22204 matches found
Popup Like box - Page Plugin < 3.5.3 - Authenticated Blind SQL Injections
The getfblikeboxes function in the plugin did not use whitelist or validate the orderby parameter before using it in SQL statements passed to the getresults DB calls, leading to SQL injection issues in the admin dashboard PoC SQLMAP: python sqlmap.py -r r.txt -p orderby --level 5 --risk 3 --dbms...
Vulnerabilities fixed in Red Hat JBoss Web Server
Vulnerabilities have been fixed in Red Hat JBoss Web Server. The vulnerabilities allow a malicious party to cause a denial-of-service or to obtain sensitive data obtain. Red Hat has released updates to fix the vulnerabilities. More information can be found on the page below:...
RHEL 7 / 8 : Red Hat JBoss Web Server 5.5.0 Security (Moderate) (RHSA-2021:2561)
The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2561 advisory. Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of the...
SQL Injection Vulnerability in GNSS Web Server of Guangzhou Nanfang Satellite Navigation Instrument Co.
Guangzhou Nanfang Satellite Navigation Instrument Co., Ltd Nanfang Satellite Navigation, belonging to Nanfang Surveying and Mapping Group, is a high-tech industrial company dedicated to the research and development, production and sales of global positioning and navigation satellite GNSS...
Onair2 < 3.9.9.2 & KenthaRadio < 2.0.2 - Unauthenticated RFI and SSRF
The theme and plugin have exposed proxy functionality to unauthenticated users, sending requests to this proxy functionality will have the web server fetch and display the content from any URI, this would allow for SSRF Server Side Request Forgery and RFI Remote File Inclusion vulnerabilities on...
phpwcms code injection vulnerability
phpwcms is an open source Web content management system. It is fast, easy to install and runs on any standard web server platform that supports PHP/MySQL. phpwcms suffers from a code injection vulnerability that can be exploited by attackers via /phpwcms/setup/setup.php...
ZoomSounds < 6.05 - Unauthenticated Arbitrary File Upload
The plugin contained a PHP file, allowing unauthenticated users to upload an arbitrary file anywhere on the web server. Note WPScanTeam: It's unclear which version fixed the issue exactly, however we were able to confirm the issue on version as high as v5.96 and that the related file has been...
CVE-2021-20019
A vulnerability in SonicOS where the HTTP server response leaks partial memory by sending a crafted HTTP request, this can potentially lead to an internal sensitive data disclosure vulnerability...
CVE-2021-20019
A vulnerability in SonicOS where the HTTP server response leaks partial memory by sending a crafted HTTP request, this can potentially lead to an internal sensitive data disclosure vulnerability...
Apache HTTP Server mod_session response handling heap overflow
...
CODESYS Data Compromise
The vulnerability of the CODESYS V2.3 web server component of the CODESYS software suite is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...
CODESYS V2.3 Component Data Compromise
The vulnerability of the CODESYS V2.3 web server component of the CODESYS industrial automation software system arises due to an overflow in the buffer in the dynamic memory. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of...
CODESYS V2.3 Component Disclosure Information DoS
The vulnerability of the CODESYS V2.3 web server component of the CODESYS industrial automation software system exists due to the reading of data beyond the specified buffer limits. Exploiting this vulnerability can allow a malicious actor to disclose protected information and cause service...
CODESYS V2.3 Component Data Compromise
The vulnerability of the CODESYS V2.3 web server component of the CODESYS industrial automation software system arises due to an overflow in the buffer in the dynamic memory. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of...
CODESYS V2.3 Component Data Compromise
The vulnerability of the CODESYS V2.3 web server component of the CODESYS industrial automation software suite is related to security configuration errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...
CODESYS V2.3 DoS
The vulnerability of the CODESYS V2.3 web server component of the industrial automation software suite arises due to an overflow in the buffer on the stack. Exploiting this vulnerability could allow a malicious actor to cause a service failure...
CODESYS V2 web server
1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: CODESYS, GmbH Equipment: CODESYS V2 web server Vulnerabilities: Stack-based Buffer Overflow, Improper Access Control, Buffer Copy without Checking Size of Input, Improperly Implemented Security Check,...
USN-4994-1 apache2 vulnerabilities
Marc Stern discovered that the Apache modproxyhttp module incorrectly handled certain requests. A remote attacker could possibly use this issue to cause Apache to crash, resulting in a denial of service. This issue only affected Ubuntu 20.04 LTS, Ubuntu 20.10, and Ubuntu 21.04. CVE-2020-13950...
SUSE SLED12 / SLES12 Security Update : gupnp (SUSE-SU-2021:2080-1)
The remote SUSE Linux SLED12 / SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:2080-1 advisory. - CVE-2021-33516: Fixed a DNS rebinding, which could trick the browser into triggering actions against local UPnP services bsc1186590. Tenable...
Denial of service
An issue was discovered on MOXA Mgate MB3180 Version 2.1 Build 18113012. Attacker could send a huge amount of TCP SYN packet to make web service's resource exhausted. Then the web server is denial-of-service...