Jetty < 9.4.41 Multiple Vulnerabilities

According to its self-reported version number, the instance of Jetty hosted on the remote web server is prior to 9.4.41, 10.0.x prior to 10.0.3 or 11.0.x prior to 11.0.3. It is, therefore, affected by multiple vulnerabilities: - An issue with failure to invalidate sessions after an exception in t...

PT-2021-15569

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue allows an attacker to potentially execute scripts on a client's computer by sending a manipulated URL, exploiting a reflected XSS weakness in the web server. Recommendations: ...

Jetty 11.0.x < 11.0.3 Multiple Vulnerabilities

According to its self-reported version number, the instance of Jetty hosted on the remote web server is prior to 9.4.41, 10.0.x prior to 10.0.3 or 11.0.x prior to 11.0.3. It is, therefore, affected by multiple vulnerabilities: - An issue with failure to invalidate sessions after an exception in t...

Jetty 10.0.x < 10.0.3 Multiple Vulnerabilities

According to its self-reported version number, the instance of Jetty hosted on the remote web server is prior to 9.4.41, 10.0.x prior to 10.0.3 or 11.0.x prior to 11.0.3. It is, therefore, affected by multiple vulnerabilities: - An issue with failure to invalidate sessions after an exception in t...

Jetty 11.0.x < 11.0.2 Multiple Vulnerabilities

According to its self-reported version number, the instance of Jetty hosted on the remote web server is prior to 9.4.39, 10.0.x prior to 10.0.2 or 11.0.x prior to 11.0.2. It is, therefore, affected by multiple vulnerabilities: - An issue where CPU usage can reach 100% with a large invalid TLS...

Exploit for Path Traversal in Microsoft

CVE-2021-40444 Usage Ensure to run setup.sh first as yo...

Improper Input Validation in filebrowser/filebrowser

Description File Browser is a web-interface that allows you to manage and navigate through your files in a web browser. One of its features is to allow a user to run specific shell commands in the server, these commands are specified by users with administrator privileges, with an allow list. Thi...

CVE-2020-20746

A stack-based buffer overflow in the httpd server on Tenda AC9 V15.03.06.60EN allows remote attackers to execute arbitrary code or cause a denial of service DoS via a crafted POST request to /goform/SetStaticRouteCfg...

Apache HTTP Server SSRF

The vulnerability of the modproxy module in the Apache HTTP Server is related to insufficient checking of incoming requests. Exploiting this vulnerability allows a malicious actor to perform an SSRF attack remotely...

Basic auth bypass in esphome

Impact Anyone with webserver enabled and HTTP basic auth configured on 2021.9.1 or older webserver allows OTA update without checking user defined basic auth username & password Patches Patch released in 2021.9.2 Workarounds Disable/remove webserver...

CVE-2021-35027

A directory traversal vulnerability in the web server of the Zyxel VPN2S firmware version 1.12 could allow a remote attacker to gain access to sensitive information...

CVE-2021-35027

A directory traversal vulnerability in the web server of the Zyxel VPN2S firmware version 1.12 could allow a remote attacker to gain access to sensitive information...

CVE-2021-35027

A directory traversal vulnerability in the web server of the Zyxel VPN2S firmware version 1.12 could allow a remote attacker to gain access to sensitive information...

CVE-2021-35027

CVE-2021-35027 affects Zyxel VPN2S firmware version 1.12, where the web server is vulnerable to a directory traversal flaw allowing remote access to sensitive information. The exposure is evidenced by NVD and Red Hat/other records, with CVSSv3.1 base score 7.5 (HIGH) and CVSSv2 base score 5.0 (ME...

CVE-2021-35027

A directory traversal vulnerability in the web server of the Zyxel VPN2S firmware version 1.12 could allow a remote attacker to gain access to sensitive information...

PT-2021-5182

Name of the Vulnerable Software and Affected Versions Zyxel VPN2S firmware version 1.12 Description A directory traversal vulnerability in the web server of the Zyxel VPN2S firmware could allow a remote attacker to gain access to sensitive information. This issue exists due to incorrect restricti...

Zyxel VPN2S 路径遍历漏洞

Zyxel Vpn2S is a reliable and secure Vpn router from China's Heqin Technology Zyxel. A security vulnerability exists in the web server of the Zyxel VPN2S firmware version 1.12, which could allow remote attackers to access sensitive information...

Web Servers Directory Traversal Evasion Attempt

A directory traversal vulnerability exists multiple web servers. The vulnerability is due to an input validation error in the web server that does not properly sanitize directory traversal patterns. Successful exploitation of this vulnerability could allow an attacker to access arbitrary files on...

APOGEE MBC Embedded Web Server Code Execution

The vulnerability in the embedded web-server microprogramming software of controllers such as APOGEE MBC, APOGEE MEC, APOGEE PXC, and TALON TC relates to the escape of operations beyond the buffer in memory when processing the Host parameter in HTTP requests. Exploiting this vulnerability allows ...

CVE-2021-35027: Path Traversal: 'dir/../../filename'

A directory traversal vulnerability in the web server of the Zyxel VPN2S firmware version 1.12 could allow a remote attacker to gain access to sensitive information...