3785 matches found
PT-2022-19579
Name of the Vulnerable Software and Affected Versions TOTOLINK N600R version 4.3.0cu.7647 B20210106 Description A stack overflow issue was discovered via the url parameter in the function FUN 00415bf0. Recommendations For TOTOLINK N600R version 4.3.0cu.7647 B20210106, as a temporary workaround,...
Reflected Xss using url based payload
Description Hi there i found that url parameter is not verified by server so an attacker can use javascript schema to run xss on user's browser Proof of Concept 1. Visit this page http://localhost/invoices/EditPageOption?code=ListProducto-new&url=javascript:prompt2 2. Click on back button PoC:-...
PT-2022-18804
Name of the Vulnerable Software and Affected Versions Jspxcms version 10.2.0 Description The issue allows attackers to execute a Server-Side Request Forgery SSRF via the API endpoint "/cmscp/ext/collect/fetch url.do" with the url parameter. This can potentially lead to unauthorized access to...
CVE-2022-1282
The Photo Gallery by 10Web WordPress plugin before 1.6.3 does not properly sanitize the $GET'imageurl' variable, which is reflected back to the users when executing the editimagebwg AJAX action...
Arbitrary file deletion
RG-NBR-E Enterprise Gateway RG-NBR2100G-E was discovered to contain an arbitrary file read vulnerability via the url parameter in check.php...
CVE-2022-27983
RG-NBR-E Enterprise Gateway RG-NBR2100G-E was discovered to contain an arbitrary file read vulnerability via the url parameter in check.php...
CVE-2022-27983: Undefined Security Weakness
RG-NBR-E Enterprise Gateway RG-NBR2100G-E was discovered to contain an arbitrary file read vulnerability via the url parameter in check.php...
PT-2022-18733
Name of the Vulnerable Software and Affected Versions RG-NBR-E Enterprise Gateway RG-NBR2100G-E affected versions not specified Description The issue is related to an arbitrary file read vulnerability. This vulnerability can be exploited via the url parameter in the check.php file. Recommendation...
PT-2022-13335
Name of the Vulnerable Software and Affected Versions uDraw WordPress plugin versions prior to 3.3.3 Description The issue arises from the lack of validation of the url parameter in the udraw convert url to base64 AJAX action, which is accessible to both unauthenticated and authenticated users...
Tenda AC9 Buffer Overflow Vulnerability
Tenda AC9 is a wireless router from Tenda, China. Tenda AC9 is vulnerable to a buffer overflow vulnerability, which can be exploited to execute arbitrary code via the url parameter...
CVE-2022-23970
ASUS RT-AX56U’s updatejson function has a path traversal vulnerability due to insufficient filtering for special characters in the URL parameter. An unauthenticated LAN attacker can overwrite a system file by uploading another file with the same file name, which results in service disruption...
CVE-2022-23971
ASUS RT-AX56U’s updatePLC/PORT file has a path traversal vulnerability due to insufficient filtering for special characters in the URL parameter. An unauthenticated LAN attacker can overwrite a system file by uploading another PLC/PORT file with the same file name, which results in service...
Path traversal
ASUS RT-AX56U’s updatejson function has a path traversal vulnerability due to insufficient filtering for special characters in the URL parameter. An unauthenticated LAN attacker can overwrite a system file by uploading another file with the same file name, which results in service disruption...
CVE-2022-23971 ASUS RT-AX56U - Path Traversal
ASUS RT-AX56U’s updatePLC/PORT file has a path traversal vulnerability due to insufficient filtering for special characters in the URL parameter. An unauthenticated LAN attacker can overwrite a system file by uploading another PLC/PORT file with the same file name, which results in service...
CVE-2022-23970
The CVE-2022-23970 entry concerns the ASUS RT-AX56U router. A path traversal flaw exists in the update_json function due to insufficient filtering of special characters in the URL parameter. An unauthenticated LAN attacker can overwrite a system file by uploading another file with the same filena...
CVE-2022-23970 ASUS RT-AX56U - Path Traversal
ASUS RT-AX56U’s updatejson function has a path traversal vulnerability due to insufficient filtering for special characters in the URL parameter. An unauthenticated LAN attacker can overwrite a system file by uploading another file with the same file name, which results in service disruption...
CVE-2022-21223
The package cocoapods-downloader before 1.6.2 are vulnerable to Command Injection via hg argument injection. When calling the download function when using hg, the url and/or revision, tag, branch is passed to the hg clone command in a way that additional flags can be set. The additional flags can...
Apache Log4j 2.0.x Multiple Vulnerabilities (Web Application URL Parameter, Log4Shell) - Active Check
Apache Log4j is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...