Peplink Login Panel - Detect

peplink login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """peplink login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Peplink Login Panel - Detect', 'description': 'peplink...

Catalog Traversal Vulnerability in Multiple Peplink Balance Products

Peplink Balance 305 and others are multi-exit load balancing routers for medium-sized businesses. A directory traversal vulnerability exists in several Peplink Balance products using firmware versions prior to fw-b305hw2380hw6580hw2710hw31350hw22500-7.0.1-build2093. An attacker can exploit this...

CVE-2017-8835: Improper Neutralization of Special Elements used in an SQL Command

SQL injection exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2380hw6580hw2710hw31350hw22500-7.0.1-build2093. An attack vector is the bauth cookie to cgi-bin/MANGA/admin.cgi. One impact is enumeration of user accounts by observing whether a sessi...

PT-2017-18565

Name of the Vulnerable Software and Affected Versions Peplink Balance versions prior to 7.0.1-build2093 Description The issue allows for SQL injection, which can be exploited through the bauth cookie in the /cgi-bin/MANGA/admin.cgi API endpoint. This can lead to the enumeration of user accounts b...

PT-2017-18571

Name of the Vulnerable Software and Affected Versions Peplink Balance devices 305, 380, 580, 710, 1350, and 2500 with firmware before 7.0.1-build2093 Description The issue is related to arbitrary file deletion. It is caused by an absolute path traversal in the "cgi-bin/MANGA/firmware process.cgi"...