1946 matches found
Design/Logic Flaw
Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects CBR40 before 2.5.0.10, RBK752 before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK852 before 3.2.10.11, RBR850 before 3.2.10.11, and RBS850 before 3.2.10.11...
CVE-2020-26897
Affected NETGEAR devices (CBR40 <2.5.0.10; RBK752/RBR750/RBS750 <3.2.15.25; RBK852/RBR850/RBS850
CVE-2020-26900
CVE-2020-26900 affects multiple NETGEAR devices (CBR40 prior to 2.5.0.10; RBK752/RBR750/RBS750/RBK852/RBR850/RBS850 prior to 3.2.15.25). The issue is disclosure of administrative credentials, enabling partial confidentiality compromise and high integrity impact (per NVD/cna CVSS data: CVSS 3.1 ba...
CVE-2020-26904
NETGEAR devices (CBR40 < 2.5.0.10; RBK752/RBR750/RBS750 < 3.2.15.25; RBK852/RBR850/RBS850
CVE-2020-26905
Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects CBR40 before 2.5.0.10, RBK752 before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK852 before 3.2.10.11, RBR850 before 3.2.10.11, and RBS850 before 3.2.10.11...
USN-4510-1 samba vulnerability
Tom Tervoort discovered that the Netlogon protocol implemented by Samba incorrectly handled the authentication scheme. A remote attacker could use this issue to forge an authentication token and steal the credentials of the domain admin. This update fixes the issue by changing the "server schanne...
Exploit for CVE-2020-1472
CVE-2020-1472 Netlogon Remote Protocol Call MS-NRPC Privileg...
CVE-2020-23824
ArGo Soft Mail Server 1.8.8.9 is affected by Cross Site Request Forgery CSRF for perform remote arbitrary code execution. The component is the Administration dashboard. When using admin/user credentials, if the admin/user admin opens a website with the malicious page that will run the CSRF...
Cross site request forgery (csrf)
ArGo Soft Mail Server 1.8.8.9 is affected by Cross Site Request Forgery CSRF for perform remote arbitrary code execution. The component is the Administration dashboard. When using admin/user credentials, if the admin/user admin opens a website with the malicious page that will run the CSRF...
CVE-2020-2037
An OS Command Injection vulnerability in the PAN-OS management interface that allows authenticated administrators to execute arbitrary OS commands with root privileges. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.16; PAN-OS 9.0 versions earlier than PAN-OS 9.0.10; PAN-OS 9.1...
CVE-2020-3151
A vulnerability in the CLI of Cisco Connected Mobile Experiences CMX could allow an authenticated, local attacker with administrative credentials to bypass restrictions on the CLI. The vulnerability is due to insufficient security mechanisms in the restricted shell implementation. An attacker cou...
CVE-2020-12106
The Web portal of the WiFi module of VPNCrypt M10 2.6.5 allows unauthenticated users to send HTTP POST request to several critical Administrative functions such as, changing credentials of the Administrator account or connect the product to a rogue access point...
D-Link DIR-816L Information Disclosure Vulnerability (CVE-2020-15894)
The D-Link DIR-816L is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPEPREFIX =...
CVE-2020-13915
Insecure permissions in emfd/libemf in Ruckus Wireless Unleashed through 200.7.10.102.92 allow a remote attacker to overwrite admin credentials via an unauthenticated crafted HTTP request. This affects C110, E510, H320, H510, M510, R320, R310, R500, R510 R600, R610, R710, R720, R750, T300, T301n,...
Code injection
Insecure permissions in emfd/libemf in Ruckus Wireless Unleashed through 200.7.10.102.92 allow a remote attacker to overwrite admin credentials via an unauthenticated crafted HTTP request. This affects C110, E510, H320, H510, M510, R320, R310, R500, R510 R600, R610, R710, R720, R750, T300, T301n,...
CVE-2020-13915
Insecure permissions in emfd/libemf in Ruckus Wireless Unleashed through 200.7.10.102.92 allow a remote attacker to overwrite admin credentials via an unauthenticated crafted HTTP request. This affects C110, E510, H320, H510, M510, R320, R310, R500, R510 R600, R610, R710, R720, R750, T300, T301n,...
CVE-2020-13915
CVE-2020-13915 concerns Ruckus Wireless Unleashed firmware versions affecting a broad range of devices (e.g., C110, E510, H320, H510, M510, R320, R310, R500, R510/R600, R610, R710, R720, R750, T300, T301n/s, T310c/d/n/s, T610, T710/ T710s). The root cause is insecure permissions in emfd/libemf, e...
Bludit 3.9.2 - Directory Traversal Exploit
Exploit for multiple platform in category web applications Title: Bludit 3.9.2 - Directory Traversal Author: James Green Vendor Homepage: https://www.bludit.com Software Link: https://github.com/bludit/bludit Version: 3.9.2 Tested on: Linux Ubuntu 19.10 Eoan CVE: CVE-2019-16113 Special Thanks to...
D-Link DIR-816L Information Disclosure Vulnerability
The D-Link DIR-816L is a wireless router from AUO D-Link of Taiwan, China. An information disclosure vulnerability exists in version 2.x of the D-Link DIR-816L prior to 1.10b04Beta02. The vulnerability can be exploited by an attacker to retrieve various sensitive information, such as administrato...