Synology Router Manager Command Injection Vulnerability

Synology Router Manager SRM is a software for configuring and managing Synology routers from Synology.EZ-Internet is one of the network configuration tools. A command injection vulnerability exists in EZ-Internet in Synology SRM versions prior to 1.1.6-6931. A remote attacker can exploit the...

Command injection

Command injection vulnerability in EZ-Internet in Synology Router Manager SRM before 1.1.6-6931 allows remote authenticated users to execute arbitrary command via the username parameter...

Command injection

Command injection vulnerability in EZ-Internet in Synology DiskStation Manager DSM before 6.2-23739 allows remote authenticated users to execute arbitrary command via the username parameter...

CVE-2017-12075

Command injection vulnerability in EZ-Internet in Synology DiskStation Manager DSM before 6.2-23739 allows remote authenticated users to execute arbitrary command via the username parameter...

CVE-2017-12078

Command injection vulnerability in EZ-Internet in Synology Router Manager SRM before 1.1.6-6931 allows remote authenticated users to execute arbitrary command via the username parameter...

CVE-2017-12075: Improper Neutralization of Special Elements used in a Command

Command injection vulnerability in EZ-Internet in Synology DiskStation Manager DSM before 6.2-23739 allows remote authenticated users to execute arbitrary command via the username parameter...

CVE-2017-12078: Improper Neutralization of Special Elements used in a Command

Command injection vulnerability in EZ-Internet in Synology Router Manager SRM before 1.1.6-6931 allows remote authenticated users to execute arbitrary command via the username parameter...

ez-tools.us XSS vulnerability

Open Bug Bounty ID: OBB-613876 Description| Value ---|--- Affected Website:| ez-tools.us Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Code injection

Brookins Consulting BC Collected Information Export extension for eZ Publish 1.1.0 does not properly restrict access, which allows remote attackers to gain access to sensitive data...

CVE-2014-2552

Brookins Consulting BC Collected Information Export extension for eZ Publish 1.1.0 does not properly restrict access, which allows remote attackers to gain access to sensitive data...

CVE-2014-2552

Brookins Consulting BC Collected Information Export extension for eZ Publish 1.1.0 does not properly restrict access, which allows remote attackers to gain access to sensitive data...

CVE-2014-2552

The CVE-2014-2552 entry concerns Brookins Consulting (BC) Collected Information Export extension for eZ Publish 1.1.0, which is described as not properly restricting access to sensitive data. The incident is exploitable remotely with network access and requires no authentication, enabling partial...

CVE-2014-2552: Undefined Security Weakness

Brookins Consulting BC Collected Information Export extension for eZ Publish 1.1.0 does not properly restrict access, which allows remote attackers to gain access to sensitive data...

ez-pasta.com XSS vulnerability

Open Bug Bounty ID: OBB-581840 Description| Value ---|--- Affected Website:| ez-pasta.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ez-robot.com XSS vulnerability

Open Bug Bounty ID: OBB-569330 Description| Value ---|--- Affected Website:| ez-robot.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

eZ Publish search module cross-site scripting vulnerability

eZ Publish is a Norwegian eZ Systems open source PHP content management system and development framework CMS/CMF. The system provides freely customizable and extensible content model for news distribution , e-commerce B2B and B2C, portals and community sites . search module is one of the search...

Design/Logic Flaw

eZ Systems eZ Publish version 5.4.0 to 5.4.9, and 5.3.12 and older, is vulnerable to an XSS issue in the search module, resulting in a risk of attackers injecting scripts which may e.g. steal authentication credentials...

CVE-2017-1000431

eZ Systems eZ Publish version 5.4.0 to 5.4.9, and 5.3.12 and older, is vulnerable to an XSS issue in the search module, resulting in a risk of attackers injecting scripts which may e.g. steal authentication credentials...

CVE-2017-1000431

eZ Systems eZ Publish version 5.4.0 to 5.4.9, and 5.3.12 and older, is vulnerable to an XSS issue in the search module, resulting in a risk of attackers injecting scripts which may e.g. steal authentication credentials...

CVE-2017-1000431

eZ Systems eZ Publish version 5.4.0 to 5.4.9, and 5.3.12 and older, is vulnerable to an XSS issue in the search module, resulting in a risk of attackers injecting scripts which may e.g. steal authentication credentials...