PHP 7.0.x < 7.0.31 Use After Free Arbitrary Code Execution in EXIF

According to its banner, the version of PHP running on the remote web server is 7.0.x prior to 7.0.31. It is, therefore, affected by a Use-After-Free Arbitrary Code Execution Vulnerability. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc';...

PHP 7.2.x < 7.2.8 Use After Free Arbitrary Code Execution in EXIF

According to its banner, the version of PHP running on the remote web server is 7.2.x prior to 7.2.8. It is, therefore, affected by a Use-After-Free Arbitrary Code Execution Vulnerability. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; ...

Command injection

OS command injection in the guest Wi-Fi settings feature in /cgi-bin/luci on Xiaomi R3P before 2.14.5, R3C before 2.12.15, R3 before 2.22.15, and R3D before 2.26.4 devices allows an attacker to execute any command via crafted JSON data...

PT-2018-12276

Name of the Vulnerable Software and Affected Versions Xiaomi R3P versions prior to 2.14.5 Xiaomi R3C versions prior to 2.12.15 Xiaomi R3 versions prior to 2.22.15 Xiaomi R3D versions prior to 2.26.4 Description The issue concerns an OS command injection in the guest Wi-Fi settings feature,...

PT-2018-12314

Name of the Vulnerable Software and Affected Versions Xiaomi R3D versions prior to 2.26.4 Description The issue concerns an OS command injection in the AP mode settings feature. This is specifically related to the /cgi-bin/luci/api/misystem/set router wifiap endpoint, where an attacker can execut...

CVE-2018-14060: Improper Neutralization of Special Elements used in an OS Command

OS command injection in the AP mode settings feature in /cgi-bin/luci /api/misystem/setrouterwifiap on Xiaomi R3D before 2.26.4 devices allows an attacker to execute any command via crafted JSON data...

Docker Server Version Scanner

This module attempts to identify the version of a Docker Server running on a host. If you wish to see all the information available, set VERBOSE to true. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class...

bvsodon.org.uy XSS vulnerability

Open Bug Bounty ID: OBB-644284 Description| Value ---|--- Affected Website:| bvsodon.org.uy Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

yan-hd.net XSS vulnerability

Open Bug Bounty ID: OBB-642858 Description| Value ---|--- Affected Website:| yan-hd.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

yamaneko.org XSS vulnerability

Open Bug Bounty ID: OBB-642850 Description| Value ---|--- Affected Website:| yamaneko.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

centralpoint.com.au XSS vulnerability

Open Bug Bounty ID: OBB-642191 Description| Value ---|--- Affected Website:| centralpoint.com.au Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Ubuntu: Security Advisory (USN-3702-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

karuna.co.jp XSS vulnerability

Open Bug Bounty ID: OBB-640152 Description| Value ---|--- Affected Website:| karuna.co.jp Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

us.illinois.net XSS vulnerability

Open Bug Bounty ID: OBB-639944 Description| Value ---|--- Affected Website:| us.illinois.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-7780

In Schneider Electric Pelco Sarix Professional 1st generation cameras with firmware versions prior to 3.29.69, a buffer overflow vulnerability exist in cgi program "set"...

Geutebruck 5.02024 G-Cam/EFD-2250 - simple_loglistjs.cgi Remote Command Execution Exploit

This Metasploit module exploits a an arbitrary command execution vulnerability. The vulnerability exists in the /uapi-cgi/viewer/simpleloglistjs.cgi page and allows an anonymous user to execute arbitrary commands with root privileges. Firmware 'Geutebruck simpleloglistjs.cgi Remote Command...

ECESSA ShieldLink SL175EHQ Cross-Site Request Forgery Vulnerability

ECESSA ShieldLink SL175EHQ is a WAN link controller from ECESSA, which includes ISP/WAN link aggregation, load balancing and traffic monitoring. A cross-site request forgery vulnerability exists in ECESSA ShieldLink SL175EHQ version 10.7.4. A remote attacker can exploit this vulnerability to add ...

PT-2018-18276

Name of the Vulnerable Software and Affected Versions: Schneider Electric Pelco Sarix Professional 1st generation cameras versions prior to 3.29.69 Description: A buffer overflow issue exists in the cgi program "set" of the affected cameras. Recommendations: For versions prior to 3.29.69, update ...

CVE-2018-7780: Improper Restriction of Operations within the Bounds of a Memory Buffer

In Schneider Electric Pelco Sarix Professional 1st generation cameras with firmware versions prior to 3.29.69, a buffer overflow vulnerability exist in cgi program "set"...

CVE-2018-1243

Dell EMC iDRAC6, versions prior to 2.91, iDRAC7/iDRAC8, versions prior to 2.60.60.60 and iDRAC9, versions prior to 3.21.21.21, contain a weak CGI session ID vulnerability. The sessions invoked via CGI binaries use 96-bit numeric-only session ID values, which makes it easier for remote attackers t...