Dasan GPON ONT WiFi Router Buffer Overflow Vulnerability

Dasan GPON ONT WiFi Router is a wireless router device from DASAN Networks, Korea. A buffer overflow vulnerability exists in the Dasan GPON ONT WiFi Router H640X version 12.02-0112, version 2.77p1-1124, and version 3.03p2-1146. A remote attacker can exploit this vulnerability by sending a long PO...

CVE-2018-6193: Improper Neutralization of Input During Web Page Generation

A Cross-Site Scripting XSS vulnerability was found in Routers2 2.24, affecting the 'rtr' GET parameter in a page=graph action to cgi-bin/routers2.pl...

PT-2018-17398

Name of the Vulnerable Software and Affected Versions Routers2 version 2.24 Description A Cross-Site Scripting XSS issue was discovered, affecting the rtr GET parameter in a "page=graph" action to the "cgi-bin/routers2.pl" endpoint. Recommendations For Routers2 version 2.24, consider restricting...

GoAhead Web Server LD_PRELOAD Arbitrary Module Load

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'GoAhead Web Server LDPRELOAD Arbitrary Module Load', 'Description' = %q This module triggers an arbitrary shared library load vulnerability in...

Fixed in Apache Tomcat 7.0.84

Low: Incorrectly documented CGI search algorithm CVE-2017-15706 Note: The issue below was fixed in Apache Tomcat 7.0.83 but the release vote for the 7.0.83 release candidate did not pass. Therefore, although users must download 7.0.84 to obtain a version that includes the fix for this issue,...

GoAhead Web Server 2.5 < 3.6.5 - HTTPd 'LD_PRELOAD' Arbitrary Module Load (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'GoAhead Web Server LDPRELOAD Arbitrary Module Load', 'Description' = %q This module triggers an arbitrary shared library load vulnerability in...

search.southern-charms.com XSS vulnerability

Open Bug Bounty ID: OBB-539876 Description| Value ---|--- Affected Website:| search.southern-charms.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

my-coat-of-arms.com XSS vulnerability

Open Bug Bounty ID: OBB-539685 Description| Value ---|--- Affected Website:| my-coat-of-arms.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

PT-2018-1172

Name of the Vulnerable Software and Affected Versions ZyXEL P-870H-51 DSL Router version 1.00AWG.3D5 Description This issue allows remote attackers to cause a denial-of-service condition on vulnerable installations. Authentication is not required to exploit this issue. The specific flaw exists...

(0Day) ZyXEL P-870H-51 DSL Router Multiple Remote Code Execution Vulnerabilities

This vulnerability allows remote attackers to cause a denial-of-service condition on vulnerable installations of ZyXEL P-870H-51 DSL Router. Authentication is not required to exploit this vulnerability. The specific flaw exists within numerous exposed CGI endpoints. The vulnerability is caused by...

szkandelous.com XSS vulnerability

Open Bug Bounty ID: OBB-537436 Description| Value ---|--- Affected Website:| szkandelous.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

briarwoodstore.com XSS vulnerability

Open Bug Bounty ID: OBB-537304 Description| Value ---|--- Affected Website:| briarwoodstore.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

plantoddities.com XSS vulnerability

Open Bug Bounty ID: OBB-537300 Description| Value ---|--- Affected Website:| plantoddities.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

desertthread.com XSS vulnerability

Open Bug Bounty ID: OBB-537295 Description| Value ---|--- Affected Website:| desertthread.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Master IP CAM 01 Vulnerabilities

Some time ago I analized this ipcam with my friend Dzonerzy: var serialNum="VVVIPCSBC150617Z-06929VjmJH54vkK"; var model="RTIPC"; var hardVersion="5900-gc1004"; var softVersion="V3.3.4.2103-S50-SBC-B20150721E"; var ipcname="WIFICAM"; var startdate="2017-8-5 0:0:2"; var runtimes="0 day, 0:54"; var...

CVE-2017-18046: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow on Dasan GPON ONT WiFi Router H640X 12.02-01121 2.77p1-1124 and 3.03p2-1146 devices allows remote attackers to execute arbitrary code via a long POST request to the loginaction function in /cgi-bin/loginaction.cgi aka cgipage.cgi...

PT-2018-6636

Name of the Vulnerable Software and Affected Versions: Dasan GPON ONT WiFi Router H640X versions 12.02-01121 2.77p1-1124 through 3.03p2-1146 Description: A buffer overflow issue allows remote attackers to execute arbitrary code via a long POST request to the "login action" function in the...

Mailman -- Cross-site scripting (XSS) vulnerability in the web UI

Mark Sapiro reports: An XSS vulnerability in the user options CGI could allow a crafted URL to execute arbitrary javascript in a user's browser. A related issue could expose information on a user's options page without requiring login...

borealis.gi XSS vulnerability

Open Bug Bounty ID: OBB-530805 Description| Value ---|--- Affected Website:| borealis.gi Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure based o...

wordsleuth.ss.uci.edu XSS vulnerability

Open Bug Bounty ID: OBB-528274 Description| Value ---|--- Affected Website:| wordsleuth.ss.uci.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...