46 matches found
Cayin CMS Command Injection (CVE-2020-7357)
A command injection vulnerability exists in Cayin CMS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
CVE-2020-7357
Cayin CMS suffers from an authenticated OS semi-blind command injection vulnerability using default credentials. This can be exploited to inject and execute arbitrary shell commands as the root user through the 'NTPServerIP' HTTP POST parameter in system.cgi page. This issue affects several...
CVE-2020-7357
CVE-2020-7357 relates to Cayin CMS where an authenticated OS semi-blind command injection is possible via the NTP_Server_IP/NTP IP parameter in system.cgi. The issue requires authentication (default credentials) and can allow execution of arbitrary shell commands as root. Affected are multiple Ca...
Cayin CMS NTP Server 11.0 CVE-2020-7357 - Remote Code Execution
This Metasploit module exploits an authenticated remote code execution vulnerability in Cayin CMS versions 11.0 This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Cayin CMS NTP Server RCE',...
CVE-2020-7357
creationtimestamp| type| source ---|---|--- 2020-06-18 15:43:56+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/cayincmsntp.rb 2025-02-06 03:13:44+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:30+00:00| seen|...
Cayin CMS NTP Server 11.0 Remote Code Execution Exploit
This Metasploit module exploits an authenticated remote code execution vulnerability in Cayin CMS versions 11.0 and below. The code execution is executed in the systemservice.cgi file's ntpIp Parameter. The field is limited in size, so repeated requests are made to achieve a larger payload. Cayin...
Cayin CMS NTP Server 11.0 Remote Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Cayin CMS NTP Server RCE', 'Description' = %q This module exploits an authenticated RCE in Cayin CMS MSFLICENSE, 'Author' = 'h00die', msf module...
Cayin CMS NTP Server RCE
This module exploits an authenticated RCE in Cayin CMS use exploit/linux/http/cayin/cmsntp msf undefinedcmsntp show actions ...actions... msf undefinedcmsntp set ACTION msf undefinedcmsntp show options ...show and set options... msf undefinedcmsntp run This module requires Metasploit:...
ZTE Home Gateway ZXHN H168N 2.2 Access Control Bypass Vulnerability
ZTE Home Gateway ZXHN H168N suffers from multiple access bypass and information disclosure vulnerabilities. POC: CVE-2018-7357 and CVE-2018-7358 Disclaimer: This POC is for Educational Purposes , I would Not be responsible for any misuse of the information mentioned in this blog post +...
ZTE Home Gateway ZXHN H168N 2.2 Access Control Bypass
POC: CVE-2018-7357 and CVE-2018-7358 Disclaimer: This POC is for Educational Purposes , I would Not be responsible for any misuse of the information mentioned in this blog post + Unauthenticated + Author: Usman Saeed usman at xc0re.net + Protocol: UPnP + Affected Harware/Software: Model name: ZXH...
CVE-2018-7357
creationtimestamp| type| source ---|---|--- 2018-12-11 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45972...
ZTE ZXHN H168N - Improper Access Restrictions
POC: CVE-2018-7357 and CVE-2018-7358 Disclaimer: This POC is for Educational Purposes , I would Not be responsible for any misuse of the information mentioned in this blog post + Unauthenticated + Author: Usman Saeed usman at xc0re.net + Protocol: UPnP + Affected Harware/Software: Model name: ZXH...
CVE-2018-7357
The CVE-2018-7357 entry corresponds to an improper access control vulnerability in ZTE ZXHN H168N devices (versions V2.2.0_PK1.2T5, V2.2.0_PK1.2T2, V2.2.0_PK11T7, V2.2.0_PK11T). Connected sources describe an unauthenticated bypass affecting UPnP services that can expose sensitive data (e.g., WLAN...
CVE-2015-7357
Cross-site scripting XSS vulnerability in the uDesign aka U-Design theme 2.3.0 before 2.7.10 for WordPress allows remote attackers to inject arbitrary web script or HTML via a fragment identifier, as demonstrated by...
CVE-2015-7357
CVE-2015-7357 is a DOM-based XSS in the WordPress uDesign (U-Design) theme. Affected versions are 2.3.0 prior to 2.7.10 (commonly noted as 2.3.0–2.7.9); a remote attacker could inject arbitrary script/HTML by supplying a fragment identifier (e.g., #). The vulnerability arises in how fragment iden...
CVE-2015-7357
Cross-site scripting XSS vulnerability in the uDesign aka U-Design theme 2.3.0 before 2.7.10 for WordPress allows remote attackers to inject arbitrary web script or HTML via a fragment identifier, as demonstrated by...
CVE-2016-7357
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016. Notes: none...