Code injection

Cisco Linksys E4200 1.0.05 Build 7 routers contain a Local File Include Vulnerability which could allow remote attackers to obtain sensitive information or execute arbitrary code by sending a crafted URL request to the apply.cgi script using the submittype parameter...

CVE-2013-2678

Cisco Linksys E4200 1.0.05 Build 7 routers contain a Local File Include Vulnerability which could allow remote attackers to obtain sensitive information or execute arbitrary code by sending a crafted URL request to the apply.cgi script using the submittype parameter...

Open redirect

Open Redirection Vulnerability in the redir.php script in Telaen before 1.3.1 allows remote attackers to redirect victims to arbitrary websites via a crafted URL...

CVE-2013-2621

Open Redirection Vulnerability in the redir.php script in Telaen before 1.3.1 allows remote attackers to redirect victims to arbitrary websites via a crafted URL...

CVE-2019-15255 Cisco Identity Services Engine Authorization Bypass Vulnerability

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to bypass authorization and access sensitive information related to the device. The vulnerability exists because the software fails to sanitize URLs before it...

Cisco Web Security Appliance and Cisco Content Security Management Appliance HTTP Header Injection Vulnerability

A vulnerability in the API Framework of Cisco AsyncOS for Cisco Web Security Appliance WSA and Cisco Content Security Management Appliance SMA could allow an unauthenticated, remote attacker to inject crafted HTTP headers in the web server's response. The vulnerability is due to insufficient...

Design/Logic Flaw

Geutebruck IP Cameras G-CodeEEC-2xxx, G-CamEBC-21xx/EFD-22xx/ETHC-22xx/EWPC-22xx: All versions 1.12.0.25 and prior may allow a remote authenticated user, using a specially crafted URL command, to execute commands as root...

CVE-2019-14820

It was found that keycloak before version 8.0.0 exposes internal adapter endpoints in org.keycloak.constants.AdapterConstants, which can be invoked via a specially-crafted URL. This vulnerability could allow an attacker to access unauthorized information...

The vulnerability of the sapi/fpm/fpm/fpm_main.c component is related to the PHP-FPM interpreter, a programming language interpreter for PHP. This vulnerability allows attackers to execute arbitrary commands.

The vulnerability of the sapi/fpm/fpm/fpmmain.c component, which belongs to the PHP-FPM interpreter for PHP programming languages, is related to buffer overflow vulnerabilities. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands on the vulnerable server using a...

Mozilla Firefox Denial Of Service

Exploit Title: Mozilla Firefox 72 Denial of Service Date: 2/1/20 Exploit Author: Social Engineering Neo - @EngineeringNeo Vendor Homepage: https://mozilla.org Software Link: https://firefox.com Version: 71.0 and below Tested on: Firefox 68.0, 69.0, 70.0, 71.0 Mozilla Firefox 72 Denial of Service ...

CVE-2019-6020

Open redirect vulnerability in PowerCMS 5.12 and earlier PowerCMS 5.x, 4.42 and earlier PowerCMS 4.x, and 3.293 and earlier PowerCMS 3.x allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a specially crafted URL...

Open redirect

Open redirect vulnerability in Library Information Management System LIMEDIO all versions allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a specially crafted URL...

Open redirect

Open redirect vulnerability in Movable Type series Movable Type 7 r.4602 7.1.3 and earlier Movable Type 7, Movable Type 6.5.0 and 6.5.1 Movable Type 6.5, Movable Type 6.3.9 and earlier Movable Type 6.3.x, 6.2.x, 6.1.x, 6.0.x, Movable Type Advanced 7 r.4602 7.1.3 and earlier Movable Type 7, Movabl...

Open redirect

Open redirect vulnerability in PowerCMS 5.12 and earlier PowerCMS 5.x, 4.42 and earlier PowerCMS 4.x, and 3.293 and earlier PowerCMS 3.x allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a specially crafted URL...

CVE-2019-6020

Open redirect vulnerability in PowerCMS 5.12 and earlier PowerCMS 5.x, 4.42 and earlier PowerCMS 4.x, and 3.293 and earlier PowerCMS 3.x allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a specially crafted URL...

CVE-2019-6025

CVE-2019-6025 describes an open redirect vulnerability in Movable Type and related products. A specially crafted URL can cause users to be redirected to arbitrary sites, enabling phishing. Affected: Movable Type 7 (r.4602/7.1.3) and earlier across MT 6.x, MT Advanced 6.x/7.x, MT Premium variants....

CVE-2019-6025

Open redirect vulnerability in Movable Type series Movable Type 7 r.4602 7.1.3 and earlier Movable Type 7, Movable Type 6.5.0 and 6.5.1 Movable Type 6.5, Movable Type 6.3.9 and earlier Movable Type 6.3.x, 6.2.x, 6.1.x, 6.0.x, Movable Type Advanced 7 r.4602 7.1.3 and earlier Movable Type 7, Movabl...

CVE-2019-6021

CVE-2019-6021 affects Ricoh Library Information Management System LIMEDIO (all versions) with an open redirect vulnerability (CWE-601). The root cause is improper validation of redirect destinations, allowing a specially crafted URL to redirect users to attacker‑controlled sites and enabling phis...

CVE-2019-6021

Open redirect vulnerability in Library Information Management System LIMEDIO all versions allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a specially crafted URL...

Code injection

An issue was discovered in Public Knowledge Project PKP pkp-lib before 3.1.2-2, as used in Open Journal Systems OJS before 3.1.2-2. Code injection can occur in the OJS report generator if an authenticated Journal Manager user visits a crafted URL, because unserialize is used...