PT-2021-5502

Name of the Vulnerable Software and Affected Versions D-Link DIR-809 versions through DIR-809Ax FW1.12WWB03 20190410 Description The issue is related to a stack buffer overflow vulnerability in the function sub 8003183C in the /fromLogin endpoint. This vulnerability can be triggered via a crafted...

Command Execution Vulnerability in D-Link DIR-846 Router

The DIR-846 is a router from D-Link. A command execution vulnerability exists in the D-Link DIR-846 router that can be exploited by an attacker to gain control of a server...

Win32 Backdoor 2019-02-ARTRADOWNLOADER SEH Buffer Overflow

Discovery / credits: malvuln - Malvuln.com c 2021 Original source: http://malvuln.com/advisory/8d42c01180be7588a2a68ad96dd0cf85.txt Contact: [email protected] Media: twitter.com/malvuln Threat: WIN32 BACKDOOR - 2019-02-ARTRADOWNLOADER Vulnerabilities: Remote SEH Buffer Overflow and Insecure...

Trojan.Win32.Bayrob.cgau Insecure Permissions / Privilege Escalation

Discovery / credits: malvuln - Malvuln.com c 2021 Original source: http://malvuln.com/advisory/099a169f81089dc493ea300ef0309f70.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Trojan.Win32.Bayrob.cgau Vulnerability: Insecure Permissions EoP SYSTEM Description: Change permissio...

nsDirIndexParser::ParseData Heap Buffer Overflow

The vulnerability of the nsDirIndexParser::ParseData method netwerk\streamconv\converters\nsDirIndexParser.cpp in browsers such as Firefox, Firefox ESR, and the email client Thunderbird is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could...

GRecon - Your Google Recon Is Now Automated

GRecon Greei-Conn is a simple python tool that automates the process of Google Based Recon AKA Google Dorking The current Version 1.0 Run 7 Search Queries 7 Micro-Plugins on the spicified Target Providing Awsome Results Current Version Run Google Search Queries to find : Subdomains Sub-Subdomains...

AZL-25952 CVE-2020-8908 affecting package guava for versions less than 25.0-7

A temp directory creation vulnerability exists in all versions of Guava, allowing an attacker with access to the machine to potentially access data in a temporary directory created by the Guava API com.google.common.io.Files.createTempDir. By default, on unix-like systems, the created directory i...

DEBIAN-CVE-2020-8908

A temp directory creation vulnerability exists in all versions of Guava, allowing an attacker with access to the machine to potentially access data in a temporary directory created by the Guava API com.google.common.io.Files.createTempDir. By default, on unix-like systems, the created directory i...

UBUNTU-CVE-2020-8908

A temp directory creation vulnerability exists in all versions of Guava, allowing an attacker with access to the machine to potentially access data in a temporary directory created by the Guava API com.google.common.io.Files.createTempDir. By default, on unix-like systems, the created directory i...

VulnCheck KEV: CVE-2020-15893

An issue was discovered on D-Link DIR-816L devices 2.x before 1.10b04Beta02. Universal Plug and Play UPnP is enabled by default on port 1900. An attacker can perform command injection by injecting a payload into the Search Target ST field of the SSDP M-SEARCH discover packet...

PT-2020-16458 · Acme +1 · Mini Httpd +1

Name of the Vulnerable Software and Affected Versions: Belkin LINKSYS WRT160NL version 1.0.04.002 US 20130619 Description: The issue is a stack-based buffer overflow due to the use of sprintf in the create dir function of mini httpd. This can lead to arbitrary code execution if successfully...

DLink DIR-615 Cross Site Request Forgery (CVE-2017-7398)

A cross site request forgery vulnerability exists in DLink DIR-615 firmware. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

olcne nginx security update

olcne 1.0.8-2 - Added nginx-image resource in module definitions to ensure nginx image upgrading 1.0.8-1 - support upgrading nginx - Adress CVE-2019-9511 - Adress CVE-2018-16845 - Adress CVE-2017-7529 - support upgrading flannel nginx 1.17.7-2 - Changed nginx home dir to /var/lib/nginx for...

olcne nginx security update

olcne 1.1.6-1 - support upgrading nginx - Adress CVE-2019-9511 - Adress CVE-2018-16845 - Adress CVE-2017-7529 - support upgrading flannel nginx 1.17.7-2 - Changed nginx home dir to /var/lib/nginx for consistency 1.17.7-1 - Added Oracle Specific Build Files for nginx - Adress CVE-2019-9511 - Adres...

CVE-2020-25786

webinc/js/info.php on D-Link DIR-816L 2.06.B09BETA and DIR-803 1.04.B02 devices allows XSS via the HTTP Referer header. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: this is typically not exploitable because of URL encoding except in Internet...

CVE-2020-25786

webinc/js/info.php on D-Link DIR-816L 2.06.B09BETA and DIR-803 1.04.B02 devices allows XSS via the HTTP Referer header. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: this is typically not exploitable because of URL encoding except in Internet...

CVE-2020-25786

CVE-2020-25786 affects D-Link DIR-816L (2.06.B09_BETA) and DIR-803 (1.04.B02). A flaw in webinc/js/info.php allows XSS via the HTTP Referer header . Public notes: affected products are no longer supported by the maintainer; exploitability is typically limited due to URL encoding (except in Intern...

CVE-2020-25786: Improper Neutralization of Input During Web Page Generation

webinc/js/info.php on D-Link DIR-816L 2.06.B09BETA and DIR-803 1.04.B02 devices allows XSS via the HTTP Referer header. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: this is typically not exploitable because of URL encoding except in Internet...

PT-2020-16206 · D Link +1 · D-Link Dir-816L +2

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816L version 2.06.B09 BETA D-Link DIR-803 version 1.04.B02 Description: The issue allows for XSS via the HTTP Referer header in the webinc/js/info.php file. This typically is not exploitable due to URL encoding, except in Internet...

PT-2020-6764

Name of the Vulnerable Software and Affected Versions D-Link DIR-823G version V1.0.2B05 Description A command injection vulnerability was discovered in the HNAP1 protocol. An attacker can execute arbitrary web scripts via shell metacharacters in the Captcha field to Login. This issue is related t...