CVE-2010-5333

CVE-2010-5333 affects Integard Pro and Integard Home. The web server’s administration login POST request can overflow a buffer (EIP-overwrite) via a long password, enabling arbitrary code execution; an existing SEH-overwrite variant is noted. Affected versions include Integard Pro/Home before 2.0...

Important: Red Hat Security Advisory: rh-nginx110-nginx security update

An update for rh-nginx110-nginx is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

3S-Smart Software Solutions GmbH CODESYS V3 Web Server

1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: 3S-Smart Software Solutions GmbH Equipment: CODESYS V3 web server Vulnerabilities: Path Traversal, Stack-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of these vulnerabilities...

CVE-2019-5054

An exploitable denial-of-service vulnerability exists in the session handling functionality of the NETGEAR N300 WNR2000v5 with Firmware Version V1.0.0.70 HTTP server. An HTTP request with an empty User-Agent string sent to a page requiring authentication can cause a null pointer dereference,...

MetInfo has a file upload vulnerability

MetInfo is an enterprise website management system with PHP+Mysql architecture. MetInfo suffers from a file upload vulnerability that can be exploited by attackers to gain control of a web server...

Command Execution Vulnerability in Xunrui CMS (CNVD-2019-33541)

Xunrui CMS content management framework is based on PHP7 language using the latest CodeIgniter4 as a development framework for the production of web content management framework, providing "computer site + mobile site + APP interface" integrated web technology solutions. There is a command...

The vulnerability in the web-server software of Cisco Enterprise NFV Infrastructure Software (NFVIS) allows a attacker to reveal the names of files located in the vulnerable system.

The vulnerability of Cisco Enterprise NFV Infrastructure Software’s web server software relates to the leakage of file and directory information. Exploiting this vulnerability can allow a malicious actor to disclose the names of files located in the vulnerable system using a specially crafted que...

Enigma NMS 65.0.0 - OS Command Injection

!/usr/bin/python -------------------------------------------------------------------- Exploit Title: Enigma NMS OS Command Injection NETSAS Pty Ltd Enigma NMS Date: 21 July 2019 Author: Mark Cross @xerubus | mogozobo.com Vendor: NETSAS Pty Ltd Vendor Homepage: https://www.netsas.com.au/ Software...

Enigma NMS 65.0.0 OS Command Injection

!/usr/bin/python -------------------------------------------------------------------- Exploit Title: Enigma NMS OS Command Injection NETSAS Pty Ltd Enigma NMS Date: 21 July 2019 Author: Mark Cross @xerubus | mogozobo.com Vendor: NETSAS Pty Ltd Vendor Homepage: https://www.netsas.com.au/ Software...

Lexmark Printer CSRF Vulnerability (TE921)

Some Lexmark devices embedded web server contain a cross-site request forgery CSRF attack vulnerability that allows a local account password to be changed without the knowledge of the authenticated user. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a...

Code Execution, Arbitrary File Read Vulnerabilities in RGCMS

RuiGu information management system RGCMS is a set of open source building management system. RGCMS1.06 version of the existence of arbitrary file read, write vulnerability, attackers can use this vulnerability to obtain control of the web server...

Flexense DiskBoss Enterprise Buffer Overflow (CVE-2018-5262)

A stack buffer overflow vulnerability exists in the web server of DiskBoss Enterprise. The vulnerability is due to the way DiskBoss Enterprise handles bounds checking. A remote, authenticated attack can lead to a stack buffer overflow...

Fedora Update for nginx FEDORA-2019-7a0b45fdc4

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

The vulnerability of the mod_ssl module in the Apache HTTP Server allows a hacker to cause a service failure.

The vulnerability of the modssl module in the Apache HTTP Server exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to cause service failures by sending a specially crafted request for re-negotiation of the TLS connection...

PHP 7.3.x < 7.3.9 Multiple Vulnerabilities.

According to its banner, the version of PHP running on the remote web server is 7.3.x prior to 7.3.9. It is, therefore, affected by multiple vulnerabilities including an unspecified heap buffer overflow. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

Atlassian JIRA 7.x.x < 7.13.1 / 8.0.0 Cross-Site Scripting (XSS) Vulnerability (SB18-141)

According to its self-reported version number, the instance of Atlassian JIRA hosted on the remote web server is potentially affected by a cross-site scripting vulnerability which allows a reflected cross-site scripting XSS attack. This flaw exists because the activity stream gadget does not...

File Upload Vulnerability in OKLite 1.2.25

OKLite is a business building system. A file upload vulnerability exists in OKLite 1.2.25, which can be exploited by attackers to gain control of a web server...

U.S. Dept Of Defense: Improper Neutralization of Input During Web Page Generation

Summary: Cross-site scripting XSS vulnerabilities occur when: 1. Untrusted data enters a web application, typically from a web request. 2. The web application dynamically generates a web page that contains this untrusted data. Description: Impact Once the malicious script is injected, the attacke...

Cisco Email Security Virtual Appliance C100V IronPort Header Injection

!/usr/bin/perl -w Cisco Email Security Virtual Appliance C100V IronPort Remote Header 'Host' Injection Copyright 2019 c Todor Donev Disclaimer: This or previous programs are for Educational purpose ONLY. Do not use it without permission. The usual disclaimer applies, especially the fact that Todo...

Cisco C170 Email Security Appliance 10.0.3-003 IronPort Header Injection

!/usr/bin/perl -w Cisco C170 Email Security Appliance v10.0.3-003 IronPort Remote Header 'Host' Injection Copyright 2019 c Todor Donev Disclaimer: This or previous programs are for Educational purpose ONLY. Do not use it without permission. The usual disclaimer applies, especially the fact that...