Zyxel Firewall ZTP Unauthenticated Command Injection

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Zyxel Firewall ZTP Unauthenticated Command Injection', 'Description' = %q This module exploits CVE-2022-30525, an unauthenticated remote command...

CVE-2022-22796

Sysaid – Sysaid System Takeover - An attacker can bypass the authentication process by accessing to: /wmiwizard.jsp, Then to: /ConcurrentLogin.jsp, then click on the login button, and it will redirect you to /home.jsp without any authentication...

Open Policy Agent 安全漏洞

Open Policy Agent is an open source general-purpose policy engine that enables uniform, context-aware policy enforcement across the stack. Open Policy Agent suffers from a security vulnerability that stems from the fact that under certain conditions, pretty-printing an Abstract Syntax Tree AST...

CVE-2021-36359

OrbiTeam BSCW Classic before 7.4.3 allows exportpdf authenticated remote code execution RCE via XML tag injection because reportlab\platypus\paraparser.py reached via bscw.cgi op=editfolder.EditFolder calls eval on attacker-supplied Python code. This is fixed in 5.0.12, 5.1.10, 5.2.4, 7.3.3, and...

PT-2021-10496 · Unknown · White Shark System

Name of the Vulnerable Software and Affected Versions: White Shark System WSS version 1.3.2 Description: The issue is related to a web site physical path leakage. No information is provided about the estimated number of potentially affected devices or real-world incidents where this issue was...

Western Digital Western Digital My Cloud Authorization Issues Vulnerability

Western Digital My Cloud is a personal cloud storage device from Western Digital. An authorization issue vulnerability exists in Western Digital My Cloud OS 5 devices prior to version 5.06.115, where due to insufficient validation of URI paths, a NAS management authentication bypass vulnerability...

CVE-2018-12298

Directory Traversal in filebrowser in Seagate NAS OS 4.3.15.1 allows attackers to read files within the application's container via a URL path...

CVE-2018-12297

Cross-site scripting in API error pages in Seagate NAS OS version 4.3.15.1 allows attackers to execute JavaScript via URL path names...

UBUNTU-CVE-2019-0220

A vulnerability was found in Apache HTTP Server 2.4.0 to 2.4.38. When the path component of a request URL contains multiple consecutive slashes '/', directives such as LocationMatch and RewriteRule must account for duplicates in regular expressions while other aspects of the servers processing wi...

CVE-2018-16482

A server directory traversal vulnerability was found on node module mcstatic =0.0.20 that would allow an attack to access sensitive information in the file system by appending slashes in the URL path...

Reprise License Manager license editor cross-site scripting vulnerability

Reprise License Manager RLM is a set of license management software from Reprise, Inc. license editor is one of the certificate editors. A cross-site scripting vulnerability exists in the 'lf' parameter of the /goform/editlfgetdata URL of the license editor in Reprise RLM 12.2BL2 and earlier...

CVE-2017-8793

An issue was discovered on Accellion FTA devices before FTA912180. By sending a POST request to home/seos/courier/web/wmProgressstat.html.php with an attacker domain in the acallow parameter, the device will respond with an Access-Control-Allow-Origin header allowing the attacker to have site...

CVE-2017-5344

An issue was discovered in dotCMS through 3.6.1. The findChildrenByFilter function which is called by the web accessible path /categoriesServlet performs string interpolation and direct SQL query execution. SQL quote escaping and a keyword blacklist were implemented in a new class, SQLUtil...

Honeywell XL Web II Controller Clear Text Stored Password Vulnerability

Honeywell XL Web Controller is a web-based SCADA system. A plaintext stored password vulnerability exists in the Honeywell XL Web II Controller, which could allow an attacker to obtain a user's password by accessing a specific URL...

ASUS DSL-N55U Router Multiple Vulnerabilities (Jun 2016) - Active Check

ASUS DSL-N55U Router is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Jin yuheng content management system /adminroot/common/downLoadFile. jsp download vulnerability

You can download a web path of any file google search inurl:/News. shtml? ide= http://.../ adminroot/common/downLoadFile. jsp? filepath=adminroot/default. jsp&filename=None...

Tibbo AggreGate SCADA/HMI Server Service uploadDirectory Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Tibbo AggreGate SCADA/HMI. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Windows service "AggreGate Server Service" agserverservice.exe. Through...

iCMS 1.1 - Admin SQLi/Bruteforce Exploit

No description provided by source. !/usr/bin/python INFORMATION Exploit Title: iCMS v1.1 Admin SQLi/bruteforce Exploit Author: TecR0c Date: 18/3/2011 Software link: http://bit.ly/hbYy35 Tested on: Linux bt Version: v1.1 XXX: The likelihood of this exploit being successful is low as it requires...

MiniWeb Arbitrary File Upload and Directory Traversal Vulnerabilities

This host is installed with MiniWeb and is prone to file upload and directory traversal vulnerabilities. OpenVAS Vulnerability Test $Id: gbminiwebfileuploadndirtravvuln.nasl 6093 2017-05-10 09:03:18Z teissa $ MiniWeb Arbitrary File Upload and Directory Traversal Vulnerabilities Authors: Thanga...

MiniWeb <= build 300 Multiple Vulnerabilities - Active Check

MiniWeb is prone to file upload and directory traversal vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...