CVE-2009-5156

An issue was discovered on ASMAX AR-804gu 66.34.1 devices. There is Command Injection via the cgi-bin/script query string...

CVE-2019-12771

Command injection is possible in ThinStation through 6.1.1 via shell metacharacters after the cgi-bin/CdControl.cgi action= substring, or after the cgi-bin/VolControl.cgi OK= substring...

CVE-2019-6451

On SOYAL AR-727H and AR-829Ev5 devices, all CGI programs allow unauthenticated POST access...

Design/Logic Flaw

On SOYAL AR-727H and AR-829Ev5 devices, all CGI programs allow unauthenticated POST access...

CVE-2019-6451

The CVE-2019-6451 entry affects SOYAL AR-727H and AR-829Ev5 devices, where all CGI programs allow unauthenticated POST access. Connected PT-2019-18095 notes affected models and states there is no information yet about a fix in newer versions. Documented risk indicates network-based access with no...

CVE-2019-6451

On SOYAL AR-727H and AR-829Ev5 devices, all CGI programs allow unauthenticated POST access...

PT-2019-18095 · Soyal · Soyal Ar-829Ev5 +1

Name of the Vulnerable Software and Affected Versions: SOYAL AR-727H affected versions not specified SOYAL AR-829Ev5 affected versions not specified Description: The issue allows unauthenticated POST access to all CGI programs. Recommendations: For SOYAL AR-727H, at the moment, there is no...

CVE-2017-14854

A stack buffer overflow exists in one of the Orpak SiteOmat CGI components, allowing for remote code execution. The vulnerability affects all versions prior to 2017-09-25...

CVE-2017-14854

A stack buffer overflow exists in one of the Orpak SiteOmat CGI components, allowing for remote code execution. The vulnerability affects all versions prior to 2017-09-25...

CVE-2017-14854

The CVE-2017-14854 entry describes a stack-based buffer overflow in one of Orpak SiteOmat’s CGI components that enables remote code execution. Affected products are SiteOmat software prior to version 6.4.414.122 (with impact on versions prior to 2017-09-25 per the NVD entry). The ICS-CERT advisor...

PT-2024-6536 · Php +10 · Php +10

Name of the Vulnerable Software and Affected Versions: PHP versions 8.1. through 8.1.29 PHP versions 8.2. through 8.2.23 PHP versions 8.3. through 8.3.11 Description: The issue is related to errors in security settings, specifically with the cgi.force redirect configuration. In certain scenarios,...

Deltek Maconomy 2.2.5 Local File Inclusion Vulnerability

Exploit for cgi platform in category web applications Exploit Title: Maconomy Erp local file include Exploit Author: JameelNabbo Website: jameelnabbo.com Vendor Homepage: https://www.deltek.com Software Link: https://www.deltek.com/en-gb/products/project-erp/maconomy CVE: CVE-2019-12314 POC: POC:...

Deltek Maconomy 2.2.5 - Local File Inclusion

Exploit Title: Maconomy Erp local file include Date: 22/05/2019 Exploit Author: JameelNabbo Website: jameelnabbo.com Vendor Homepage: https://www.deltek.com Software Link: https://www.deltek.com/en-gb/products/project-erp/maconomy CVE: CVE-2019-12314 POC: POC:...

CVE-2019-12314

Deltek Maconomy 2.2.5 is prone to local file inclusion via absolute path traversal in the WS.macx1.WMCS/ PATHINFO, as demonstrated by a cgi-bin/Maconomy/MaconomyWS.macx1.WMCS/etc/passwd URI...

CVE-2019-12314

Deltek Maconomy 2.2.5 is prone to local file inclusion via absolute path traversal in the WS.macx1.WMCS/ PATHINFO, as demonstrated by a cgi-bin/Maconomy/MaconomyWS.macx1.WMCS/etc/passwd URI...

CVE-2019-9949

Western Digital My Cloud Cloud, Mirror Gen2, EX2 Ultra, EX2100, EX4100, DL2100, DL4100, PR2100 and PR4100 before firmware 2.31.183 are affected by a code execution as root, starting from a low-privilege user session vulnerability. The cgi-bin/webfilemgr.cgi file allows arbitrary file write by...

Command injection

Western Digital My Cloud Cloud, Mirror Gen2, EX2 Ultra, EX2100, EX4100, DL2100, DL4100, PR2100 and PR4100 before firmware 2.31.183 are affected by a code execution as root, starting from a low-privilege user session vulnerability. The cgi-bin/webfilemgr.cgi file allows arbitrary file write by...

CVE-2019-9949

Western Digital My Cloud Cloud, Mirror Gen2, EX2 Ultra, EX2100, EX4100, DL2100, DL4100, PR2100 and PR4100 before firmware 2.31.183 are affected by a code execution as root, starting from a low-privilege user session vulnerability. The cgi-bin/webfilemgr.cgi file allows arbitrary file write by...

Code Execution Vulnerability in Multiple Western Digital Products

Western Digital My Cloud Mirror Gen2 is a personal cloud storage device.Western Digital My Cloud EX2 Ultra is a personal cloud storage device.Western Digital My Cloud EX2 Ultra is a personal cloud storage device.Western Digital My Cloud EX2100 is a personal cloud storage device.Western Digital My...

EulerOS Virtualization 3.0.1.0 : php (EulerOS-SA-2019-1544)

According to the versions of the php packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An integer underflow flaw leading to out-of-bounds memory access was found in the way PHP's Phar extension parsed Phar archives. A...