102 matches found
goahead-webserver-pre-5.1.5-RCE-PoC-CVE-2021-42342-
Goahead Web服务器（v5.1.5 之前版本）RCE 利用 PoC（CVE-2021-42342） William Bowling 最近发现了 Goahead Web 服务器中的一个漏洞，可导致被利用服务器上的远程代码执行（RCE）。 该问题存在于 5.1.5 版本之前，根据 Shodan 统计，影响约 280 万台互联网服务器。 现在已经有了 CVE：https://nvd.nist.gov/vuln/detail/CVE-2021-42342 该 RCE 的成因是：如果启用了文件上传过滤器，那么用户不仅可以上传文件，还可以同时设置用户表单变量。...
CVE-2022-39073
CVE-2022-39073 固件详细信息： root@kitploit: wainnerversion: BDPOSTEMF286RMODULEV1.0.0B12 crversion: CRITPOSTEMF286RV1.0.0B10 前置条件 requests（pip install requests） 命令注入 该漏洞是 ztenetlinkdetect 二进制程序与 Web 服务器 goahead 二进制程序中的 WATCHDOGSWITCH 处理器之间共享的一个命令注入漏洞。 请注意，仅当路由器通过 WAN 连接到互联网或通过 SIM...
CVE-2003-1568
GoAhead WebServer before 2.1.6 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via an invalid URL, related to the websSafeUrl function...
CVE-2003-1569
GoAhead WebServer before 2.1.5 on Windows 95, 98, and ME allows remote attackers to cause a denial of service daemon crash via an HTTP request with a 1 con, 2 nul, 3 clock$, or 4 config$ device name in a path component, different vectors than CVE-2001-0385...
EUVD-2011-4215
Malware in sbrugna...
EUVD-2002-2408
Malware in sbrugna...
EUVD-2002-2405
Malware in sbrugna...
EUVD-2002-2406
Malware in sbrugna...
EUVD-2017-1595
Malware in sbrugna...
EUVD-2003-1558
Malware in sbrugna...
EUVD-2009-5066
Malware in sbrugna...
EUVD-2003-1559
Malware in sbrugna...
EUVD-2001-0382
Malware in sbrugna...
EUVD-2002-2407
Malware in sbrugna...
EUVD-2002-2409
Malware in sbrugna...
EUVD-2021-28629
Malicious code in bioql PyPI...
CVE-2021-41615
websda.c in GoAhead WebServer 2.1.8 has insufficient nonce entropy because the nonce calculation relies on the hardcoded onceuponatimeinparadise value, which does not follow the secret-data guideline for HTTP Digest Access Authentication in RFC 7616 section 3.3 or RFC 2617 section 3.2.1. NOTE:...
CVE-2017-1000471
EmbedThis GoAhead Webserver version 4.0.0 is vulnerable to a NULL pointer dereference in the CGI handler resulting in memory corruption or denial of service...
CVE-2002-2430
GoAhead WebServer before 2.1.1 allows remote attackers to cause a denial of service CPU consumption by performing a socket disconnect to terminate a request before it has been fully processed by the server...