120 matches found
The vulnerability of the automated information system “Registration in OO” arises from the lack of measures taken to protect the structure of the web page, allowing attackers to read arbitrary files.
The vulnerability of the automated information system “Registration in OO” is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to remotely read arbitrary files by sending a specially crafted POST request...
The vulnerability of the Accellion FTA security system, which stems from insufficiently validated incoming requests, allows a perpetrator to carry out a SSRF attack and gain unauthorized access to protected information.
The vulnerability of the Accellion FTA security system is related to insufficient verification of incoming requests. Exploiting this vulnerability allows a malicious actor to execute an SSRF attack and gain unauthorized access to protected information through specially created POST requests...
Matthias Van Woensel qcubed 安全漏洞
Matthias Van Woensel qcubed is an application by Matthias Van Woensel. It provides a PHP model-view-controller framework for rapid application development. A security vulnerability exists in qcubed all versions including 3.1.1 that allows unauthenticated code execution via a crafted POST request...
The vulnerability of the microprogrammed network interface cards of SONICWALL series SMA 100 lies in the lack of measures taken to neutralize the special elements used in the operating system’s commands. This allows attackers to execute arbitrary commands.
The vulnerability of the microprogrammed network interface cards SONICWALL of the SMA 100 series exists due to the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
ZTE ZXHN F670 and ZTE ZXHN H108N Input Validation Error Vulnerability
The ZTE ZXHN F670 and the ZTE ZXHN H108N are both modems from China's ZTE Corporation ZTE. An input validation error vulnerability exists in some of the ZTE devices, which stems from the fact that these devices support configuration of static prefixes via a web management page. It is possible to...
PT-2020-6874 · Flexnet +1 · Lmadmin +1
Name of the Vulnerable Software and Affected Versions: FlexNet Publisher's lmadmin version 11.16.5 Description: A Denial of Service DoS issue was found in FlexNet Publisher's lmadmin, related to resource release errors. This can be exploited by a remote attacker to cause a service disruption,...
CVE-2019-3996
ELOG 3.1.4-57bea22 and below can be used as an HTTP GET request proxy when unauthenticated remote attackers send crafted HTTP POST requests...
UBUNTU-CVE-2019-3993
ELOG 3.1.4-57bea22 and below is affected by an information disclosure vulnerability. A remote unauthenticated attacker can recover a user's password hash by sending a crafted HTTP POST request...
PT-2019-16837 · Elog · Elog
Name of the Vulnerable Software and Affected Versions: ELOG versions 3.1.4-57bea22 and below Description: The issue allows unauthenticated remote attackers to use the software as an HTTP GET request proxy by sending crafted HTTP POST requests. Recommendations: For versions 3.1.4-57bea22 and below...
The vulnerability of the BARS.Web-Sudy platform, related to deficiencies in the authentication mechanism, allows a hacker to select user account names.
The vulnerability of the BARS.Web-Sudy platform is related to deficiencies in the authentication mechanism. Exploiting this vulnerability allows a malicious actor to select user accounts using specially crafted POST requests...
The vulnerability in the “Regional Capital Renovation Program Management” platform, related to deficiencies in the authentication mechanism, allows a violator to select user account names.
The vulnerability in the “Regional Program Capital Renovation Management” platform is related to deficiencies in the authentication mechanism. Exploiting this vulnerability allows a malicious actor to select user accounts using specially crafted POST requests...
CVE-2017-9139
There is a stack-based buffer overflow on some Tenda routers FH1202/F1202/F1200: versions before 1.2.0.20. Crafted POST requests to an unspecified URL result in DoS, interrupting the HTTP service used to login to the web UI of a router for 1 to 2 seconds...
UBUNTU-CVE-2016-8626
A flaw was found in Red Hat Ceph before 0.94.9-8. The way Ceph Object Gateway handles POST object requests permits an authenticated attacker to launch a denial of service attack by sending null or specially crafted POST object requests...
Code injection
The management service in IBM Tivoli Provisioning Manager for OS Deployment before 5.1 Fix Pack 2 does not properly handle multipart/form-data in HTTP POST requests, which allows remote attackers to execute arbitrary code or cause a denial of service daemon crash via crafted POST requests to port...
CVE-2007-0313
Unspecified vulnerability in GONICUS System Administration GOsa before 2.5.8 allows remote authenticated users to modify certain settings, including the admin password, via crafted POST requests...
DEBIAN-CVE-2007-0313
Unspecified vulnerability in GONICUS System Administration GOsa before 2.5.8 allows remote authenticated users to modify certain settings, including the admin password, via crafted POST requests...
Design/Logic Flaw
Unspecified vulnerability in GONICUS System Administration GOsa before 2.5.8 allows remote authenticated users to modify certain settings, including the admin password, via crafted POST requests...
CVE-2007-0313
Unspecified vulnerability in GONICUS System Administration GOsa before 2.5.8 allows remote authenticated users to modify certain settings, including the admin password, via crafted POST requests...
CVE-2007-0313
Unspecified vulnerability in GONICUS System Administration GOsa before 2.5.8 allows remote authenticated users to modify certain settings, including the admin password, via crafted POST requests...