12593 matches found
CVE-2019-6451: Missing Authentication for Critical Function
On SOYAL AR-727H and AR-829Ev5 devices, all CGI programs allow unauthenticated POST access...
CVE-2017-14854
A stack buffer overflow exists in one of the Orpak SiteOmat CGI components, allowing for remote code execution. The vulnerability affects all versions prior to 2017-09-25...
CVE-2017-14854
The CVE-2017-14854 entry describes a stack-based buffer overflow in one of Orpak SiteOmat’s CGI components that enables remote code execution. Affected products are SiteOmat software prior to version 6.4.414.122 (with impact on versions prior to 2017-09-25 per the NVD entry). The ICS-CERT advisor...
CVE-2017-14854
A stack buffer overflow exists in one of the Orpak SiteOmat CGI components, allowing for remote code execution. The vulnerability affects all versions prior to 2017-09-25...
CVE-2017-14854: Improper Restriction of Operations within the Bounds of a Memory Buffer
A stack buffer overflow exists in one of the Orpak SiteOmat CGI components, allowing for remote code execution. The vulnerability affects all versions prior to 2017-09-25...
PT-2019-8013
Name of the Vulnerable Software and Affected Versions Orpak SiteOmat versions prior to 2017-09-25 Description A stack buffer overflow exists in one of the Orpak SiteOmat CGI components, allowing for remote code execution. Recommendations For versions prior to 2017-09-25, update to a version...
PT-2024-6536
Name of the Vulnerable Software and Affected Versions: PHP versions 8.1. through 8.1.29 PHP versions 8.2. through 8.2.23 PHP versions 8.3. through 8.3.11 Description: The issue is related to errors in security settings, specifically with the cgi.force redirect configuration. In certain scenarios,...
Deltek Maconomy 2.2.5 Local File Inclusion Vulnerability
Exploit for cgi platform in category web applications Exploit Title: Maconomy Erp local file include Exploit Author: JameelNabbo Website: jameelnabbo.com Vendor Homepage: https://www.deltek.com Software Link: https://www.deltek.com/en-gb/products/project-erp/maconomy CVE: CVE-2019-12314 POC: POC:...
Deltek Maconomy 2.2.5 - Local File Inclusion
Exploit Title: Maconomy Erp local file include Date: 22/05/2019 Exploit Author: JameelNabbo Website: jameelnabbo.com Vendor Homepage: https://www.deltek.com Software Link: https://www.deltek.com/en-gb/products/project-erp/maconomy CVE: CVE-2019-12314 POC: POC:...
CVE-2019-12314
Deltek Maconomy 2.2.5 is prone to local file inclusion via absolute path traversal in the WS.macx1.WMCS/ PATHINFO, as demonstrated by a cgi-bin/Maconomy/MaconomyWS.macx1.WMCS/etc/passwd URI...
CVE-2019-12314
Deltek Maconomy 2.2.5 is prone to local file inclusion via absolute path traversal in the WS.macx1.WMCS/ PATHINFO, as demonstrated by a cgi-bin/Maconomy/MaconomyWS.macx1.WMCS/etc/passwd URI...
CVE-2019-9949
Western Digital My Cloud Cloud, Mirror Gen2, EX2 Ultra, EX2100, EX4100, DL2100, DL4100, PR2100 and PR4100 before firmware 2.31.183 are affected by a code execution as root, starting from a low-privilege user session vulnerability. The cgi-bin/webfilemgr.cgi file allows arbitrary file write by...
Command injection
Western Digital My Cloud Cloud, Mirror Gen2, EX2 Ultra, EX2100, EX4100, DL2100, DL4100, PR2100 and PR4100 before firmware 2.31.183 are affected by a code execution as root, starting from a low-privilege user session vulnerability. The cgi-bin/webfilemgr.cgi file allows arbitrary file write by...
CVE-2019-9949
Western Digital My Cloud Cloud, Mirror Gen2, EX2 Ultra, EX2100, EX4100, DL2100, DL4100, PR2100 and PR4100 before firmware 2.31.183 are affected by a code execution as root, starting from a low-privilege user session vulnerability. The cgi-bin/webfilemgr.cgi file allows arbitrary file write by...
PT-2019-19953
Name of the Vulnerable Software and Affected Versions Western Digital My Cloud Cloud, Mirror Gen2, EX2 Ultra, EX2100, EX4100, DL2100, DL4100, PR2100 and PR4100 versions prior to 2.31.183 Description The issue allows for code execution as root, starting from a low-privilege user session. This occu...
Code Execution Vulnerability in Multiple Western Digital Products
Western Digital My Cloud Mirror Gen2 is a personal cloud storage device.Western Digital My Cloud EX2 Ultra is a personal cloud storage device.Western Digital My Cloud EX2 Ultra is a personal cloud storage device.Western Digital My Cloud EX2100 is a personal cloud storage device.Western Digital My...
CVE-2019-9949: Improper Link Resolution Before File Access
Western Digital My Cloud Cloud, Mirror Gen2, EX2 Ultra, EX2100, EX4100, DL2100, DL4100, PR2100 and PR4100 before firmware 2.31.183 are affected by a code execution as root, starting from a low-privilege user session vulnerability. The cgi-bin/webfilemgr.cgi file allows arbitrary file write by...
EulerOS Virtualization 3.0.1.0 : php (EulerOS-SA-2019-1544)
According to the versions of the php packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An integer underflow flaw leading to out-of-bounds memory access was found in the way PHP's Phar extension parsed Phar archives. A...