CVE-2018-19612

The /uploadfile? functionality in Westermo DR-250 Pre-5162 and DR-260 Pre-5162 routers allows remote users to upload malicious file types and execute ASP code...

EUVD-2017-15034

Malware in sbrugna...

EUVD-2005-2625

Malware in sbrugna...

EUVD-2018-11299

Malware in sbrugna...

Westermo DR-260, DR-250 and MR-260 Code Issue Vulnerabilities

Westermo DR-260 and others are products of the Swedish company Westermo.Westermo DR-260 is a DSL router.Westermo DR-250 is a DSL router.Westermo MR-260 is a 3G multimedia router.Westermo MR-260 is a 3G multimedia router.Westermo MR-260 is a 3G multimedia router.Westermo MR-260 is a 3G multimedia...

CVE-2018-19612: Unrestricted Upload of File with Dangerous Type

The /uploadfile? functionality in Westermo DR-250 Pre-5162 and DR-260 Pre-5162 routers allows remote users to upload malicious file types and execute ASP code...

PT-2017-16793

Name of the Vulnerable Software and Affected Versions Sitecore CRM version 8.1 Rev 151207 Description The issue allows remote authenticated administrators to execute arbitrary ASP code. This can be achieved by creating a ZIP archive with a .asp file that has a .. in its pathname. The archive is...

CVE-2017-5965: Undefined Security Weakness

The package manager in Sitecore CRM 8.1 Rev 151207 allows remote authenticated administrators to execute arbitrary ASP code by creating a ZIP archive in which a .asp file has a ..\ in its pathname, visiting sitecore/shell/applications/install/dialogs/Upload%20Package/UploadPackage2.aspx to upload...

Douran Portal 3.9.7.55 - Arbitrary File Upload Cross-Site Scripting

Douran Portal 3.9.7.55 - Arbitrary File Upload Cross-Site Scripting source: https://www.securityfocus.com/bid/44594/info Douran Portal is prone to an arbitrary-file-upload vulnerability and a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied...

CVE-2005-2624: Undefined Security Weakness

Eval injection vulnerability in CPAINT 1.3-SP allows remote attackers to execute arbitrary ASP code via the cpaintargument parameter to 1 calculator.asp or 2 cpaintfile.asp, which is directly fed into an eval statement...