584 matches found
CVE-2024-47924
CVE-2024-47924 affects the Boa web server with a Cross-site Scripting (CWE-79) vulnerability caused by improper neutralization of input during web page generation. The available documents confirm the issue but do not provide affected versions, exploit details, or a published fix. Several sources ...
Boa Webserver 跨站脚本漏洞
Boa Webserver is a lightweight and efficient web server software. A cross-site scripting vulnerability exists in Boa Webserver, which stems from improper input neutralization during web page generation, resulting in a cross-site scripting vulnerability...
PT-2024-32900 · Unknown · Boa Web Server
Name of the Vulnerable Software and Affected Versions: Boa web server affected versions not specified Description: The issue is related to improper neutralization of input during web page generation, which can lead to cross-site scripting. This allows attackers to inject malicious scripts into we...
CVE-2024-54907
TOTOLINK A3002R V4.0.0-B20230531.1404 is vulnerable to Remote Code Execution in /bin/boa via formWsc...
TOTOLINK A3002R 安全漏洞
The TOTOLINK A3002R is a wireless dual-band Gigabit router. A remote code injection vulnerability exists in the TOTOLINK A3002R. The vulnerability is due to the ability to execute remote code in /bin/boa via formWsc in the affected version. An attacker can exploit this vulnerability to remotely...
Exploit for CVE-2024-29671
NEXTU FLETA Wifi6 Router RCE Exploit POC This document...
CVE-2024-47916
Boa web server - CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal'...
CVE-2024-47916 Boa web server - CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Boa web server - CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal'...
CVE-2024-47916
The CVE concerns the Boa web server with a path traversal (CWE-22) flaw due to improper limitation of a pathname to a restricted directory. Affected software is Boa web server; the root cause is incorrect pathname restriction that allows access outside the intended directory. Documented impact ce...
PT-2024-32891 · Unknown · Boa Web Server
Name of the Vulnerable Software and Affected Versions: Boa web server affected versions not specified Description: The issue is related to a path traversal vulnerability, which is a type of security weakness that allows an attacker to access files or directories outside the intended directory...
Boa 路径遍历漏洞
Boa is a Boa open source open source code for embedded applications. A path traversal vulnerability exists in Boa that stems from a pathname being incorrectly restricted to a restricted directory...
CVE-2024-50667
The boa httpd of Trendnet TEW-820AP 1.01.B01 has a stack overflow vulnerability in /boafrm/formIPv6Addr, /boafrm/formIpv6Setup, /boafrm/formDnsv6. The reason is that the check of ipv6 address is not sufficient, which allows attackers to construct payloads for attacks...
CVE-2024-50667
The boa httpd of Trendnet TEW-820AP 1.01.B01 has a stack overflow vulnerability in /boafrm/formIPv6Addr, /boafrm/formIpv6Setup, /boafrm/formDnsv6. The reason is that the check of ipv6 address is not sufficient, which allows attackers to construct payloads for attacks...
CVE-2024-50667
CVE-2024-50667 affects the Trendnet TEW-820AP (firmware 1.01.B01) where the Boa httpd has a stack overflow in the endpoints /boafrm/formIPv6Addr, /boafrm/formIpv6Setup, and /boafrm/formDnsv6 due to insufficient validation of an IPv6 address. The vulnerability is described as allowing attackers to...
CVE-2024-40091
Vilo 5 Mesh WiFi System = 5.16.1.33 lacks authentication in the Boa webserver, which allows remote, unauthenticated attackers to retrieve logs with sensitive system...
CVE-2024-40090
Vilo 5 Mesh WiFi System = 5.16.1.33 is vulnerable to Information Disclosure. An information leak in the Boa webserver allows remote, unauthenticated attackers to leak memory addresses of uClibc and the stack via sending a GET request to the index page...
CVE-2024-40090
Vilo 5 Mesh WiFi System = 5.16.1.33 is vulnerable to Information Disclosure. An information leak in the Boa webserver allows remote, unauthenticated attackers to leak memory addresses of uClibc and the stack via sending a GET request to the index page...
CVE-2024-40088
A Directory Traversal vulnerability in the Boa webserver of Vilo 5 Mesh WiFi System = 5.16.1.33 allows remote, unauthenticated attackers to enumerate the existence and length of any file in the filesystem by placing malicious payloads in the path of any HTTP request...
CVE-2024-40088
A Directory Traversal vulnerability in the Boa webserver of Vilo 5 Mesh WiFi System = 5.16.1.33 allows remote, unauthenticated attackers to enumerate the existence and length of any file in the filesystem by placing malicious payloads in the path of any HTTP request...