CVE-2023-33477

CVE-2023-33477 Harmonic NSG 9000-6G modulator has an unauthorized download vulnerability in the config.exp configuration file Due to the lack of access permission verification for the "cgi.bin/config.exp" file in this model modulator, any user may request to download a configuration file while...

EUVD-2018-6823

Malware in sbrugna...

EUVD-2018-6825

Malware in sbrugna...

EUVD-2018-6824

Malware in sbrugna...

EUVD-2023-37640

Malicious code in bioql PyPI...

CVE-2023-33477

In Harmonic NSG 9000-6G devices, an authenticated remote user can obtain source code by directly requesting a special path...

CVE-2023-33477

In Harmonic NSG 9000-6G devices, an authenticated remote user can obtain source code by directly requesting a special path...

CVE-2023-33477

In Harmonic NSG 9000-6G devices, an authenticated remote user can obtain source code by directly requesting a special path...

Path traversal

In Harmonic NSG 9000-6G devices, an authenticated remote user can obtain source code by directly requesting a special path...

Harmonic NSG 9000-6G 安全漏洞

The Harmonic NSG 9000-6G is a highly integrated digital video solution from Harmonic. A security vulnerability exists in the Harmonic NSG 9000-6G that originates from a remote user being able to obtain source code by directly requesting a special path...

CVE-2023-33477

In Harmonic NSG 9000-6G devices, an authenticated remote user can obtain source code by directly requesting a special path...

CVE-2023-33477

In Harmonic NSG 9000-6G devices, an authenticated remote user can obtain source code by directly requesting a special path...

Harmonic NSG 9000 Devices Remote Detection

Detection of presence of Harmonic NSG 9000 Device. The script sends a HTTP GET connection request to the server and attempts to determine if the remote host runs Harmonic NSG 9000 Device from the response. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a...

Directory traversal

Harmonic NSG 9000 devices allow remote authenticated users to conduct directory traversal attacks, as demonstrated by "POST /PY/EMULATIONGETFILE" or "POST /PY/EMULATIONEXPORT" with FileName=../../../passwd in the POST data...

CVE-2018-14942

Harmonic NSG 9000 devices allow remote authenticated users to conduct directory traversal attacks, as demonstrated by "POST /PY/EMULATIONGETFILE" or "POST /PY/EMULATIONEXPORT" with FileName=../../../passwd in the POST data...

CVE-2018-14943

Harmonic NSG 9000 devices have a default password of nsgadmin for the admin account, a default password of nsgguest for the guest account, and a default password of nsgconfig for the config account...

Default credentials

Harmonic NSG 9000 devices have a default password of nsgadmin for the admin account, a default password of nsgguest for the guest account, and a default password of nsgconfig for the config account...

Code injection

Harmonic NSG 9000 devices allow remote authenticated users to read the webapp.py source code via a direct request for the /webapp.py URI...

CVE-2018-14941

Harmonic NSG 9000 devices allow remote authenticated users to read the webapp.py source code via a direct request for the /webapp.py URI...

CVE-2018-14943

CVE-2018-14943 affects Harmonic NSG 9000 devices and is due to default credentials: admin (nsgadmin), guest (nsgguest), and config (nsgconfig). The CVE entry cites high-impact potential (confidentiality, integrity, availability) with network access and no user interaction required. Connected reco...