Pandora FMS 7.0 NG 749 SQL Injection

Exploit Title: Pandora FMS 7.0 NG 749 - 'CG Items' SQL Injection Authenticated Date: 11-14-2020 Exploit Author: Matthew Aberegg, Alex Prieto Vendor Homepage: https://pandorafms.com/ Patch Link: https://github.com/pandorafms/pandorafms/commit/1258a1a63535f60924fb69b1f7812c678570cc8e Software Link:...

premier6.cg Cross Site Scripting vulnerability OBB-1248847

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

cg-blog.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1177783 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

cg-blog.com XSS vulnerability

Open Bug Bounty ID: OBB-717069 Description| Value ---|--- Affected Website:| cg-blog.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden unti...

CVE-2018-0179

Multiple vulnerabilities in the Login Enhancements Login Block feature of Cisco IOS Software could allow an unauthenticated, remote attacker to trigger a reload of an affected system, resulting in a denial of service DoS condition. These vulnerabilities affect Cisco devices that are running Cisco...

CVE-2017-10852

Buffer overflow in Corega CG-WGR1200 firmware 2.20 and earlier allows an attacker to execute arbitrary code via unspecified vectors...

CVE-2017-10853

Buffer overflow in Corega CG-WGR1200 firmware 2.20 and earlier allows an attacker to execute arbitrary commands via unspecified vectors...

CVE-2017-10854

Corega CG-WGR1200 firmware 2.20 and earlier allows an attacker to bypass authentication and change the login password via unspecified vectors...

Buffer overflow

Buffer overflow in Corega CG-WGR1200 firmware 2.20 and earlier allows an attacker to execute arbitrary commands via unspecified vectors...

Buffer overflow

Buffer overflow in Corega CG-WGR1200 firmware 2.20 and earlier allows an attacker to execute arbitrary code via unspecified vectors...

Authentication flaw

Corega CG-WGR1200 firmware 2.20 and earlier allows an attacker to bypass authentication and change the login password via unspecified vectors...

CVE-2017-10852

CVE-2017-10852 affects Corega CG-WGR1200 firmware 2.20 and earlier. A buffer overflow (CWE-119) in the device’s firmware can allow an attacker to execute arbitrary code on the affected device. Affected component: firmware of CG-WGR1200. Vectors are not detailed in the provided documents; exploita...

CVE-2017-10852

Buffer overflow in Corega CG-WGR1200 firmware 2.20 and earlier allows an attacker to execute arbitrary code via unspecified vectors...

CVE-2017-10854

Corega CG-WGR1200 firmware 2.20 and earlier allows an attacker to bypass authentication and change the login password via unspecified vectors...

CVE-2017-10853

The CVE-2017-10853 issue affects CG-WGR1200 firmware 2.20 and earlier, where a buffer overflow in the device’s firmware allows an attacker to execute arbitrary commands via unspecified vectors. Multiple connected sources (NVD/NVD-derived entries and JVN) confirm the vulnerability in the Corega CG...

CVE-2017-10854

Corega CG-WGR1200 firmware 2.20 and earlier contains an authentication bypass vulnerability (CVE-2017-10854). An attacker can bypass login authentication and change the login password via unspecified vectors, enabling unauthorized access to the device management interface. Affected product: CG-WG...

CVE-2017-10853

Buffer overflow in Corega CG-WGR1200 firmware 2.20 and earlier allows an attacker to execute arbitrary commands via unspecified vectors...

CVE-2017-10854: Missing Authentication for Critical Function

Corega CG-WGR1200 firmware 2.20 and earlier allows an attacker to bypass authentication and change the login password via unspecified vectors...

JVN#15201064: Multiple vulnerabilities in CG-WGR1200

CG-WGR1200 provided by Corega Inc is a wireless LAN router. CG-WGR1200 contains multiple vulnerabilities listed below. Buffer Overflow CWE-119 - CVE-2017-10852 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H| Base Score: 8.8 CVSS v2|...

CVE-2017-10853: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Corega CG-WGR1200 firmware 2.20 and earlier allows an attacker to execute arbitrary commands via unspecified vectors...