12554 matches found
PT-2021-13841 · Privoxy +3 · Privoxy +3
Name of the Vulnerable Software and Affected Versions: Privoxy versions prior to 3.0.29 Description: A memory leak in the show-status CGI handler can occur when no filter files are configured, potentially leading to a system crash. This issue affects Privoxy and can be exploited by attackers to...
Cisco UCS Manager 2.2(1d) Remote Command Execution
import sys, ssl, os, time import requests from requests.packages.urllib3.exceptions import InsecureRequestWarning requests.packages.urllib3.disablewarningsInsecureRequestWarning Exploit Title : Cisco UCS Manager - 2.21d - Remote Command Execution Description : An unspecified CGI script in Cisco...
Cisco UCS Manager 2.2(1d) - Remote Command Execution
Exploit Title: Cisco UCS Manager 2.21d - Remote Command Execution Description: An unspecified CGI script in Cisco FX-OS before 1.1.2 on Firepower 9000 devices and Cisco Unified Computing System UCS Manager before 2.24b, 2.25 before 2.25a, and 3.0 before 3.02e allows remote attackers to execute...
Webmin < 1.970 RCE Vulnerability
miniserv.pl in Webmin on Windows mishandles special characters in query arguments to the CGI program. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
[SECURITY] Fedora 33 Update: php-7.4.14-1.fc33
PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...
D-Link DSL-2640B do_cgi() Buffer Overflow
The vulnerability of the docgi function in D-Link DSL-2640B router software arises due to an overflow in the stack buffer. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
Fedora: Security Advisory for awstats (FEDORA-2020-d1aa0e030c)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 33 Update: awstats-7.8-2.fc33
Advanced Web Statistics is a powerful and full-featured tool that generates advanced web server graphical statistics. This server log analyzer works from the command line or as a CGI and shows all information your log contai ns, in graphical web pages. It can analyze a lot of web/wap/proxy server...
PT-2021-27318
Name of the Vulnerable Software and Affected Versions: privoxy versions prior to 3.0.29 Description: The issue is related to memory leaks in the privoxy software. Specifically, memory leaks occur when a response is buffered and the buffer limit is reached or privoxy is running out of memory...
PT-2021-27317
Name of the Vulnerable Software and Affected Versions: privoxy versions prior to 3.0.29 Description: The issue is related to memory leaks in the privoxy software. Specifically, memory leaks occur when a response is buffered and the buffer limit is reached or privoxy is running out of memory...
PT-2021-27316
Name of the Vulnerable Software and Affected Versions: privoxy versions prior to 3.0.29 Description: The issue is related to memory leaks in the privoxy software. Specifically, memory leaks occur when a response is buffered and the buffer limit is reached or privoxy is running out of memory...
CVE-2020-35391: Direct Request
Tenda N300 F3 12.01.01.48 devices allow remote attackers to obtain sensitive information possibly including an httppasswd line via a direct request for cgi-bin/DownloadCfg/RouterCfm.cfg, a related issue to CVE-2017-14942. NOTE: the vulnerability report may suggest that either a ? character must b...
CVE-2020-35743
HGiga MailSherlock contains a SQL injection flaw. Attackers can inject and launch SQL commands in a URL parameter of specific cgi pages...
Sql injection
HGiga MailSherlock contains a SQL injection flaw. Attackers can inject and launch SQL commands in a URL parameter of specific cgi pages...
CVE-2020-35743 HGiga MailSherlock - SQL Injection -3
HGiga MailSherlock contains a SQL injection flaw. Attackers can inject and launch SQL commands in a URL parameter of specific cgi pages...
PT-2020-17413
Name of the Vulnerable Software and Affected Versions HGiga MailSherlock affected versions not specified Description The issue is related to a SQL injection flaw. Attackers can inject and launch SQL commands in a URL parameter of specific cgi pages. Recommendations At the moment, there is no...
CVE-2020-35743: Improper Neutralization of Special Elements used in an SQL Command
HGiga MailSherlock contains a SQL injection flaw. Attackers can inject and launch SQL commands in a URL parameter of specific cgi pages...
CVE-2020-35769
miniserv.pl in Webmin 1.962 on Windows mishandles special characters in query arguments to the CGI program...