Evil Portal

Posté dans 24 mai 2024 1:22 pm par

[featured_image]

Télécharger

Download is available until [expire_date]

Version
Télécharger 6
Taille du fichier 291.27 KB
Nombre de fichiers 1
Date de création 24 mai 2024
Dernière mise à jour 24 mai 2024

Evil Portal

CVE-2024-41689 26 juillet 2024

Medium Severity Description This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to unencrypted storing of WPA/ WPS credentials within the router's firmware/ database. An attacker with physical access could exploit this by extracting the firmware and reverse engineer the binary data to access the plaintext WPA/ WPS credentials on the vulnerable system. Successful exploitation of […]

CVE-2024-41688 26 juillet 2024

Medium Severity Description This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due lack of encryption in storing of usernames and passwords within the router's firmware/ database. An attacker with physical access could exploit this by extracting the firmware and reverse engineer the binary data to access the plaintext credentials on the vulnerable system. Successful exploitation of […]

CVE-2024-41687 26 juillet 2024

Critical Severity Description This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to transmission of password in plain text. A remote attacker could exploit this vulnerability by intercepting transmission within an HTTP session on the vulnerable system. Successful exploitation of this vulnerability could allow the attacker to gain unauthorized access to the targeted system. Read more […]

CVE-2024-41686 26 juillet 2024

Medium Severity Description This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to improper implementation of password policies. A local attacker could exploit this by creating password that do not adhere to the defined security standards/policy on the vulnerable system. Successful exploitation of this vulnerability could allow the attacker to expose the router to potential security […]

CVE-2024-41685 26 juillet 2024

High Severity Description This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to missing HTTPOnly flag for the session cookies associated with the router's web management interface. An attacker with remote access could exploit this by intercepting transmission within an HTTP session on the vulnerable system. Successful exploitation of this vulnerability could allow the attacker to […]

CyberDanube Security Research 20240722-0 | Multiple Vulnerabilities in Perten/PerkinElmer ProcessPlus 23 juillet 2024

Posted by Thomas Weber via Fulldisclosure on Jul 22CyberDanube Security Research 20240722-0 ------------------------------------------------------------------------------- title| Multiple Vulnerabilities product| Perten Instruments Process Plus Software vulnerable version|

[KIS-2024-06] XenForo <= 2.2.15 (Template System) Remote Code Execution Vulnerability 16 juillet 2024

Posted by Egidio Romano on Jul 16----------------------------------------------------------------------- XenForo

[KIS-2024-05] XenForo <= 2.2.15 (Widget::actionSave) Cross-Site Request Forgery Vulnerability 16 juillet 2024

Posted by Egidio Romano on Jul 16------------------------------------------------------------------------------- XenForo

CVE-2024-33326 11 juillet 2024

Posted by Rodolfo Tavares via Fulldisclosure on Jul 10=====[ Tempest Security Intelligence - ADV-6/2024 ]========================== LumisXP v15.0.x to v16.1.x Author: Rodolfo Tavares Tempest Security Intelligence - Recife, Pernambuco - Brazil =====[ Table of Contents]================================================== * Overview * Detailed description * Timeline of disclosure * Thanks & Acknowledgements * References =====[ Vulnerability...

CVE-2024-33327 11 juillet 2024

Evil Portal

Evil Portal

Related Posts

Comment utiliser l’API Shodan avec du Python pour automatiser les recherches des périphériques vulnérables

Comment hacker Windows à l’aide d’un « Malware »