12615 matches found
PT-2017-14638
Name of the Vulnerable Software and Affected Versions Shenzhen Tenda Ac9 US AC9V1.0BR V15.03.05.14 multi TD01 Shenzhen Tenda Ac9 ac9 kf V15.03.05.196318 cn Shenzhen Tenda Ac15 US AC15V1.0BR V15.03.05.18 multi TD01 Shenzhen Tenda Ac15 US AC15V1.0BR V15.03.05.19 multi TD01 Shenzhen Tenda Ac18 US...
PHP 7.0.x < 7.0.25 Multiple Vulnerabilities
According to its banner, the version of PHP running on the remote web server is 7.0.x prior to 7.0.25. It is, therefore, affected by multiple vulnerabilities. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid104632;...
Apache Httpd < 2.4.33 : Tampering of mod_session data for CGI applications
When modsession is configured to forward its session data to CGI applications SessionEnv on, not the default, a remote user may influence their content by using a "Session" header. This comes from the "HTTPSESSION" variable name used by modsession to forward its data to CGIs, since the prefix...
CVE-2017-16765
XSS exists on D-Link DWR-933 1.00WWB17 devices via cgi-bin/gui.cgi...
Cross site scripting
XSS exists on D-Link DWR-933 1.00WWB17 devices via cgi-bin/gui.cgi...
CVE-2017-16765
XSS exists on D-Link DWR-933 1.00WWB17 devices via cgi-bin/gui.cgi...
CVE-2017-16765
Affected product: D-Link DWR-933 portable wireless router (firmware version 1.00(WW)B17). Vulnerable component: the web management interface CGI, specifically cgi-bin/gui.cgi. Issue: cross-site scripting (XSS) vulnerability described as XSS exists on the DWR-933 via the GUI CGI. Root cause: not e...
CVE-2017-16765: Improper Neutralization of Input During Web Page Generation
XSS exists on D-Link DWR-933 1.00WWB17 devices via cgi-bin/gui.cgi...
PT-2017-14547
Name of the Vulnerable Software and Affected Versions D-Link DWR-933 version 1.00WWB17 Description A cross-site scripting XSS issue exists, allowing potential exploitation via the "cgi-bin/gui.cgi" API endpoint. Recommendations For D-Link DWR-933 version 1.00WWB17, consider restricting access to...
Cesanta Mongoose HTTP Server CGI Remote Code Execcution Vulnerability(CVE-2017-2891)
Summary An exploitable use-after-free vulnerability exists in the HTTP server implementation of Cesanta Mongoose 6.8. An ordinary HTTP POST request with a CGI target can cause a reuse of previously freed pointer potentially resulting in remote code execution. An attacker needs to send this HTTP...
petcabaret.com XSS vulnerability
Open Bug Bounty ID: OBB-401689 Description| Value ---|--- Affected Website:| petcabaret.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...
pcc - PHP Secure Configuration Checker
Check current PHP configuration for potential security flaws. Simply access this file from your webserver or run on CLI. Author This software was written by Ben Fuhrmannek, SektionEins GmbH, in an effort to automate php.ini checks and spend more time on cheerful tasks. Idea one single file for ea...
CVE-2017-2891
An exploitable use-after-free vulnerability exists in the HTTP server implementation of Cesanta Mongoose 6.8. An ordinary HTTP POST request with a CGI target can cause a reuse of previously freed pointer potentially resulting in remote code execution. An attacker needs to send this HTTP request...
Design/Logic Flaw
An exploitable use-after-free vulnerability exists in the HTTP server implementation of Cesanta Mongoose 6.8. An ordinary HTTP POST request with a CGI target can cause a reuse of previously freed pointer potentially resulting in remote code execution. An attacker needs to send this HTTP request...
CVE-2017-2891
An exploitable use-after-free vulnerability exists in the HTTP server implementation of Cesanta Mongoose 6.8. An ordinary HTTP POST request with a CGI target can cause a reuse of previously freed pointer potentially resulting in remote code execution. An attacker needs to send this HTTP request...
CVE-2017-2891
An exploitable use-after-free vulnerability exists in the HTTP server implementation of Cesanta Mongoose 6.8. An ordinary HTTP POST request with a CGI target can cause a reuse of previously freed pointer potentially resulting in remote code execution. An attacker needs to send this HTTP request...
CVE-2017-2891
An exploitable use-after-free vulnerability exists in the HTTP server implementation of Cesanta Mongoose 6.8. An ordinary HTTP POST request with a CGI target can cause a reuse of previously freed pointer potentially resulting in remote code execution. An attacker needs to send this HTTP request...
CVE-2017-2891: Use After Free
An exploitable use-after-free vulnerability exists in the HTTP server implementation of Cesanta Mongoose 6.8. An ordinary HTTP POST request with a CGI target can cause a reuse of previously freed pointer potentially resulting in remote code execution. An attacker needs to send this HTTP request...