VulnCheck KEV: CVE-2009-5156

An issue was discovered on ASMAX AR-804gu 66.34.1 devices. There is Command Injection via the cgi-bin/script query string...

Telus Actiontec WEB6000Q Denial Of Service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Device Details Discovered By: Andrew Klaus [email protected] Vendor: Actiontec Telus Branded Model: WEB6000Q Affected Firmware: 1.1.02.22 Reported: July 2018 CVE: Not needed since update is pushed by the provider. Summary of Findings By querying CGI...

Cesanta Mongoose Embedded Web Server Library Resource Management Error Vulnerability (CNVD-2019-22655)

Cesanta Mongoose Embedded Web Server Library is a cross-platform embedded server and web library written in C. It is designed to be used with a wide range of applications, including... A resource management error vulnerability exists in the 'mgcgievhandler' function of the mongoose.c file in...

Command injection

An issue was discovered on ASMAX AR-804gu 66.34.1 devices. There is Command Injection via the cgi-bin/script query string...

CVE-2009-5156

An issue was discovered on ASMAX AR-804gu 66.34.1 devices. There is Command Injection via the cgi-bin/script query string...

CVE-2009-5156

A Command Injection vulnerability exists in ASMAX AR-804gu routers, specifically affecting version 66.34.1 . The flaw is triggered via the cgi-bin/script query string. A remote attacker can exploit this by sending a specially crafted request to the victim device, potentially allowing the executio...

CVE-2009-5156

An issue was discovered on ASMAX AR-804gu 66.34.1 devices. There is Command Injection via the cgi-bin/script query string...

CVE-2009-5156: Improper Neutralization of Special Elements used in a Command

An issue was discovered on ASMAX AR-804gu 66.34.1 devices. There is Command Injection via the cgi-bin/script query string...

PT-2019-6522

Name of the Vulnerable Software and Affected Versions ASMAX AR-804gu version 66.34.1 Description An issue was discovered in the ASMAX AR-804gu device, where there is a Command Injection vulnerability via the "cgi-bin/script" query string. Recommendations For ASMAX AR-804gu version 66.34.1, as a...

PT-2019-10053

Name of the Vulnerable Software and Affected Versions: Cesanta Mongoose Embedded Web Server Library versions 6.13 and earlier Description: The issue is related to a use-after-free vulnerability in the mg cgi ev handler function, which can lead to a denial of service application crash or potential...

PT-2019-10057

Name of the Vulnerable Software and Affected Versions: Cesanta Mongoose Embedded Web Server Library versions 6.13 and earlier Description: The issue is caused by a use-after-free vulnerability in the mg http free proto data cgi function call in mongoose.c, allowing for an invalid read of 8 bytes...

PT-2019-10056

Name of the Vulnerable Software and Affected Versions: Cesanta Mongoose Embedded Web Server Library versions 6.13 and earlier Description: The issue is caused by a use-after-free vulnerability in the mg http free proto data cgi function call in mongoose.c, which can lead to an invalid write of 8...

CVE-2019-12771

Command injection is possible in ThinStation through 6.1.1 via shell metacharacters after the cgi-bin/CdControl.cgi action= substring, or after the cgi-bin/VolControl.cgi OK= substring...

PT-2019-12934

Name of the Vulnerable Software and Affected Versions ThinStation versions prior to 6.1.2 Description Command injection is possible through shell metacharacters after the "cgi-bin/CdControl.cgi" action= substring, or after the "cgi-bin/VolControl.cgi" OK= substring. Recommendations For versions...

CVE-2019-12771: Improper Neutralization of Special Elements used in an OS Command

Command injection is possible in ThinStation through 6.1.1 via shell metacharacters after the cgi-bin/CdControl.cgi action= substring, or after the cgi-bin/VolControl.cgi OK= substring...

Design/Logic Flaw

On SOYAL AR-727H and AR-829Ev5 devices, all CGI programs allow unauthenticated POST access...

CVE-2019-6451

On SOYAL AR-727H and AR-829Ev5 devices, all CGI programs allow unauthenticated POST access...

CVE-2019-6451

On SOYAL AR-727H and AR-829Ev5 devices, all CGI programs allow unauthenticated POST access...

CVE-2019-6451

The CVE-2019-6451 entry affects SOYAL AR-727H and AR-829Ev5 devices, where all CGI programs allow unauthenticated POST access. Connected PT-2019-18095 notes affected models and states there is no information yet about a fix in newer versions. Documented risk indicates network-based access with no...

PT-2019-18095 · Soyal · Soyal Ar-829Ev5 +1

Name of the Vulnerable Software and Affected Versions: SOYAL AR-727H affected versions not specified SOYAL AR-829Ev5 affected versions not specified Description: The issue allows unauthenticated POST access to all CGI programs. Recommendations: For SOYAL AR-727H, at the moment, there is no...