10025 matches found
CVE-2018-16219: Improper Authentication
A missing password verification in the web interface in AudioCodes 405HD VoIP phone with firmware 2.2.12 allows an remote attacker in the same network as the device to change the admin password without authentication via a POST request...
WP Database Backup RCE
There exists a command injection vulnerability in the Wordpress plugin wp-database-backup for versions use exploit/multi/http/wp/dbbackuprce msf undefineddbbackuprce show actions ...actions... msf undefineddbbackuprce set ACTION msf undefineddbbackuprce show options ...show and set options... msf...
PT-2019-2502
Name of the Vulnerable Software and Affected Versions БАРС.ЖКХ-Жилищный Фонд affected versions not specified Description The issue is related to an unlimited file upload vulnerability, allowing a remote attacker to execute arbitrary code by uploading a php file to the server using a specially...
PT-2019-2876
Name of the Vulnerable Software and Affected Versions FortiOS affected versions not specified Description The issue is related to insufficient input validation in the /login disconnect/current admins page handler of the FortiOS web interface. It can be exploited by a remote attacker using a...
PT-2019-2873
Name of the Vulnerable Software and Affected Versions FortiOS affected versions not specified Description The issue is related to errors in filtering HTTP request data in the /api/cmdb page handler of the FortiOS web interface. Exploitation of this issue could allow a remote attacker to perform...
Design/Logic Flaw
An issue was discovered in Pimcore before 5.7.1. An attacker with classes permission can send a POST request to /admin/class/bulk-commit, which will make it possible to exploit the unserialize function when passing untrusted values in the data parameter to...
CVE-2019-10867
An issue was discovered in Pimcore before 5.7.1. An attacker with classes permission can send a POST request to /admin/class/bulk-commit, which will make it possible to exploit the unserialize function when passing untrusted values in the data parameter to...
PT-2019-12064
Name of the Vulnerable Software and Affected Versions Pimcore versions prior to 5.7.1 Description An issue allows an attacker with classes permission to exploit the unserialize function by sending a POST request to "/admin/class/bulk-commit" and passing untrusted values in the data parameter to...
CSRF vulnerability and missing permission check in netsparker-cloud-scan allowed SSRF
A missing permission check in a form validation method in netsparker-cloud-scan allowed users with Overall/Read permission to initiate a connection test to an attacker-specified server with attacker-specified API token. Additionally, the form validation method did not require POST requests,...
CSRF vulnerability and missing permission check in openid allow SSRF
A missing permission check in a form validation method in openid allows users with Overall/Read permission to initiate a connection test to an attacker-specified URL. Additionally, the form validation method does not require POST requests, resulting in a CSRF vulnerability...
WordPress Plugin PayPal Checkout Payment Gateway 1.6.8 - Parameter Tampering
Exploit Title: cgi-bin/webscr?cmd=cart in the WooCommerce PayPal Checkout Payment Gateway plugin 1.6.8 for WordPress allows Parameter Tampering in an amount parameter such as amount1, as demonstrated by purchasing an item for lower than the intended price Date: 27.01.2019 Product Title :Woocommer...
The vulnerability of the SetWLanRadioSettings() function in the software interface of the D-Link DIR-823G router’s microprogramming system allows a hacker to gain access to protected information.
The vulnerability of the SetWLanRadioSettings function in the software interface of the D-Link DIR-823G router’s microprogramming system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to protected...
PT-2019-11333 · Jenkins · Jenkins Slack Notification Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Slack Notification Plugin versions 2.19 and earlier Description: A missing permission check in the plugin allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs,...
Chaturbate: Unrestricted POST request size on /customer_support/information_form/ endpoint
The hacker found that a form on the billing site had a high post size limit that could cause increased load. This was lowered to a reasonable amount. This had no effect on any stored data...
Authentication flaw
An issue was discovered on Shenzhen Coship RT3050 4.0.0.40, RT3052 4.0.0.48, RT7620 10.0.0.49, WM3300 5.0.0.54, and WM3300 5.0.0.55 devices. The password reset functionality of the router doesn't have backend validation for the current password and doesn't require any type of authentication. By...
PT-2019-2768
Name of the Vulnerable Software and Affected Versions Eltex switch web server affected versions not specified Description The issue exists due to the lack of length checks for the restoreUrl, errorCollector, userName$query, and password$query parameters in authorization requests. This can be...
WordPress Fastest Cache 0.8.9.0 Arbitrary File Deletion Exploit
WordPress WP Fastest Cache plugin versions 0.8.9.0 and below suffer from an arbitrary file deletion vulnerability. The wordpress plugin "WP Fastest Cache" 0 suffered from an arbitrary file deletion bug. Description A successful attack allows an unauthenticated attacker to specify a path to a...
Remote Code Execution (RCE)
solr-core is vulnerable to remote code execution RCE. The vulnerability exists as ConfigAPI allows editing of the configuration for the Solar's JMX server through a HTTP POST request, which could be used to point to a malicious RMI server, resulting in unsafe deserialization...
CVE-2019-9118
An issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a...
CVE-2019-9117
An issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a...