Intelbras NCLOUD 300 Router Authentication Bypass Vulnerability

The authentication in Intelbras NCLOUD 300 Routers can be bypassed. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2018-11094: Use of Hard-coded Credentials

An issue was discovered on Intelbras NCLOUD 300 1.0 devices. /cgi-bin/ExportSettings.sh, /goform/updateWPS, /goform/RebootSystem, and /goform/vpnBasicSettings do not require authentication. For example, when an HTTP POST request is made to /cgi-bin/ExportSettings.sh, the username, password, and...

PT-2018-1331

Name of the Vulnerable Software and Affected Versions Intelbras NCLOUD 300 version 1.0 Description The issue is related to the use of predefined registration data in the ExportSettings.sh, updateWPS, RebootSystem, and vpnBasicSettings components of the Intelbras NCLOUD 300 Wi-Fi router's firmware...

univ-littoral.fr XSS vulnerability

Open Bug Bounty ID: OBB-609821 Description| Value ---|--- Affected Website:| univ-littoral.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

PT-2018-9630

Name of the Vulnerable Software and Affected Versions: ubiQuoss Switch VP5208A affected versions not specified Description: The issue allows unauthorized access to user credentials. When a failed login attempt occurs, the system creates a file named bcm password at /cgi-bin/ containing the user...

CVE-2018-9010: Improper Limitation of a Pathname to a Restricted Directory

Intelbras TELEFONE IP TIP200/200 LITE 60.0.75.29 devices allow remote authenticated admins to read arbitrary files via the /cgi-bin/cgiServer.exx page parameter, aka absolute path traversal. In some cases, authentication can be achieved via the admin account with its default admin password...

PT-2018-18779

Name of the Vulnerable Software and Affected Versions Intelbras TELEFONE IP TIP200/200 LITE version 60.0.75.29 Description The issue allows remote authenticated admins to read arbitrary files via the "/cgi-bin/cgiServer.exx" page parameter, which is vulnerable to absolute path traversal. In some...

Routers2 2.24 - Cross-Site Scripting

Exploit Title: Routers2 2.24 - Reflected Cross-Site Scripting Date: 18-01-18 Vendor Homepage: http://www.steveshipway.org/software/ Software Link: https://github.com/sshipway/routers2 Version: 2.24 CVE: CVE-2018-6193 Platform: Perl Category: webapps Exploit Author: Lorenzo Di Fuccia Contact:...

pirkanmaanpool.fi XSS vulnerability

Open Bug Bounty ID: OBB-564983 Description| Value ---|--- Affected Website:| pirkanmaanpool.fi Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-6193

A Cross-Site Scripting XSS vulnerability was found in Routers2 2.24, affecting the 'rtr' GET parameter in a page=graph action to cgi-bin/routers2.pl...

Cross site scripting

A Cross-Site Scripting XSS vulnerability was found in Routers2 2.24, affecting the 'rtr' GET parameter in a page=graph action to cgi-bin/routers2.pl...

CVE-2018-6193

A Cross-Site Scripting XSS vulnerability was found in Routers2 2.24, affecting the 'rtr' GET parameter in a page=graph action to cgi-bin/routers2.pl...

CVE-2018-6193: Improper Neutralization of Input During Web Page Generation

A Cross-Site Scripting XSS vulnerability was found in Routers2 2.24, affecting the 'rtr' GET parameter in a page=graph action to cgi-bin/routers2.pl...

PT-2018-17398

Name of the Vulnerable Software and Affected Versions Routers2 version 2.24 Description A Cross-Site Scripting XSS issue was discovered, affecting the rtr GET parameter in a "page=graph" action to the "cgi-bin/routers2.pl" endpoint. Recommendations For Routers2 version 2.24, consider restricting...

CVE-2017-18046: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow on Dasan GPON ONT WiFi Router H640X 12.02-01121 2.77p1-1124 and 3.03p2-1146 devices allows remote attackers to execute arbitrary code via a long POST request to the loginaction function in /cgi-bin/loginaction.cgi aka cgipage.cgi...

PT-2018-6636

Name of the Vulnerable Software and Affected Versions: Dasan GPON ONT WiFi Router H640X versions 12.02-01121 2.77p1-1124 through 3.03p2-1146 Description: A buffer overflow issue allows remote attackers to execute arbitrary code via a long POST request to the "login action" function in the...

CVE-2018-5728

CVE-2018-5728 concerns Cobham Sea Tel 121 build 222701 devices. A remote attacker can disclose potentially sensitive information by sending a request to /cgi-bin/getSysStatus, exposing ship latitude/longitude and satellite details. The vulnerability is described as an information disclosure issue...

PT-2018-17114

Name of the Vulnerable Software and Affected Versions: Cobham Sea Tel 121 build 222701 Description: The issue allows remote attackers to obtain potentially sensitive information via a "cgi-bin/getSysStatus" API endpoint. This can include details such as the Latitude/Longitude of the ship or...

CVE-2018-5728: Exposure of Sensitive Information to an Unauthorized Actor

Cobham Sea Tel 121 build 222701 devices allow remote attackers to obtain potentially sensitive information via a /cgi-bin/getSysStatus request, as demonstrated by the Latitude/Longitude of the ship, or satellite details...

CVE-2014-6435: Improper Authentication

cgi-bin/AZRetrain.cgi in Aztech ADSL DSL5018EN 1T1R, DSL705E, and DSL705EU devices does not check for authentication, which allows remote attackers to cause a denial of service WAN connectivity reset via a direct request...