33 matches found
tomcat: Open Redirect vulnerability in FORM authentication
A flaw was found in Apache Tomcat if the default web application is configured with FormAuthenticator. This issue allows a specially crafted URL to trigger a redirect to an arbitrary URL...
DEBIAN-CVE-2023-28709
The fix for CVE-2023-24998 was incomplete for Apache Tomcat 11.0.0-M2 to 11.0.0-M4, 10.1.5 to 10.1.7, 9.0.71 to 9.0.73 and 8.5.85 to 8.5.87. If non-default HTTP connector settings were used such that the maxParameterCount could be reached using query string parameters and a request was submitted...
Akuvox E11 访问控制错误漏洞
Akuvox E11 is a SIP visual doorbell from Akuvox designed for villas, houses and apartments. The Akuvox E11 suffers from an Access Control Error vulnerability that originates from accessing the Akuvox E11 web server without any user authentication, which could allow an attacker to access sensitive...
Mobile Viewpoint Wireless Multiplex Terminal Trust Management Issue Vulnerability
The Mobile Viewpoint Wireless Multiplex Terminal is a wireless multiplexing technology based device from Mobile Viewpoint in the Netherlands that increases bandwidth. The device can bundle multiple wireless networks to increase bandwidth and provide users with high quality video. A trust manageme...
Ozeki NG SMS Gateway Cross-Site Scripting Vulnerability
Ozeki NG SMS Gateway is a powerful, reliable and flexible SMS gateway application. A cross-site scripting vulnerability exists in Ozeki NG SMS Gateway 4.17.6 and earlier versions. The vulnerability can be exploited via the Receiver or Recipient field in the mailbox function, the OZFORMGROUPNAME...
CVE-2020-14024
Ozeki NG SMS Gateway through 4.17.6 has multiple authenticated stored and/or reflected XSS vulnerabilities via the 1 Receiver or Recipient field in the Mailbox feature, 2 OZFORMGROUPNAME field in the Group configuration of addresses, 3 listname field in the Defining address lists configuration, o...
FLIR AX8 Thermal Camera 1.32.16 - Hard-Coded Credentials
Exploit Title: FLIR AX8 Thermal Camera 1.32.16 - Hard-Coded Credentials Author: Gjoko 'LiquidWorm' Krstic @zeroscience Date: 2018-10-14 Vendor: FLIR Systems, Inc Product web page: https://www.flir.com Affected version: Firmware: 1.32.16, 1.17.13, OS: necov1.8-0-g7ffe5b3 Hardware: Flir Systems Nec...
CVE-2017-18024
AvantFAX 3.3.3 has XSS via an arbitrary parameter name to the default URI, as demonstrated by a parameter whose name contains a SCRIPT element and whose value is 1...
The vulnerability of the microprogramming software in the Solar-Log photovoltaic system allows a malicious individual to execute arbitrary code and cause malfunctions in the system.
The vulnerability of the Microprogramming Software in the Solar-log photovoltaic system is related to errors in the code of the default web server component used. Exploiting this vulnerability allows a malicious individual to load files by specifying an arbitrary path, including paths to system...
Symantec IM Manager Administrative Interface DetailReportGroup.lgx Definition File SQL Injection Vulnerabilities
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Symantec IM Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the rdPageImlogic.aspx page which is exposed through an IIS extension on the defau...
Microsoft IE screen[""]远程拒绝服务漏洞
BUGTRAQ ID: 33149 CVECAN ID: CVE-2009-0072 Internet Explorer是Windows操作系统中默认捆绑的WEB浏览器。 如果用户通过Internet Explorer打开网页的BODY单元中设置了onload=screen""属性值的话，就会导致浏览器崩溃。 Microsoft Internet Explorer 8 beta 2 Microsoft Internet Explorer 8 beta 1 Microsoft Internet Explorer 7.0 Microsoft Internet Explorer 6.0 厂商补...
WebLogic simple catch the chicken law-vulnerability and early warning-the black bar safety net
This article has been published in the hacker X-Files for 2 0 0 8 year 1 1 issue of the magazine on After the author published on the blog, such as reproduced please retain this information! Tomcat is estimated to many people to bring a N meaty chicken server, directly scan weak passwords, into t...
