4371 matches found
CVE-2019-9949: Improper Link Resolution Before File Access
Western Digital My Cloud Cloud, Mirror Gen2, EX2 Ultra, EX2100, EX4100, DL2100, DL4100, PR2100 and PR4100 before firmware 2.31.183 are affected by a code execution as root, starting from a low-privilege user session vulnerability. The cgi-bin/webfilemgr.cgi file allows arbitrary file write by...
PT-2019-19953
Name of the Vulnerable Software and Affected Versions Western Digital My Cloud Cloud, Mirror Gen2, EX2 Ultra, EX2100, EX4100, DL2100, DL4100, PR2100 and PR4100 versions prior to 2.31.183 Description The issue allows for code execution as root, starting from a low-privilege user session. This occu...
Exploit for Use After Free in Microsoft
Microsoft 3389 Remote Vulnerability CVE-2019-0708 Batch Detect...
PT-2019-9227
Name of the Vulnerable Software and Affected Versions BIBLIOsoft BIBLIOpac version 2008 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the db or action parameter to the "/bin/wxis.exe/bibliopac/" API endpoint. Recommendations For...
CVE-2018-16139: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in BIBLIOsoft BIBLIOpac 2008 allows remote attackers to inject arbitrary web script or HTML via the db or action parameter to to bin/wxis.exe/bibliopac/...
PT-2019-5518
Name of the Vulnerable Software and Affected Versions OpenWRT firmware version 18.06.4 Description The issue exists due to incorrect functionality of the web page structure protection mechanism in the LuCI web interface configuration of the OpenWRT embedded operating system. This can be exploited...
Cross site request forgery (csrf)
JioFi 4 jmr1140 AmtelJMR1140R12.07 devices allow remote attackers to obtain an admin token by making a /cgi-bin/qcmapauth type=getuser request and then reading the token field. This token value can then be used to change the Wi-Fi password or perform a factory reset...
Linux/x86 - execve /bin/sh Shellcode (20 bytes)
/ Linux/x86 - execve /bin/sh shellcode 20 bytes Author: Rajvardhan Tested on: i686 GNU/Linux Shellcode Length: 20 Disassembly of section .text: 08049000 : 8049000: 31 c9 xor %ecx,%ecx 8049002: 6a 0b push $0xb 8049004: 58 pop %eax 8049005: 51 push %ecx 8049006: 68 2f 2f 73 68 push $0x68732f2f...
PT-2019-18739
Name of the Vulnerable Software and Affected Versions JioFi 4 jmr1140 Amtel JMR1140 R12.07 Description The issue allows remote attackers to obtain the Wi-Fi password by making a "cgi-bin/qcmap web cgi Page=GetWiFi Setting" request and then reading the wpa security key field. Recommendations For...
CVE-2019-7745: Undefined Security Weakness
JioFi 4 jmr1140 AmtelJMR1140R12.07 devices allow remote attackers to obtain the Wi-Fi password by making a cgi-bin/qcmapwebcgi Page=GetWiFiSetting request and then reading the wpasecuritykey field...
PT-2019-18740
Name of the Vulnerable Software and Affected Versions JioFi 4 jmr1140 Amtel JMR1140 R12.07 Description The issue allows remote attackers to obtain an admin token by making a "/cgi-bin/qcmap auth" type=getuser request and then reading the token field. This token value can then be used to change th...
CVE-2019-7687: Improper Neutralization of Input During Web Page Generation
cgi-bin/qcmapwebcgi on JioFi 4 jmr1140 AmtelJMR1140R12.07 devices has POST based reflected XSS via the Page parameter. No sanitization is performed for user input data...
PT-2019-18703
Name of the Vulnerable Software and Affected Versions JioFi 4 jmr1140 Amtel JMR1140 R12.07 Description The issue concerns a reflected XSS vulnerability. It occurs via the Page parameter in the cgi-bin/qcmap web cgi endpoint. The problem arises because no sanitization is performed on user input...
CVE-2019-7746: Cross-Site Request Forgery (CSRF)
JioFi 4 jmr1140 AmtelJMR1140R12.07 devices allow remote attackers to obtain an admin token by making a /cgi-bin/qcmapauth type=getuser request and then reading the token field. This token value can then be used to change the Wi-Fi password or perform a factory reset...
Design/Logic Flaw
An exploitable Permission Assignment vulnerability exists in the ACEManager EmbeddedAceSetTask.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. The EmbeddedAceSetTask.cgi executable is used to change MSCII configuration values within the configuration manager of the AirLink ES450. Thi...
PT-2019-10799
Name of the Vulnerable Software and Affected Versions Sierra Wireless AirLink ES450 FW version 4.9.3 Description A Permission Assignment issue exists in the ACEManager EmbeddedAceSet Task.cgi functionality. The EmbeddedAceSet Task.cgi executable is used to change MSCII configuration values within...
PT-2019-10797
Name of the Vulnerable Software and Affected Versions Sierra Wireless AirLink ES450 FW version 4.9.3 Description An Information Disclosure issue exists in the ACEManager EmbeddedAceGet Task.cgi functionality. This allows any authenticated user to send configuration changes using the...
Linux/x86 - Multiple keys XOR Encoder / Decoder execve(/bin/sh) Shellcode (59 bytes)
Title: Linux/x86 - Multiple keys XOR Encoder / Decoder execve/bin/sh Shellcode 59 bytes Author: Xavi Beltran Date: 05/05/2019 Contact: email protected Purpose: spawn /bin/sh shell Tested On: Ubuntu 3.5.0-17-generic Arch: x86 Size: 59 bytes sh.nasm global start section .text start: xor eax, eax pu...
