Leader of biggest online sextortion ring ‘Nth Room’ jailed for 40 years

By Waqas Cho Ju-Bin was accused of forcing at least 74 females, including 16 minors, into Virtual Enslavement on Nth Room to produce explicit content. This is a post from HackRead.com Read the original post: Leader of biggest online sextortion ring Nth Room jailed for 40 years...

Cross site scripting

Intelbras TIP200 60.61.75.15, TIP200LITE 60.61.75.15, and TIP300 65.61.75.15 devices allow /cgi-bin/cgiServer.exx?page= XSS...

Directory traversal

Intelbras TIP 200 60.61.75.15, TIP 200 LITE 60.61.75.15, and TIP 300 65.61.75.22 devices allow cgi-bin/cgiServer.exx?page=../ Directory Traversal...

PT-2020-13751 · Intelbras · Intelbras Tip 200 Lite +2

Name of the Vulnerable Software and Affected Versions: Intelbras TIP 200 version 60.61.75.15 Intelbras TIP 200 LITE version 60.61.75.15 Intelbras TIP 300 version 65.61.75.22 Description: The issue allows Directory Traversal via the "cgi-bin/cgiServer.exx" endpoint with the page parameter set to...

CVE-2020-13886: Improper Limitation of a Pathname to a Restricted Directory

Intelbras TIP 200 60.61.75.15, TIP 200 LITE 60.61.75.15, and TIP 300 65.61.75.22 devices allow cgi-bin/cgiServer.exx?page=../ Directory Traversal...

ZeroShell 3.9.0 - 'cgi-bin/kerbynet' Remote Root Command Injection (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Zeroshell 3.9.0 Remote Command Execution', 'Description' = %q This module exploits an unauthenticated command injection vulnerability found in...

PT-2020-22071

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow WRITE 1 crash type. The crash state involves functions such as fp to unsigned bin at pos, fp to unsigned bin...

PT-2020-5928

Name of the Vulnerable Software and Affected Versions: QNAP QTS affected versions not specified Description: The issue is related to insufficient protection of service data in the QNAP QTS web server for network storage devices. It allows a remote attacker to execute arbitrary code using CGI file...

CVE-2020-12126

Multiple authentication bypass vulnerabilities in the /cgi-bin/ endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 allow an attacker to leak router settings, change configuration variables, and cause denial of service via an unauthenticated endpoint...

CVE-2020-12123

CSRF vulnerabilities in the /cgi-bin/ directory of the WAVLINK WN530H4 M30H4.V5030.190403 allow an attacker to remotely access router endpoints, because these endpoints do not contain CSRF tokens. If a user is authenticated in the router portal, then this attack will work...

Authentication flaw

Multiple authentication bypass vulnerabilities in the /cgi-bin/ endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 allow an attacker to leak router settings, change configuration variables, and cause denial of service via an unauthenticated endpoint...

PT-2020-13050

Name of the Vulnerable Software and Affected Versions WAVLINK WN530H4 M30H4.V5030.190403 Description A remote command-line injection issue exists in the "/cgi-bin/live api.cgi" API endpoint, allowing an attacker to execute arbitrary Linux commands as root without authentication. Recommendations F...

PT-2020-13049

Name of the Vulnerable Software and Affected Versions WAVLINK WN530H4 M30H4.V5030.190403 Description The issue allows an attacker to remotely access router endpoints due to the lack of CSRF tokens in the /cgi-bin/ directory. This can be exploited if a user is authenticated in the router portal...

PT-2020-13051

Name of the Vulnerable Software and Affected Versions WAVLINK WN530H4 M30H4.V5030.190403 Description A remote buffer overflow issue exists in the "/cgi-bin/makeRequest.cgi" API endpoint, allowing an attacker to execute arbitrary machine instructions as root without authentication. Recommendations...

PT-2020-13052

Name of the Vulnerable Software and Affected Versions WAVLINK WN530H4 M30H4.V5030.190403 Description The issue concerns multiple authentication bypass vulnerabilities. An attacker can exploit the /cgi-bin/ endpoint to leak router settings, change configuration variables, and cause denial of...

CVE-2020-12125: Buffer Copy without Checking Size of Input

A remote buffer overflow vulnerability in the /cgi-bin/makeRequest.cgi endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 allows an attacker to execute arbitrary machine instructions as root without authentication...

CVE-2020-12123: Cross-Site Request Forgery (CSRF)

CSRF vulnerabilities in the /cgi-bin/ directory of the WAVLINK WN530H4 M30H4.V5030.190403 allow an attacker to remotely access router endpoints, because these endpoints do not contain CSRF tokens. If a user is authenticated in the router portal, then this attack will work...

CVE-2020-12126: Improper Authentication

Multiple authentication bypass vulnerabilities in the /cgi-bin/ endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 allow an attacker to leak router settings, change configuration variables, and cause denial of service via an unauthenticated endpoint...

CVE-2020-12124: Improper Neutralization of Special Elements used in an OS Command

A remote command-line injection vulnerability in the /cgi-bin/liveapi.cgi endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 allows an attacker to execute arbitrary Linux commands as root without authentication...

PT-2020-13053

Name of the Vulnerable Software and Affected Versions WAVLINK WN530H4 M30H4.V5030.190403 Description The issue allows an attacker to leak router settings, including cleartext login details, DNS settings, and other sensitive information without authentication through the "API Endpoint:...