125 matches found
CVE-2022-39073
CVE-2022-39073 Firmware details: wainnerversion: BDPOSTEMF286RMODULEV1.0.0B12 crversion: CRITPOSTEMF286RV1.0.0B10 Prerequisites requests pip install requests Command Injection The vulnerability is a shared command injection between the ztenetlinkdetect binary and the WATCHDOGSWITCH handler in the...
goahead-webserver-pre-5.1.5-RCE-PoC-CVE-2021-42342-
Goahead webserver pre v5.1.5 RCE PoC CVE-2021-42342 A recent bug in Goahead Webserver was discovered by William Bowling which leads to RCE on the exploited server. The issue exists prior to version 5.1.5 which, according to Shodan covers around 2.8mio servers on the internet. A CVS is available n...
P2P wificam remote code execution
A credential disclosure in several cameras which utilize the GoAhead webserver, combined with an authenticated RCE allows for unauthenticated remote code execution. !/usr/bin/env python3 -- coding: utf-8 -- """P2P wificam remote code execution""" from kittysploit import from...
P2P wificam credential disclosure
A credential disclosure in several cameras which utilize the GoAhead webserver. !/usr/bin/env python3 -- coding: utf-8 -- """P2P wificam credential disclosure""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleAuxiliary, Httpclient: info = 'name'...
CVE-2003-1568
GoAhead WebServer before 2.1.6 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via an invalid URL, related to the websSafeUrl function...
CVE-2003-1569
GoAhead WebServer before 2.1.5 on Windows 95, 98, and ME allows remote attackers to cause a denial of service daemon crash via an HTTP request with a 1 con, 2 nul, 3 clock$, or 4 config$ device name in a path component, different vectors than CVE-2001-0385...
EUVD-2002-2406
Malware in sbrugna...
EUVD-2009-5066
Malware in sbrugna...
EUVD-2001-0382
Malware in sbrugna...
EUVD-2011-4215
Malware in sbrugna...
EUVD-2002-2407
Malware in sbrugna...
EUVD-2003-1558
Malware in sbrugna...
EUVD-2002-2408
Malware in sbrugna...
EUVD-2002-2409
Malware in sbrugna...
EUVD-2002-2405
Malware in sbrugna...
EUVD-2017-1595
Malware in sbrugna...
EUVD-2003-1559
Malware in sbrugna...
EUVD-2021-28629
Malicious code in bioql PyPI...
CVE-2021-41615
websda.c in GoAhead WebServer 2.1.8 has insufficient nonce entropy because the nonce calculation relies on the hardcoded onceuponatimeinparadise value, which does not follow the secret-data guideline for HTTP Digest Access Authentication in RFC 7616 section 3.3 or RFC 2617 section 3.2.1. NOTE:...