CVE-2018-5544

CVE-2018-5544 affects F5 BIG-IP APM rendering pages with a logon agent or confirm box, potentially disclosing configuration details (partition/agent names) via URI parameters. Affected: BIG-IP APM 13.0.0–13.1.1 (also 12.1.0–12.1.3 per advisory table). 12.x is not vulnerable per the table; 14.x fi...

Default credentials

download.rsp on ShenZhen Anni "5 in 1 XVR" devices allows remote attackers to download the configuration without a login to discover the password...

Multiple Remote Vulnerabilities in Geovision IP Camera Devices

Geovision is a Taiwan-based company specializing in the innovative research and development of digital security surveillance systems, providing customers with intelligent applications and the most cost-effective surveillance solutions based on the core technologies of image capture, image analysi...

Mail.ru: [mobs.mail.ru] nginx path traversal via misconfigured alias

Domain, site, application -- mobs.mail.ru Steps to reproduce -- http://mobs.mail.ru/media../mobs/settings.py Actual results -- py ... SECRETKEY = '████████████' ... DISTIMOPRIVATEKEY = '████████████' ... PoC, exploit code, screenshots, video, references, additional resources --...

Top-5 stupid security mistakes in web apps

by Ivan Novikov Image by Byseyhanla Own work CC BY-SA 4.0, article re-posted from In this blog entry, I will summarize some commonly overlooked issues which have been affecting many web projects for the last 5 years. All of them are obvious and super predictable and could be used be script kiddie...

CVE-2017-11165

dataTaker DT80 dEX 1.50.012 allows remote attackers to obtain sensitive credential and configuration information via a direct request for the /services/getFile.cmd?userfile=config.xml URI...

U.S. Dept Of Defense: Server side information disclosure

A misconfigured Department of Defense webserver improperly disclosed configuration information when returning an error page. sulemanmalik03 was able to demonstrate this vulnerability by crafting a particularly formatted URL. Thanks sulemanmalik03!...

IBM Domino ZMerge Database Security Bypass

The version of IBM Domino formerly IBM Lotus Domino running on the remote host is affected by a security bypass vulnerability due to insufficient access control list ACL settings on the administration databases for ZMerge. An unauthenticated, remote attacker can exploit this issue to disclose...

ZTE ZXHN H108N Router - Configuration Disclosure

ZTE ZXHN H108N Router - Configuration Disclosure !-- ZTE ZXHN H108N unauthenticated config download Copyright 2015 c Todor Donev [email protected] http://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg http://pastebin.com/u/hackerscommunity Tested device: Model ZXHN H108N...

ZTE ZXHN H108N Router - Configuration Disclosure

!-- ZTE ZXHN H108N unauthenticated config download Copyright 2015 c Todor Donev [email protected] http://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg http://pastebin.com/u/hackerscommunity Tested device: Model ZXHN H108N Software Version V3.3.0MU Description: Does not che...

ZTE ZXHN H108N 3.3.0_MU CWMP Configuration Disclosure

ZTE ZXHN H108N 3.3.0MU CWMP configuration disclosure Copyright 2015 c Todor Donev [email protected] http://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg http://pastebin.com/u/hackerscommunity Model ZXHN H108N Serial Number ZTEERFCD6K03762 Batch Number T1 Software Version...

ZTE ZXHN H108N 3.3.0_MU CWMP Configuration Disclosure Vulnerability

ZTE ZXHN H108N version 3.3.0MU suffers from a CWMP configuration disclosure vulnerability. ZTE ZXHN H108N 3.3.0MU CWMP configuration disclosure Copyright 2015 c Todor Donev email protected http://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg...

Netgear RP614v4 config disclosure

Device: Netgear RP614v4 Firmware version: v1.1.209.01 Firmware release date: November 2009 HTTP service: Boa HTTPd 0.93.15 Exploit release date: Wednesday March 24, 2010 Default router credentials: username: admin password: password Scope: Local/Remote Vulnerability: The Netgear RP614v4 is...

ZyXEL ZyWALL USG client side authorization config disclosure

Details ======= Product: ZyXEL USG Unified Security Gateway appliances ZyWALL USG-20 ZyWALL USG-20W ZyWALL USG-50 ZyWALL USG-100 ZyWALL USG-200 ZyWALL USG-300 ZyWALL USG-1000 ZyWALL USG-1050 ZyWALL USG-2000 Possibly other ZLD-based products Affected Versions: Firmware Releases before April 25, 20...

DMX FORUM 2.1a Configuration Disclosure

| Title : DMX FORUM v2.1a Config Disclosure Vulnerability | Author : indoushka | email : [email protected] | Dork : © DMX FORUM v2.1a | Tested on: windows 8.1 Français V.Pro | Bug : by pass | Download : scripts.toucharger.com/fiches/scripts/dmx-forum/3392.htm...

JEEBBS任意帐号密码重置附poc

简要描述： JEEBBS 某些小问题可导致任意帐号密码重置。漏洞的类型，难度不重要，关键是能造成什么影响才是最重要的 详细说明： 一、首先注册个帐号，虽然有些网站去掉了注册连接，但是register.jspx 文件还是存在的，直接访问可以注册帐号。 二、来到论坛的随便一个帖子里，找到举报的连接，虽然有些网站去掉了连接，但是通过 member/getreportpage.jspx?url=/sqzx/帖子ID.jhtml 去举报帖子。 三、由于举报的字符串没有经过过滤直接查询显示在后台位置,于维护-用户举报-举报详情-举报理由。形成存储型xss...

USN-2325-1 nova vulnerability

Alex Gaynor discovered that OpenStack Nova would sometimes respond with variable times when comparing authentication tokens. If nova were configured to proxy metadata requests via Neutron, a remote authenticated attacker could exploit this to conduct timing attacks and ascertain configuration...

Tenda W309R Router 5.07.46 - Configuration Disclosure

No description provided by source. --------------------------------------------------- Exploit Title: Tenda W309R Configuration Enumeration without Authentication Author: SANTHO @s4n7h0 Vendor Homepage: http://www.tenda.cn Product link: http://www.tenda.cn/tendacn/product/show.aspx?productid=382...

Multiple Products DVR Configuration Disclosure (CVE-2013-1391)

A configuration disclosure vulnerability has been reported in the DVR web server of multiple vendors which allows authentication bypass. A remote attacker could get the unencrypted configuration file by requesting the "/DVR.cfg" without entering credentials. Successful exploitation of this...

Tenda W309R Router 5.07.46 - Configuration Disclosure

Exploit for hardware platform in category web applications --------------------------------------------------- Exploit Title: Tenda W309R Configuration Enumeration without Authentication Author: SANTHO Vendor Homepage: http://www.tenda.cn Product link:...