CVE-2018-17786: Improper Authentication

On D-Link DIR-823G devices, ExportSettings.sh, uploadsettings.cgi, GetDownLoadSyslog.sh, and uploadfirmware.cgi do not require authentication, which allows remote attackers to execute arbitrary code...

CVE-2018-17787: Improper Neutralization of Special Elements used in an OS Command

On D-Link DIR-823G devices, the GoAhead configuration allows /HNAP1 Command Injection via shell metacharacters in the POST data, because this data is sent directly to the "system" library function...

D-Link DIR-823G has an override access vulnerability

The D-Link DIR-823G is a wireless router. The D-Link DIR-823G suffers from an override access vulnerability. The vulnerability does not have permission control over paths in the cgi-bin directory, which can be exploited by an attacker to obtain information about the device, tamper with...

CVE-2018-17384

SQL Injection exists in the Swap Factory 2.2.1 component for Joomla! via the filterorderDir or filterorder parameter...

CVE-2018-17378

SQL Injection exists in the Penny Auction Factory 2.0.4 component for Joomla! via the filterorderDir or filterorder parameter...

CVE-2018-17379

SQL Injection exists in the Raffle Factory 3.5.2 component for Joomla! via the filterorderDir or filterorder parameter...

CVE-2018-17376

SQL Injection exists in the Reverse Auction Factory 4.3.8 component for Joomla! via the filterorderDir, cat, or filterletter parameter...

PT-2018-13999

Name of the Vulnerable Software and Affected Versions Joomla! Reverse Auction Factory version 4.3.8 Description A SQL Injection issue exists in the Reverse Auction Factory component for Joomla!. This issue can be exploited via the filter order Dir, cat, or filter letter parameters. Recommendation...

PT-2018-14002

Name of the Vulnerable Software and Affected Versions Raffle Factory version 3.5.2 Description A SQL Injection issue exists in the Raffle Factory component for Joomla, specifically via the filter order Dir or filter order parameters. Recommendations For version 3.5.2, consider restricting access ...

PT-2018-14007

Name of the Vulnerable Software and Affected Versions Joomla! Swap Factory version 2.2.1 Description A SQL Injection issue exists in the Swap Factory component for Joomla!, which can be exploited via the filter order Dir or filter order parameter. Recommendations For version 2.2.1, consider...

PT-2018-14001

Name of the Vulnerable Software and Affected Versions Penny Auction Factory version 2.0.4 Description A SQL Injection issue exists in the Penny Auction Factory component for Joomla. The issue is related to the filter order Dir or filter order parameters. Recommendations For Penny Auction Factory...

PT-2018-14006

Name of the Vulnerable Software and Affected Versions Joomla! Collection Factory version 4.1.9 Description A SQL Injection issue exists in the Collection Factory component for Joomla!, which can be exploited via the filter order or filter order Dir parameter. Recommendations For version 4.1.9,...

Component Responsive Portfolio 'filter_order_Dir' SQL Injection Vulnerability in Joomla!

Joomla! is the United States Open Source Matters team developed a set of open source content management system CMS. A SQL injection vulnerability exists in the Responsive Portfolio 'filterorderDir' component of Joomla! An attacker can execute SQL commands by including vulnerable parameters...

Component Dutch Auction Factory 'filter_order_Dir' SQL Injection Vulnerability in Joomla!

Joomla! is the United States Open Source Matters team developed a set of open source content management system CMS. A SQL injection vulnerability exists in the Dutch Auction Factory 'filterorderDir' component of Joomla! An attacker can insert SQL commands into the query string of a web form...

DEBIAN-CVE-2018-13982

SmartySecurity::isTrustedResourceDir in Smarty before 3.1.33 is prone to a path traversal vulnerability due to insufficient template code sanitization. This allows attackers controlling the executed template code to bypass the trusted directory security restriction and read arbitrary files...

UBUNTU-CVE-2018-13982

SmartySecurity::isTrustedResourceDir in Smarty before 3.1.33 is prone to a path traversal vulnerability due to insufficient template code sanitization. This allows attackers controlling the executed template code to bypass the trusted directory security restriction and read arbitrary files...

D-Link DIR-816 A2 Buffer Overflow Vulnerability

D-Link DIR-816 A2 is a wireless router product from AUO D-Link. A stack buffer overflow vulnerability exists in the D-Link DIR-816 A2 version 1.10 B05, which can be exploited by an attacker to overwrite the returned address with the help of a longer password...

D-Link DIR-816 A2 Buffer Overflow Vulnerability (CNVD-2018-19261)

D-Link DIR-816 A2 is a wireless router product from AUO D-Link. A stack buffer overflow vulnerability exists in the D-Link DIR-816 A2 version 1.10 B05, which can be exploited by an attacker to overwrite the returned address by sending a long password to /goform/formLogin...

EulerOS Virtualization 2.5.1 : ruby (EulerOS-SA-2018-1275)

According to the versions of the ruby packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - It was found that the tmpdir and tempfile modules did not sanitize their file name argument. An attacker with control over the name...

D-Link DIR-816 Command Injection Vulnerability (CNVD-2019-02395)

D-Link DIR-816 A2 is a wireless router product from AUO D-Link. A command injection vulnerability exists in the D-Link DIR-816 A2 version 1.10 B05, which originates when a program uses HTTP requests to construct commands, and can be exploited by an attacker to execute arbitrary code on a system b...