PT-2018-12506

Name of the Vulnerable Software and Affected Versions man-cgi versions prior to 1.16 Description The issue allows Local File Inclusion via absolute path traversal. This can be demonstrated by accessing a URI such as "cgi-bin/man-cgi?/etc/passwd". Recommendations For versions prior to 1.16, update...

CVE-2018-14429: Improper Limitation of a Pathname to a Restricted Directory

man-cgi before 1.16 allows Local File Inclusion via absolute path traversal, as demonstrated by a cgi-bin/man-cgi?/etc/passwd URI...

man-cgi Local File Inclusion Vulnerability

Exploit for linux platform in category remote exploits man-cgi before 1.16 allows Local File Inclusion via absolute path traversal. If an Attacker provides a Filename as a Parameter e.g. https://example.org/cgi-bin/man-cgi?/etc/passwd the Script will read and return the local file. This is...

a1tourism.com XSS vulnerability

Open Bug Bounty ID: OBB-660640 Description| Value ---|--- Affected Website:| a1tourism.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

archdenmort.org XSS vulnerability

Open Bug Bounty ID: OBB-658499 Description| Value ---|--- Affected Website:| archdenmort.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

curtis-britch.com XSS vulnerability

Open Bug Bounty ID: OBB-658488 Description| Value ---|--- Affected Website:| curtis-britch.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Cross site scripting

Monitorix before 3.10.1 allows XSS via CGI variables...

CVE-2018-7649

Monitorix before 3.10.1 allows XSS via CGI variables...

CVE-2018-7649

Monitorix before 3.10.1 allows XSS via CGI variables...

CVE-2018-7649

CVE-2018-7649 affects Monitorix prior to 3.10.1 and enables cross-site scripting via CGI variables. The vulnerability allows an attacker to inject arbitrary web script or HTML in the affected web interface. The public documents consistently describe the issue as an XSS in Monitorix before version...

CVE-2018-7649

Monitorix before 3.10.1 allows XSS via CGI variables...

CVE-2018-7649: Improper Neutralization of Input During Web Page Generation

Monitorix before 3.10.1 allows XSS via CGI variables...

PT-2018-18183

Name of the Vulnerable Software and Affected Versions Monitorix versions prior to 3.10.1 Description The issue allows for XSS via CGI variables, which can lead to malicious script execution. Recommendations For versions prior to 3.10.1, update to version 3.10.1 or later to resolve the issue...

arquitectura.biblio.umsa.bo XSS vulnerability

Open Bug Bounty ID: OBB-654292 Description| Value ---|--- Affected Website:| arquitectura.biblio.umsa.bo Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

PHP 5.6.x < 5.6.37 exif_thumbnail_extract() DoS

According to its banner, the version of PHP running on the remote web server is 5.6.x prior to 5.6.37. It is, therefore, affected by a denial of service vulnerability. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

VulnCheck KEV: CVE-2025-34051

A server-side request forgery vulnerability exists in multiple firmware versions of AVTECH DVR devices that exposes the /cgi-bin/nobody/Search.cgi?action=cgiquery endpoint without authentication. An attacker can manipulate the ip, port, and queryb64str parameters to make arbitrary HTTP requests...

PHP 7.0.x < 7.0.31 Use After Free Arbitrary Code Execution in EXIF

According to its banner, the version of PHP running on the remote web server is 7.0.x prior to 7.0.31. It is, therefore, affected by a Use-After-Free Arbitrary Code Execution Vulnerability. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc';...

PHP 7.2.x < 7.2.8 Use After Free Arbitrary Code Execution in EXIF

According to its banner, the version of PHP running on the remote web server is 7.2.x prior to 7.2.8. It is, therefore, affected by a Use-After-Free Arbitrary Code Execution Vulnerability. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; ...

Command injection

OS command injection in the guest Wi-Fi settings feature in /cgi-bin/luci on Xiaomi R3P before 2.14.5, R3C before 2.12.15, R3 before 2.22.15, and R3D before 2.26.4 devices allows an attacker to execute any command via crafted JSON data...

PT-2018-12276

Name of the Vulnerable Software and Affected Versions Xiaomi R3P versions prior to 2.14.5 Xiaomi R3C versions prior to 2.12.15 Xiaomi R3 versions prior to 2.22.15 Xiaomi R3D versions prior to 2.26.4 Description The issue concerns an OS command injection in the guest Wi-Fi settings feature,...