CVE-2017-7461

Directory traversal vulnerability in the web-based management site on the Intellinet NFC-30ir IP Camera with firmware LM.1.6.16.05 allows remote attackers to read arbitrary files via a request to a vendor-supplied CGI script that is used to read HTML text file, but that does not do any URI/path...

CVE-2017-7462

Intellinet NFC-30ir IP Camera has a vendor backdoor that can allow a remote attacker access to a vendor-supplied CGI script in the web directory...

CVE-2017-7461

Directory traversal vulnerability in the web-based management site on the Intellinet NFC-30ir IP Camera with firmware LM.1.6.16.05 allows remote attackers to read arbitrary files via a request to a vendor-supplied CGI script that is used to read HTML text file, but that does not do any URI/path...

Directory traversal

Directory traversal vulnerability in the web-based management site on the Intellinet NFC-30ir IP Camera with firmware LM.1.6.16.05 allows remote attackers to read arbitrary files via a request to a vendor-supplied CGI script that is used to read HTML text file, but that does not do any URI/path...

CVE-2017-7462

Intellinet NFC-30ir IP Camera has a vendor backdoor that can allow a remote attacker access to a vendor-supplied CGI script in the web directory...

Anybus Modbus Gateway - Authenticated Directory Traversal Vulnerability

The cgi-bin/read.cgi CGI script in the cgi-bin folder on the devices webserver is vulnerable to directly traversal by directly including any file. It typically includes files from the /home/httpd/jjs directoy but you can access files outside of the main webserver directory. There's 67 of these...

CVE-2017-7461: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the web-based management site on the Intellinet NFC-30ir IP Camera with firmware LM.1.6.16.05 allows remote attackers to read arbitrary files via a request to a vendor-supplied CGI script that is used to read HTML text file, but that does not do any URI/path...

CVE-2017-7462: Improper Limitation of a Pathname to a Restricted Directory

Intellinet NFC-30ir IP Camera has a vendor backdoor that can allow a remote attacker access to a vendor-supplied CGI script in the web directory...

PT-2017-17754

Name of the Vulnerable Software and Affected Versions Intellinet NFC-30ir IP Camera affected versions not specified Description The issue concerns a vendor backdoor that allows a remote attacker to access a vendor-supplied CGI script in the web directory. Recommendations At the moment, there is n...

IDS VSE IP Camera - Authenticated Remote Code Execution Vulnerability

The ctrl.cgi script on the device's webserver that runs as root is vulnerable to remote command execution by an authenticated user, with the default password being "admin:admin". The sntpip GET parameter is fed to the command line by the CGI script without sanitization for semicolons, allowing an...

Linksys Wireless-G PTZ Access Sensitive Files Vulnerability

Exploit for hardware platform in category web applications Also sold by Cisco, this device, which can be found on ZoomEye here: https://www.zoomeye.org/search?q=Basic%20realm%3D%22Authorization%22%20Boa/0.94.13%20port%3A80&p=4&t=host has a vulnerability in which you can read some sensitive files ...

CVE-2016-6534

Opmantek NMIS before 4.3.7c has command injection via man, finger, ping, trace, and nslookup in the tools.pl CGI script. Versions before 8.5.12G might be affected in non-default configurations...

CVE-2016-5065

Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 allow EmbeddedAceSetTask.cgi command injection...

Command injection

Opmantek NMIS before 4.3.7c has command injection via man, finger, ping, trace, and nslookup in the tools.pl CGI script. Versions before 8.5.12G might be affected in non-default configurations...

CVE-2016-6534

Opmantek NMIS before 4.3.7c has command injection via man, finger, ping, trace, and nslookup in the tools.pl CGI script. Versions before 8.5.12G might be affected in non-default configurations...

CVE-2016-6534

CVE-2016-6534 affects Opmantek NMIS prior to 4.3.7c (and potential exposure in non-default configurations for versions earlier than 8.5.12G). The vulnerability is a command injection via the tools.pl CGI script, exploitable through the following utilities: man, finger, ping, trace, and nslookup. ...

PT-2017-8990

Name of the Vulnerable Software and Affected Versions Opmantek NMIS versions prior to 4.3.7c Opmantek NMIS versions prior to 8.5.12G in non-default configurations Description The issue concerns command injection via certain commands in the tools.pl CGI script. The affected commands include man,...

Httpoxy Vulnerability Through CGI Servlet

twisted is vulnerable to httpoxy. The vulnerability exists because it trusts the HTTPPROXY header, and allows the configuration of proxies by setting the environment variables HTTPPROXY and HTTPSPROXY without checking if CGI is in use...

QNAP QTS multiple RCE vulnerabilities (CVE-2017-6361, CVE-2017-6360, CVE-2017-6359)

QNAP QTS multiple RCE vulnerabilities The latest version of this advisory is available at: https://sintonen.fi/advisories/qnap-qts-multiple-rce-vulnerabilities.txt Overview -------- QNAP QTS firmware contains multiple Command Injection CWE-77 vulnerabilities that can be exploited to gain remote...

QNAP TVS-663 QTS < 4.2.4 build 20170313 - Command Injection Vulnerability

Exploit for hardware platform in category web applications QNAP QTS multiple RCE vulnerabilities ===================================== The latest version of this advisory is available at: https://sintonen.fi/advisories/qnap-qts-multiple-rce-vulnerabilities.txt Overview -------- QNAP QTS firmware...