11798 matches found
CVE-2026-101073
A security flaw in the CGI Dispatcher component of Netcore NR289-GE 1.4.5102 allows for improper authentication via an unknown function in the /bin/boa file. This vulnerability can be triggered through remote manipulation, potentially allowing unauthorized access. While the documents confirm that...
EUVD-2026-88293
A security flaw has been discovered in Netcore NR289-GE 1.4.5102. Impacted is an unknown function of the file /bin/boa of the component CGI Dispatcher. Performing a manipulation results in improper authentication. The attack may be initiated remotely. The exploit has been released to the public a...
CVE-2024-4577
CVE-2024-4577, Argument Injection in PHP-CGI ./CVE-2024-4577.sh /path/to/domains-list POC : POST /test.hello?%ADd+allowurlinclude%3d1+%ADd+autoprependfile%3dphp://input HTTP/1.1 Host: host User-Agent: curl/8.3.0 Accept: / Content-Length: 23 Content-Type: application/x-www-form-urlencoded...
EUVD-2026-88289
A vulnerability was identified in Netcore NR289-GE 1.4.5102. This issue affects the function system of the file /apip.cgi of the component CGI Handler. Such manipulation of the argument ip leads to os command injection. The attack can be launched remotely. The exploit is publicly available and...
CVE-2026-101072
A vulnerability exists in Netcore NR289-GE 1.4.5102 within the CGI Handler component. Specifically, the /ap_ip.cgi file fails to properly handle the ip argument, which can lead to remote OS command injection . This vulnerability can be exploited over the network. An exploit is publicly available ...
CVE-2026-101072 Netcore NR289-GE CGI ap_ip.cgi system os command injection
A vulnerability was identified in Netcore NR289-GE 1.4.5102. This issue affects the function system of the file /apip.cgi of the component CGI Handler. Such manipulation of the argument ip leads to os command injection. The attack can be launched remotely. The exploit is publicly available and...
CVE-2024-4577
CVE-2024-4577 Resumen CVE-2024-4577 es una vulnerabilidad de seguridad que afecta a servidores PHP en las siguientes versiones: PHP 8.3.x 8.3.8 y anteriores PHP 8.2.x 8.2.20 y anteriores PHP 8.1.x 8.1.29 y anteriores Todas las versiones anteriores a 8.0 Versiones no soportadas 7.x y 5.x Esta...
CVE-2017-14262
SamsungNVRvul CVE-2017-14262 xfuturesec Co., Ltd Primero, obtén el hash MD5 de la contraseña de la cuenta 'admin'. Send: GET http://192.168.1.14/cgi-bin/main-cgi?json="cmd":201,"szUserNameQry":"admin","szUserName":"","u32UserLoginHandle":0 HTTP/1.1 Host: 192.168.1.14 User-Agent: Mozilla/5.0 Windo...
CVE-2021-41773
Reproducción de CVE-2021-41773 https://www.tenable.com/blog/cve-2021-41773-path-traversal-zero-day-in-apache-http-server-exploited v2.4.49 es una vulnerabilidad exclusiva de Apache. En versiones anteriores no existía la función apnormalizepath, que fue introducida en la versión v2.4.49...
CVE-2024-4577-EXPLOIT
CVE-2024-4577 - PHP CGI Argument Injection Remote Code Execution RCE In certain versions of PHP 8.1. before 8.1.29, 8.2. before 8.2.20, and 8.3. before 8.3.8, a critical vulnerability exists when using PHP with Apache and PHP-CGI on Windows. If the system is configured to use specific code pages,...
CVE-2019-0232
Vulnerability Environment Tomcat 8.5.39 Jdk 8u121 Edit web.xml file cgi org.apache.catalina.servlets.CGIServlet debug 0 cgiPathPrefix WEB-INF/cgi-bin executable 5 cgi /cgi-bin/ Edit content.xml file WEB-INF/web.xml $catalina.base/conf/web.xml...
CVE-2021-41773
CVE-2021-41773 PoC CVE-2021-41773 - Apache 2.4.49 con CGI habilitado Uso : chmod -x CVE-2021-41773.sh ./CVE-2021-41773.sh http://ip:port/ /etc/passwd Referencias https://nvd.nist.gov/vuln/detail/CVE-2021-41773 https://vulners.com/cve/CVE-2021-41773...
CVE-2024-46658
CVE-2024-46658 Syrotech SY-GOPON-8OLT-L3 v1.6.0240629 Vulnerabilidad de Inyección de Comandos Uso 1- Edita la URL en el script. 2- Edita el valor de CookieLogin en el script. 3- Ejecuta el script, te permitirá ejecutar comandos. Detalles de la Vulnerabilidad GET...
CVE-2024-4577
PHP-CGI Windows Platform Remote Code Execution Vulnerability CVE-2024-4577 Introduction PHP is an acronym for Hypertext Preprocessor. It is now a widely used open-source scripting language that is particularly suitable for web development and embedding in HTML, and is very simple to use. CGI, whi...
CVE-2022-30525
CVE-2022-30525 Una vulnerabilidad de inyección de comandos del sistema operativo en el programa CGI de Zyxel Resumen ejecutivo La vulnerabilidad, descubierta por primera vez el 13 de abril de 2022, causó ejecución remota de código en los productos de firewall de Zyxel. Esta importante...
WebminRCE-exploit
WebminRCE-exploit CVE-2022-0824, CVE-2022-0829 - Exploit de privilegio de File Manager La aplicación vulnerable para probar este PoC se puede encontrar aquí como una imagen de docker. Requisitos previos: Python3 Módulo Requests Descripción Vulnerabilidad Control de Acceso Inadecuado que lleva a...
CVE-2024-4577
CVE-2024-4577 Declaración Esta herramienta se utiliza únicamente para la investigación de seguridad personal y el aprendizaje. Cualquier consecuencia directa o indirecta, así como las pérdidas derivadas de la difusión o el uso de esta herramienta, serán responsabilidad exclusiva del usuario. El...
CVE-2026-101001
A vulnerability was identified in Netcore NBR200V2 1.3.241127.071246. This impacts the function eval of the file /www/cgi-bin/networktools of the component Web Management Interface. Such manipulation of the argument QUERYSTRING leads to os command injection. It is possible to launch the attack...
CVE-2024-3273-D-Link-Remote-Code-Execution-RCE
CVE-2024-3273 - Exploit de Ejecución Remota de Código RCE en D-Link Descripción Este repositorio contiene un exploit para CVE-2024-3273 , una vulnerabilidad crítica encontrada en dispositivos específicos de D-Link que permite la Ejecución Remota de Código RCE. La vulnerabilidad surge de una...