68 matches found
GoAhead - ../.x/ Path Traversal Detection (CVE-2014-9707)
Detects CVE-2014-9707 by requesting /../../../.x/.x/.x/.x/.x/.x/etc/passwd style paths on Embedthis GoAhead. !/usr/bin/env python3 -- coding: utf-8 -- """Embedthis GoAhead ../.x/ path traversal CVE-2014-9707.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclien...
CVE-2019-16645
An issue was discovered in Embedthis GoAhead 2.5.0. Certain pages such as goform/login and config/logoffpage.htm create links containing a hostname obtained from an arbitrary HTTP Host header sent by an attacker. This could potentially be used in a phishing attack...
CVE-2019-12822
In http.c in Embedthis GoAhead before 4.1.1 and 5.x before 5.0.1, a header parsing vulnerability causes a memory assertion, out-of-bounds memory reference, and potential DoS, as demonstrated by a colon on a line by itself...
EUVD-2018-7381
Malware in sbrugna...
EUVD-2019-4403
Malware in sbrugna...
EUVD-2018-7382
Malware in sbrugna...
EUVD-2019-8866
Malware in sbrugna...
EUVD-2023-59766
Malicious code in bioql PyPI...
CVE-2023-53155
goform/formTest in EmbedThis GoAhead 2.5 allows HTML injection via the name parameter...
CVE-2023-53155
goform/formTest in EmbedThis GoAhead 2.5 allows HTML injection via the name parameter...
CVE-2023-53155: Improper Neutralization of Input During Web Page Generation
goform/formTest in EmbedThis GoAhead 2.5 allows HTML injection via the name parameter...
EmbedThis GoAhead Cross-Site Script Vulnerability
EmbedThis GoAhead is an embedded web server software from EmbedThis, Inc. A cross-site scripting vulnerability exists in EmbedThis GoAhead version 2.5, which stems from HTML injection of the name parameter...
CVE-2023-53155
goform/formTest in EmbedThis GoAhead 2.5 allows HTML injection via the name parameter...
CVE-2023-53155
CVE-2023-53155 affects EmbedThis GoAhead 2.5. The vulnerability is an HTML injection (XSS) via the name parameter in goform/formTest. Exploitation and public attestations exist (e.g., Exploit-DB); multiple mirrors/alerts reiterate the same flaw. Connected entries corroborate the issue across vend...
CVE-2023-53155
goform/formTest in EmbedThis GoAhead 2.5 allows HTML injection via the name parameter...
CVE-2017-1000471
EmbedThis GoAhead Webserver version 4.0.0 is vulnerable to a NULL pointer dereference in the CGI handler resulting in memory corruption or denial of service...
CVE-2017-1000470
EmbedThis GoAhead Webserver versions 4.0.0 and earlier is vulnerable to an integer overflow in the HTTP listener resulting in denial of service...
Embedthis GoAhead Embedded Web Server Directory Traversal
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Embedthis GoAhead Embedded Web Server Directory Traversal', 'Description' = %q This module exploits a directory traversal vulnerability in the...
