564
|
2024-11-21 11:56 |
2018-07-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266062
|
9.8 |
CRITICAL
Network
|
dlink
|
dir-823_firmware dir-822_firmware dir-818l\(w\)_firmware dir-895l_firmware dir-890l_firmware dir-885l_firmware dir-880l_firmware dir-868l_firmware dir-850l_firmware
|
Processing malformed SOAP messages when performing the HNAP Login action causes a buffer overflow in the stack in some D-Link DIR routers. The vulnerable XML fields within the SOAP body are: Action, …
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2016-6563
|
2024-11-21 11:56 |
2018-07-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266063
|
9.8 |
CRITICAL
Network
|
freebsd
|
freebsd
|
Improper bounds checking of the obuf variable in the link_ntoa() function in linkaddr.c of the BSD libc library may allow an attacker to read or write from memory. The full impact and severity depend…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2016-6559
|
2024-11-21 11:56 |
2018-07-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266064
|
9.8 |
CRITICAL
Network
|
asus
|
rp-ac52_firmware ea-n66_firmware rp-n12_firmware rp-n14_firmware rp-n53_firmware rp-ac56_firmware wmp-n12_firmware
|
A command injection vulnerability exists in apply.cgi on the ASUS RP-AC52 access point, firmware version 1.0.1.1s and possibly earlier, web interface specifically in the action_script parameter. The …
|
CWE-77
Command Injection
|
CVE-2016-6558
|
2024-11-21 11:56 |
2018-07-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266065
|
8.8 |
HIGH
Network
|
asus
|
rp-ac52_firmware ea-n66_firmware rp-n12_firmware rp-n14_firmware rp-n53_firmware rp-ac56_firmware wmp-n12_firmware
|
In ASUS RP-AC52 access points with firmware version 1.0.1.1s and possibly earlier, the web interface, the web interface does not sufficiently verify whether a valid request was intentionally provided…
|
CWE-352
Origin Validation Error
|
CVE-2016-6557
|
2024-11-21 11:56 |
2018-07-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266066
|
8.8 |
HIGH
Adjacent
|
thetrackr
|
trackr_bravo_firmware
|
TrackR Bravo device allows unauthenticated pairing, which enables unauthenticated connected applications to write to various device attributes. Updated apps, version 5.1.6 for iOS and 2.2.5 for Andro…
|
CWE-287
Improper Authentication
|
CVE-2016-6541
|
2024-11-21 11:56 |
2018-07-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266067
|
6.5 |
MEDIUM
Adjacent
|
thetrackr
|
trackr_bravo_firmware
|
Unauthenticated access to the cloud-based service maintained by TrackR Bravo is allowed for querying or sending GPS data for any Trackr device by using the tracker ID number which can be discovered a…
|
CWE-200
Information Exposure
|
CVE-2016-6540
|
2024-11-21 11:56 |
2018-07-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266068
|
8.8 |
HIGH
Adjacent
|
thetrackr
|
trackr_bravo_firmware
|
The TrackR Bravo mobile app stores the account password used to authenticate to the cloud API in cleartext in the cache.db file. Updated apps, version 5.1.6 for iOS and 2.2.5 for Android, have been r…
|
CWE-255 CWE-200
Credentials Management Information Exposure
|
CVE-2016-6538
|
2024-11-21 11:56 |
2018-07-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266069
|
3.5 |
LOW
Adjacent
|
thetrackr
|
trackr_firmware
|
The Trackr device ID is constructed of a manufacturer identifier of four zeroes followed by the BLE MAC address in reverse. The MAC address can be obtained by being in close proximity to the Bluetoot…
|
CWE-200
Information Exposure
|
CVE-2016-6539
|
2024-11-21 11:56 |
2018-07-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266070
|
9.6 |
CRITICAL
Network
|
cloudfoundry pivotal_software
|
cf-release cloud_foundry_elastic_runtime
|
Applications in cf-release before 245 can be configured and pushed with a user-provided custom buildpack using a URL pointing to the buildpack. Although it is not recommended, a user can specify a cr…
|
CWE-200
Information Exposure
|
CVE-2016-6658
|
2024-11-21 11:56 |
2018-03-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|