NotCVE-2026-0009

nitroshare의 경로 탐색 취약점 설명 NitroShare Desktop v0.3.4에는 LAN 파일 전송 서버에 경로 탐색 취약점이 있습니다. 서버는 인증 없이 모든 네트워크 인터페이스포트 40818에서 수신 대기합니다. 파일을 수신할 때 발신자의 JSON 항목 헤더에 있는 name 필드는 확인 없이 전달되어 해석된 경로가 전송 루트 디렉터리C:\UserName\Downloads\NitroShare 내에 유지되는지 확인하지 않습니다. 동일한 LAN에 있는 공격자는 ../고전적인 점-점-슬래시 공격 시퀀스가 포함된 조작된...

CVE-2022-40619

FunJSQ, a third-party module integrated on some NETGEAR routers and Orbi WiFi Systems, exposes an HTTP server over the LAN interface of affected devices. This interface is vulnerable to unauthenticated arbitrary command injection through the funjsqaccesstoken parameter. This affects R6230 before...

EUVD-2001-0771

Malware in sbrugna...

EUVD-2001-0770

Malware in sbrugna...

Internet Software Solutions Air Messenger LAN Server 3.4.2 Path Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2881/info Air Messenger LAN Server for Microsoft Windows allows users to exchange phone, pager and email messages through a Web gateway. The path to sensitive files used by AMLServer can be easily obtained by any remote...

Cisco Prime Data Center Network Manager Remote Command Execution Vulnerability

Cisco Prime Data Center Network Manager DCNM contains a remote command execution vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary commands on the computer that is running the Cisco Prime DCNM application. Cisco has released software updates that address this...

CVE-2001-0786

Internet Software Solutions Air Messenger LAN Server AMLServer 3.4.2 stores user passwords in plaintext in the pUser.Dat file...

CVE-2001-0788

Internet Software Solutions Air Messenger LAN Server AMLServer 3.4.2 allows remote attackers to obtain an absolute path for the server directory by viewing the Location header...

CVE-2001-0786

Internet Software Solutions Air Messenger LAN Server AMLServer 3.4.2 stores user passwords in plaintext in the pUser.Dat file...

CVE-2001-0785: Undefined Security Weakness

Directory traversal in Webpaging interface in Internet Software Solutions Air Messenger LAN Server AMLServer 3.4.2 allows allows remote attackers to read arbitrary files via a .. dot dot attack...

CVE-2001-0788: Undefined Security Weakness

Internet Software Solutions Air Messenger LAN Server AMLServer 3.4.2 allows remote attackers to obtain an absolute path for the server directory by viewing the Location header...

CVE-2001-0786: Undefined Security Weakness

Internet Software Solutions Air Messenger LAN Server AMLServer 3.4.2 stores user passwords in plaintext in the pUser.Dat file...

Internet Software Solutions Air Messenger LAN Server 3.4.2 - Full Path Disclosure

Internet Software Solutions Air Messenger LAN Server 3.4.2 - Full Path Disclosure source: https://www.securityfocus.com/bid/2881/info Air Messenger LAN Server for Microsoft Windows allows users to exchange phone, pager and email messages through a Web gateway. The path to sensitive files used by...