AudioCode 400HD - Command Injection

CVE-2018-10093 Remote command injection vulnerability in AudioCode IP phones Description The AudioCodes 400HD series of IP phones consists in a range of easy-to-use, feature-rich desktop devices for the service provider hosted services, enterprise IP telephony and contact center markets. The CGI...

AudioCode 400HD Remote Command Injection Vulnerability

Exploit for cgi platform in category web applications CVE-2018-10093 Remote command injection vulnerability in AudioCode IP phones Description The AudioCodes 400HD series of IP phones consists in a range of easy-to-use, feature-rich desktop devices for the service provider hosted services,...

AudioCode 400HD Remote Command Injection

CVE-2018-10093 Remote command injection vulnerability in AudioCode IP phones Description The AudioCodes 400HD series of IP phones consists in a range of easy-to-use, feature-rich desktop devices for the service provider hosted services, enterprise IP telephony and contact center markets. The CGI...

The vulnerability of the software controller for the centralized control of wireless networks by D-Link Central WiFi Manager arises from the use of pre-installed credentials. This allows a hacker to execute arbitrary PHP code.

The vulnerability of the D-Link Central WiFi Manager software control panel lies in the use of pre-installed credentials FTP services: admin, admin, which are running on port 9000. Exploiting this vulnerability allows a malicious actor to execute arbitrary PHP code by loading it into the root...

Multiple D-Link Devices Administrator Credentials Disclosure Vulnerability

D-Link DSL-2770L and others are wireless router products from AUO D-Link. A security vulnerability exists in the spaces.htm file in multiple D-Link devices. A remote attacker could exploit the vulnerability to disclose admin credentials...

D-Link DIR-140L and DIR-640L Information Disclosure Vulnerability

The D-Link DIR-140L and DIR-640L are both wireless router products from AUO D-Link. An information disclosure vulnerability exists in the dirary0.js file in the D-Link DIR-140L version 1.02 and DIR-640L version 1.01RU, which can be exploited by remote attackers to disclose admin credentials...

D-Link DSL-2770L Administrator Credentials Disclosure Vulnerability

The D-Link DSL-2770L is a wireless router from AUO D-Link. A security vulnerability exists in the atbox.htm file in the D-Link DSL-2770L ME1.01 version, ME1.02 version, and AU1.06 version. An attacker can exploit the vulnerability to disclose admin credentials...

Command injection

dirary0.js on D-Link DIR-140L, DIR-640L devices allows remote unauthenticated attackers to discover admin credentials...

CVE-2018-18007

atbox.htm on D-Link DSL-2770L devices allows remote unauthenticated attackers to discover admin credentials...

CVE-2018-18009

dirary0.js on D-Link DIR-140L, DIR-640L devices allows remote unauthenticated attackers to discover admin credentials...

Command injection

atbox.htm on D-Link DSL-2770L devices allows remote unauthenticated attackers to discover admin credentials...

CVE-2018-18009

dirary0.js on D-Link DIR-140L, DIR-640L devices allows remote unauthenticated attackers to discover admin credentials...

CVE-2018-18008

spaces.htm on multiple D-Link devices DSL, DIR, DWR allows remote unauthenticated attackers to discover admin credentials...

Command injection

spaces.htm on multiple D-Link devices DSL, DIR, DWR allows remote unauthenticated attackers to discover admin credentials...

CVE-2018-18008

spaces.htm on multiple D-Link devices DSL, DIR, DWR allows remote unauthenticated attackers to discover admin credentials...

CVE-2018-18009

The CVE-2018-18009 entry affects D-Link DIR-140L and DIR-640L routers (DIR-140L v1.02; DIR-640L v1.01RU). The vulnerability lies in dirary0.js, which allows remote unauthenticated attackers to disclose the admin password by reading the web interface file (example: http://victim_ip/dirary0.js). Im...

CVE-2018-18009

dirary0.js on D-Link DIR-140L, DIR-640L devices allows remote unauthenticated attackers to discover admin credentials...

CVE-2018-17777

An issue was discovered on D-Link DVA-5592 A1WI20180823 devices. If the PIN of the page "/ui/cbpc/login" is the default Parental Control PIN 0000, it is possible to bypass the login form by editing the path of the cookie "sid" generated by the page. The attacker will have access to the router...

CVE-2018-7065

An authenticated SQL injection vulnerability in Aruba ClearPass Policy Manager can lead to privilege escalation. All versions of ClearPass are affected by multiple authenticated SQL injection vulnerabilities. In each case, an authenticated administrative user of any type could exploit this...

PbootCMS SQL Injection Vulnerability (CNVD-2018-26780)

PbootCMS is an open source enterprise building content management system CMS developed using the PHP language. A SQL injection vulnerability exists in the SearchController.php file in PbootCMS version 1.2.1, which can be exploited by remote attackers to obtain the admin account name and password ...