CVE-2020-35262

CVE-2020-35262 affects Digisol DG-HR3400 with a Cross Site Scripting (XSS) vulnerability exploitable via the NTP configuration server name in the Time and date module and the Keyword field in URL Filter. Public details and CVSS metrics in NVD indicate a network-exploitable flaw (CVSS v3.1 base sc...

CVE-2020-35262

Cross Site Scripting XSS vulnerability in Digisol DG-HR3400 can be exploited via the NTP server name in Time and date module and "Keyword" in URL Filter...

PT-2021-11145

Name of the Vulnerable Software and Affected Versions: Beetel router 777VR1 Description: A Cross Site Scripting XSS issue can be exploited via the NTP server name in System Time and the Keyword in URL Filter. Recommendations: For Beetel router 777VR1, as a temporary workaround, consider restricti...

CVE-2020-25498: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in Beetel router 777VR1 can be exploited via the NTP server name in System Time and "Keyword" in URL Filter...

CVE-2020-35262: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in Digisol DG-HR3400 can be exploited via the NTP server name in Time and date module and "Keyword" in URL Filter...

Exploit for Cross-site Scripting in Beetel 777Vr1_Firmware

CVE-2020-25498: Stored XSS via CSRF in Beetel 777VR1 Router...

GaussDB Kernel: Configuring an NTP Server

The Network Time Protocol NTP is used to synchronize time between clients and servers on the network. By configuring an NTP, you can synchronize the clock of a PC to the Coordinated Universal Time UTC and synchronize system clocks of multiple OSs. Copyright C 2020 Greenbone Networks GmbH Some tex...

How to Configure an NTP Server on a NetScaler Appliance

This article contains information about configuring a Network Time Protocol NTP server on a NetScaler appliance. Background In the earlier releases of the NetScaler software, you need to manually edit multiple files from the shell prompt of the NetScaler appliance to configure an NTP server. The...

CVE-2020-25748

A Cleartext Transmission issue was discovered on Rubetek RV-3406, RV-3409, and RV-3411 cameras firmware versions v342, v339. Someone in the middle can intercept and modify the video data from the camera, which is transmitted in an unencrypted form. One can also modify responses from NTP and RTSP...

CVE-2020-7357

Cayin CMS suffers from an authenticated OS semi-blind command injection vulnerability using default credentials. This can be exploited to inject and execute arbitrary shell commands as the root user through the 'NTPServerIP' HTTP POST parameter in system.cgi page. This issue affects several...

CVE-2020-7357

Cayin CMS suffers from an authenticated OS semi-blind command injection vulnerability using default credentials. This can be exploited to inject and execute arbitrary shell commands as the root user through the 'NTPServerIP' HTTP POST parameter in system.cgi page. This issue affects several...

CVE-2020-7357 Cayin CMS Command Injection

Cayin CMS suffers from an authenticated OS semi-blind command injection vulnerability using default credentials. This can be exploited to inject and execute arbitrary shell commands as the root user through the 'NTPServerIP' HTTP POST parameter in system.cgi page. This issue affects several...

PT-2020-19571 · Cayin · Cayin Cms-40 +4

Name of the Vulnerable Software and Affected Versions: Cayin CMS versions 7.5 through 8.2 Cayin CME-SE version affected versions not specified Cayin CMS-60 version affected versions not specified Cayin CMS-40 version affected versions not specified Cayin CMS-20 version affected versions not...

Network Time Protocol Daemon (ntpd) 4.x < 4.2.8p15 / 4.3.x < 4.3.101 DoS

The version of the remote NTP server is 4.x prior to 4.2.8p15, or is 4.3.x prior to 4.3.101. It is, therefore, affected by a denial of service vulnerability due to a flaw in handling unauthenticated synchronization traffic. An authenticated attacker can exploit this issue to cause denial of...

Cayin CMS NTP Server 11.0 CVE-2020-7357 - Remote Code Execution

This Metasploit module exploits an authenticated remote code execution vulnerability in Cayin CMS versions 11.0 This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Cayin CMS NTP Server RCE',...

Cayin CMS NTP Server 11.0 Remote Code Execution Exploit

This Metasploit module exploits an authenticated remote code execution vulnerability in Cayin CMS versions 11.0 and below. The code execution is executed in the systemservice.cgi file's ntpIp Parameter. The field is limited in size, so repeated requests are made to achieve a larger payload. Cayin...

Cayin CMS NTP Server 11.0 Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Cayin CMS NTP Server RCE', 'Description' = %q This module exploits an authenticated RCE in Cayin CMS MSFLICENSE, 'Author' = 'h00die', msf module...

Cayin Content Management Server 11.0 - Remote Command Injection (root) Vulnerability

Exploit for multiple platform in category web applications Title: Cayin Content Management Server 11.0 - Remote Command Injection root Author:LiquidWorm Vendor: https://www.cayintech.com CVE: N/A Cayin Content Management Server 11.0 Root Remote Command Injection Vendor: CAYIN Technology Co., Ltd...

Cayin Signage Media Player 3.0 Root Remote Command Injection

!/usr/bin/env python3 Cayin Signage Media Player 3.0 Root Remote Command Injection Vendor: CAYIN Technology Co., Ltd. Product web page: https://www.cayintech.com Affected version: SMP-8000QD v3.0 SMP-8000 v3.0 SMP-6000 v3.0 Build 19025 SMP-6000 v1.0 Build 14246 SMP-6000 v1.0 Build 14199 SMP-6000...

Cayin CMS NTP Server RCE

This module exploits an authenticated RCE in Cayin CMS use exploit/linux/http/cayin/cmsntp msf undefinedcmsntp show actions ...actions... msf undefinedcmsntp set ACTION msf undefinedcmsntp show options ...show and set options... msf undefinedcmsntp run This module requires Metasploit:...