Intelbras NCLOUD 300 Router Authentication Bypass Vulnerability

The authentication in Intelbras NCLOUD 300 Routers can be bypassed. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2018-11094: Use of Hard-coded Credentials

An issue was discovered on Intelbras NCLOUD 300 1.0 devices. /cgi-bin/ExportSettings.sh, /goform/updateWPS, /goform/RebootSystem, and /goform/vpnBasicSettings do not require authentication. For example, when an HTTP POST request is made to /cgi-bin/ExportSettings.sh, the username, password, and...

PT-2018-19350

Уязвимость обработчика CGI встроенного программного обеспечения маршрутизатора NETGEAR R7800 связана с переполнением буфера в статической памяти. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольный код...

PT-2018-1331

Name of the Vulnerable Software and Affected Versions Intelbras NCLOUD 300 version 1.0 Description The issue is related to the use of predefined registration data in the ExportSettings.sh, updateWPS, RebootSystem, and vpnBasicSettings components of the Intelbras NCLOUD 300 Wi-Fi router's firmware...

BACKDOOR IN SONY IPELA ENGINE IP CAMERAS

EC Consult has found a backdoor in Sony IPELA Engine IP Cameras, mainly used professionally by enterprises and authorities. This backdoor allows an attacker to run arbitrary code on the affected IP cameras. An attacker can use cameras to take a foothold in a network and launch further attacks,...

cmireb.be XSS vulnerability

Open Bug Bounty ID: OBB-612719 Description| Value ---|--- Affected Website:| cmireb.be Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Medium: httpd24

Issue Overview: Use-after-free on HTTP/2 stream shutdown When an HTTP/2 stream was destroyed after being handled, the Apache HTTP Server prior to version 2.4.30 could have written a NULL pointer potentially to an already freed memory. The memory pools maintained by the server make this...

univ-littoral.fr XSS vulnerability

Open Bug Bounty ID: OBB-609821 Description| Value ---|--- Affected Website:| univ-littoral.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

biblioteca.fagro.edu.uy XSS vulnerability

Open Bug Bounty ID: OBB-609731 Description| Value ---|--- Affected Website:| biblioteca.fagro.edu.uy Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

pedigreequery.com XSS vulnerability

Open Bug Bounty ID: OBB-609503 Description| Value ---|--- Affected Website:| pedigreequery.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

PT-2018-18418

Name of the Vulnerable Software and Affected Versions: EDIMAX IC-3140W versions 3.06 and earlier EDIMAX IC-5150W versions 3.09 and earlier EDIMAX IC-6220DC versions 3.06 and earlier Description: An issue was discovered in EDIMAX devices, where the ipcam cgi binary contains a stack-based buffer...

interplastica.de XSS vulnerability

Open Bug Bounty ID: OBB-608125 Description| Value ---|--- Affected Website:| interplastica.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

aplusa-online.com XSS vulnerability

Open Bug Bounty ID: OBB-608094 Description| Value ---|--- Affected Website:| aplusa-online.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

kaahe.org XSS vulnerability

Open Bug Bounty ID: OBB-607398 Description| Value ---|--- Affected Website:| kaahe.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Belkin N750 Stack Buffer Overflow Vulnerability

Belkin N750 is a wireless router product. A security vulnerability in the implementation of the Belkin N750 version 1.10.22 can cause a stack buffer overflow by an unauthenticated remote user by sending an HTTP request to proxy.cgi...

Router vulnerability reproduce the analysis of the fourth bomb: CVE-2018-7034-vulnerability warning-the black bar safety net

TrendNET router permission bypass vulnerability, an attacker by setting$AUTHORIZEDGROUP = 1 to bypass permission verification Vulnerability reference information:https://blogs. securiteam. com/index. php/archives/3627 The affected version of the router TEW-751DR – v1. 03B03 TEW-752DRU – v1. 03B01...

CVE-2018-1144

A remote unauthenticated user can execute commands as root in the Belkin N750 using firmware version 1.10.22 by sending a crafted HTTP request to proxy.cgi...

stcharlesborromeo.com XSS vulnerability

Open Bug Bounty ID: OBB-604252 Description| Value ---|--- Affected Website:| stcharlesborromeo.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Authorization

An authorization bypass vulnerability exists in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200. Requests to CGI functions allow malicious users to bypass authorization...

CVE-2018-7760

An authorization bypass vulnerability exists in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200. Requests to CGI functions allow malicious users to bypass authorization...