CVE-2024-23637

OctoPrint (web interface for 3D printers) contains a vulnerability in versions up to 1.9.3 that allows a malicious admin to change the password of other admin accounts (including their own) without re-authenticating. The issue would let an attacker who hijacks an admin session lock out legitimate...

(Pwn2Own) Lexmark CX331adwe Missing Authentication Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Lexmark CX331adwe printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of authentication within the web interface. The...

Sensitive Information Disclosure

Apache Kylin is vulnerable to Sensitive Information Disclosure. The vulnerability is due to the exposure of credentials within the kylin.properties file through the Server Config web interface when the Kylin service runs over HTTP. This could allow an attacker to gain unauthorized access to the...

TOTOLINK N200RE command parameter buffer overflow vulnerability

The TOTOLINK N200RE is a wireless router for the SOHO market. The TOTOLINK N200RE suffers from a buffer overflow vulnerability that originates from a stack-based buffer overflow in the command parameter of the setDiagnosisCfg function of /cgi-bin/cstecgi.cgi. No detailed vulnerability details are...

The vulnerability of the emmitdebugnote method in the webauthoperation.php file of the J-Web interface on Juniper Networks Junos OS devices in the SRX and EX series allows a perpetrator to execute arbitrary code.

The vulnerability of the emmitdebugnote method in the webauthoperation.php file of the J-Web interface on Juniper Networks Junos OS devices in the SRX and EX series is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to...

TOTOLINK N200RE setIpPortFilterRules function stack buffer overflow vulnerability

The TOTOLINK N200RE is a wireless broadband router for small office or home SOHO environments. The TOTOLINK N200RE suffers from a stack buffer overflow vulnerability that originates from a stack-based buffer overflow in the ePort parameter of the setIpPortFilterRules function of...

CVE-2024-23828

Nginx-UI is a web interface to manage Nginx configurations. It is vulnerable to an authenticated arbitrary command execution via CRLF attack when changing the value of testconfigcmd or startcmd. This vulnerability exists due to an incomplete fix for CVE-2024-22197 and CVE-2024-22198. This...

Design/Logic Flaw

Nginx-UI is a web interface to manage Nginx configurations. It is vulnerable to an authenticated arbitrary command execution via CRLF attack when changing the value of testconfigcmd or startcmd. This vulnerability exists due to an incomplete fix for CVE-2024-22197 and CVE-2024-22198. This...

CVE-2024-23828

Summary: CVE-2024-23828 affects Nginx-UI, a web interface for Nginx configuration. An authenticated attacker can achieve arbitrary command execution by abusing CRLF in configuration fields (test_config_cmd or start_cmd), due to an incomplete fix for CVE-2024-22197/22198. The issue is capped at hi...

CVE-2024-23827

Nginx-UI is a web interface to manage Nginx configurations. The Import Certificate feature allows arbitrary write into the system. The feature does not check if the provided user input is a certification/key and allows to write into arbitrary paths in the system. It's possible to leverage the...

CVE-2024-23827 Nginx-UI arbitrary file write through the Import Certificate feature

Nginx-UI is a web interface to manage Nginx configurations. The Import Certificate feature allows arbitrary write into the system. The feature does not check if the provided user input is a certification/key and allows to write into arbitrary paths in the system. It's possible to leverage the...

CVE-2024-23822

CVE-2024-23822 affects Thruk, a multibackend web monitoring interface. Prior to version 3.12, the product’s file upload form allows a threat actor to perform a path traversal vulnerability, enabling arbitrary file uploads to chosen server paths and permissions. The root cause is insufficient vali...

CVE-2024-23822 Thruk Incorrect limitation of a pathname to a restricted directory (Path Traversal) (CWE-22)

Thruk is a multibackend monitoring webinterface. Prior to 3.12, the Thruk web monitoring application presents a vulnerability in a file upload form that allows a threat actor to arbitrarily upload files to the server to any path they desire and have permissions for. This vulnerability is known as...

CVE-2023-29055

CVE-2023-29055 affects Apache Kylin 2.0.0–4.0.3, where the Server Config web interface can display the contents of kylin.properties. When accessed over HTTP (or other plaintext protocols), network sniffers may intercept the payload and access potential server-side credentials. The root cause is t...

Nginx-UI vulnerable to authenticated RCE through injecting into the application config via CRLF

Fix bypass to the following bugs - https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-pxmr-q2x3-9x9m - https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-8r25-68wm-jw35 Allowing to inject directly in the app.ini via CRLF to change the value of testconfigcmd and startcmd...

PT-2024-1508 · Se Elektronic Gmbh · E-Ddc3.3

Name of the Vulnerable Software and Affected Versions: SE-elektronic GmbH E-DDC3.3 versions 03.07.03 and higher Description: The issue is related to uncontrolled resource consumption in the web interface of the E-DDC3.3 automation station software. This could allow a remote attacker to cause a...

The vulnerability in the web interface for managing the Cisco Unity Connection integrated messaging system allows a perpetrator to carry out cross-site scripting attacks.

The vulnerability of the web interface for managing the Cisco Unity Connection integrated messaging system is related to the lack of protective measures taken for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

CVE-2024-20305

A vulnerability in the web-based management interface of Cisco Unity Connection could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. This vulnerability exists because the web-based management interface does not properly valida...

CVE-2024-20305

A vulnerability in the web-based management interface of Cisco Unity Connection could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. This vulnerability exists because the web-based management interface does not properly valida...

CVE-2024-0921

A vulnerability has been found in D-Link DIR-816 A2 1.10CNB04 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /goform/setDeviceSettings of the component Web Interface. The manipulation of the argument statuscheckpppoeuser leads to os command...