CVE-2018-17208: Improper Neutralization of Special Elements used in an OS Command

Linksys Velop 1.1.2.187020 devices allow unauthenticated command injection, providing an attacker with full root access, via cgi-bin/zbtest.cgi or cgi-bin/zbtest2.cgi scripts that can be discovered with binwalk on the firmware, but are not visible in the web interface. This occurs because shell...

PT-2018-13949

Name of the Vulnerable Software and Affected Versions Linksys Velop version 1.1.2.187020 Description The issue allows unauthenticated command injection, providing an attacker with full root access. This can be achieved via the "cgi-bin/zbtest.cgi" or "cgi-bin/zbtest2.cgi" API endpoints. The...

CVE-2018-16591: Missing Authorization

FURUNO FELCOM 250 and 500 devices allow unauthenticated users to change the password for the Admin, Log and Service accounts, as well as the password for the protected "SMS" panel via /cgi-bin/smchangepassword.cgi and /cgi-bin/smsmschangepasswd.cgi...

PT-2018-13634

Name of the Vulnerable Software and Affected Versions FURUNO FELCOM versions 250 and 500 Description The issue allows unauthenticated users to change passwords for critical accounts, including Admin, Log, and Service, as well as the protected "SMS" panel. This is achieved through access to specif...

9tox.de XSS vulnerability

Open Bug Bounty ID: OBB-674695 Description| Value ---|--- Affected Website:| 9tox.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-1000669

KOHA Library System version 16.11.x up until 16.11.13 and 17.05.x up until 17.05.05 contains a Cross Site Request Forgery CSRF vulnerability in /cgi-bin/koha/members/paycollect.pl Parameters affected: borrowernumber, amount, amountoutstanding, paid that can result in Attackers can mark payments a...

PT-2018-9521

Name of the Vulnerable Software and Affected Versions KOHA Library System versions 16.11.x through 16.11.13 KOHA Library System versions 17.05.x through 17.05.05 Description The issue allows attackers to mark payments as paid for certain users on behalf of administrators due to a Cross Site Reque...

CVE-2017-12573: Undefined Security Weakness

An issue was discovered on PLANEX CS-W50HD devices with firmware before 030720. The device has a command-injection vulnerability in the web management UI on NAS settings page "/cgi-bin/nasset.cgi". An attacker can send a crafted HTTP POST request to execute arbitrary code. Authentication is...

PT-2018-5427

Name of the Vulnerable Software and Affected Versions: PLANEX CS-W50HD devices with firmware before 030720 Description: A command-injection issue exists in the web management UI on the NAS settings page "/cgi-bin/nasset.cgi". An attacker can send a crafted HTTP POST request to execute arbitrary...

CVE-2018-14429

man-cgi before 1.16 allows Local File Inclusion via absolute path traversal, as demonstrated by a cgi-bin/man-cgi?/etc/passwd URI...

CVE-2018-14429: Improper Limitation of a Pathname to a Restricted Directory

man-cgi before 1.16 allows Local File Inclusion via absolute path traversal, as demonstrated by a cgi-bin/man-cgi?/etc/passwd URI...

Command injection

OS command injection in the guest Wi-Fi settings feature in /cgi-bin/luci on Xiaomi R3P before 2.14.5, R3C before 2.12.15, R3 before 2.22.15, and R3D before 2.26.4 devices allows an attacker to execute any command via crafted JSON data...

PT-2018-12314

Name of the Vulnerable Software and Affected Versions Xiaomi R3D versions prior to 2.26.4 Description The issue concerns an OS command injection in the AP mode settings feature. This is specifically related to the /cgi-bin/luci/api/misystem/set router wifiap endpoint, where an attacker can execut...

CVE-2018-14060: Improper Neutralization of Special Elements used in an OS Command

OS command injection in the AP mode settings feature in /cgi-bin/luci /api/misystem/setrouterwifiap on Xiaomi R3D before 2.26.4 devices allows an attacker to execute any command via crafted JSON data...

PT-2018-12276

Name of the Vulnerable Software and Affected Versions Xiaomi R3P versions prior to 2.14.5 Xiaomi R3C versions prior to 2.12.15 Xiaomi R3 versions prior to 2.22.15 Xiaomi R3D versions prior to 2.26.4 Description The issue concerns an OS command injection in the guest Wi-Fi settings feature,...

ECESSA ShieldLink SL175EHQ Cross-Site Request Forgery Vulnerability

ECESSA ShieldLink SL175EHQ is a WAN link controller from ECESSA, which includes ISP/WAN link aggregation, load balancing and traffic monitoring. A cross-site request forgery vulnerability exists in ECESSA ShieldLink SL175EHQ version 10.7.4. A remote attacker can exploit this vulnerability to add ...

CVE-2018-13032

ECESSA ShieldLink SL175EHQ devices running in 10.7.4 are affected by a CSRF vulnerability in the cgi-bin/pl_web.cgi/util_configlogin_act endpoint, enabling an attacker to add a superuser account. The issue is documented across multiple sources (NVD/NVDC CNVD) with explicit version 10.7.4 and the ...

CVE-2018-13032: Cross-Site Request Forgery (CSRF)

ECESSA ShieldLink SL175EHQ 10.7.4 devices have CSRF to add superuser accounts via the cgi-bin/plweb.cgi/utilconfigloginact URI...

PT-2018-11549

Name of the Vulnerable Software and Affected Versions ECESA ShieldLink SL175EHQ version 10.7.4 Description The issue allows for the addition of superuser accounts via the "cgi-bin/pl web.cgi/util configlogin act" API endpoint, due to a CSRF concern. Recommendations For version 10.7.4, update to a...

CVE-2018-11560: Out-of-bounds Write

The webService binary on Insteon HD IP Camera White 2864-222 devices has a stack-based Buffer Overflow leading to Control-Flow Hijacking via a crafted usr key, as demonstrated by a long remoteIp parameter to cgi-bin/CGIProxy.fcgi on port 34100...