4587 matches found
PT-2020-10469
Name of the Vulnerable Software and Affected Versions NETGEAR WNR1000V4 version 1.1.0.54 Description An issue was discovered in the WNR1000V4 web management console, where multiple actions are vulnerable to an unauthenticated GET request, which can be exploited directly or through CSRF, as...
Nagios XI Authenticated Remote Command Execution
This module exploits a vulnerability in Nagios XI before 5.6.6 in order to execute arbitrary commands as root. The module uploads a malicious plugin to the Nagios XI server and then executes this plugin by issuing an HTTP GET request to download a system profile from the server. For all supported...
CVE-2020-9337
In GolfBuddy Course Manager 1.1, passwords are sent with base64 encoding via a GET request...
CVE-2020-9337
In GolfBuddy Course Manager 1.1, passwords are sent with base64 encoding via a GET request...
Cross site request forgery (csrf)
In GolfBuddy Course Manager 1.1, passwords are sent with base64 encoding via a GET request...
CVE-2020-9337
CVE-2020-9337 affects GolfBuddy Course Manager 1.1, where passwords are transmitted via a GET request using base64 encoding. This exposes confidential data because base64 is not encryption and GET parameters can be logged or exposed in browser history and server logs. NVD CVSS3.1 vector CVSS:3.1/...
CVE-2020-9337
In GolfBuddy Course Manager 1.1, passwords are sent with base64 encoding via a GET request...
PT-2020-20592
Name of the Vulnerable Software and Affected Versions GolfBuddy Course Manager version 1.1 Description The issue involves sending passwords via a GET request with base64 encoding. This is a security concern as sensitive information like passwords should not be transmitted in such a manner due to...
CVE-2020-9337: Exposure of Sensitive Information to an Unauthorized Actor
In GolfBuddy Course Manager 1.1, passwords are sent with base64 encoding via a GET request...
Amovision AM-Q6320-WIFI HD Camera Remote Configuration Disclosure
!/usr/bin/perl Amovision AM-Q6320-WIFI HD Camera Remote Configuration Disclosure Copyright 2020 c Todor Donev https://donev.eu/ Disclaimer: This or previous programs are for Educational purpose ONLY. Do not use it without permission. The usual disclaimer applies, especially the fact that Todor...
CVE-2020-0688 - Exchange Control Panel Viewstate Deserialization Bug
A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka ‘Microsoft Exchange Memory Corruption Vulnerability’. Recent assessments: zeroSteiner at February 26, 2020 5:02pm UTC reported: This is a serialization bug...
Node.js third-party modules: [hangersteak] Web Server Directory Traversal via Crafted GET Request
I would like to report path traversal in hangersteak module. It allows an attacker to read system files via path traversal local/remote Module module name: hangersteak version: 0.2.4 latest npm page: https://www.npmjs.com/package/hangersteak Module Description Node web static files server with...
CVE-2019-20435
An issue was discovered in WSO2 API Manager 2.6.0. A reflected XSS attack could be performed in the inline API documentation editor page of the API Publisher by sending an HTTP GET request with a harmful docName request parameter...
Cross site scripting
An issue was discovered in WSO2 API Manager 2.6.0. A reflected XSS attack could be performed in the inline API documentation editor page of the API Publisher by sending an HTTP GET request with a harmful docName request parameter...
PT-2020-10446 · Wso2 · Wso2 Api Manager
Name of the Vulnerable Software and Affected Versions: WSO2 API Manager version 2.6.0 Description: A reflected XSS attack could be performed in the inline API documentation editor page of the API Publisher by sending an HTTP GET request with a harmful docName request parameter. Recommendations: F...
CVE-2013-1597
A Directory Traversal vulnerability exists in Vivotek PT7135 IP Cameras 0300a and 0400a via a specially crafted GET request, which could let a malicious user obtain user credentials...
Directory traversal
A Directory Traversal vulnerability exists in Vivotek PT7135 IP Cameras 0300a and 0400a via a specially crafted GET request, which could let a malicious user obtain user credentials...
CVE-2013-1597
A Directory Traversal vulnerability exists in Vivotek PT7135 IP Cameras 0300a and 0400a via a specially crafted GET request, which could let a malicious user obtain user credentials...
CVE-2013-1594
An Information Disclosure vulnerability exists via a GET request in Vivotek PT7135 IP Camera 0300a and 0400a due to wireless keys and 3rd party credentials stored in clear text...
Information disclosure
An Information Disclosure vulnerability exists via a GET request in Vivotek PT7135 IP Camera 0300a and 0400a due to wireless keys and 3rd party credentials stored in clear text...