CVE-2016-1258: Improper Input Validation

Embedthis Appweb, as used in J-Web in Juniper Junos OS before 12.1X44-D60, 12.1X46 before 12.1X46-D45, 12.1X47 before 12.1X47-D30, 12.3 before 12.3R10, 12.3X48 before 12.3X48-D20, 13.2X51 before 13.2X51-D20, 13.3 before 13.3R8, 14.1 before 14.1R6, and 14.2 before 14.2R5, allows remote attackers t...

PT-2016-4675

Name of the Vulnerable Software and Affected Versions Embedthis Appweb versions prior to 12.1X44-D60 Embedthis Appweb versions 12.1X46 prior to 12.1X46-D45 Embedthis Appweb versions 12.1X47 prior to 12.1X47-D30 Embedthis Appweb versions 12.3 prior to 12.3R10 Embedthis Appweb versions 12.3X48 prio...

Embedthis GoAhead Embedded Web Server Directory Traversal

This module exploits a directory traversal vulnerability in the Embedthis GoAhead Web Server v3.4.1, allowing an attacker to read arbitrary files with the web server privileges. This module requires Metasploit: https://metasploit.com/download Current source:...

CVE-2014-9707

EmbedThis GoAhead 3.0.0 through 3.4.1 does not properly handle path segments starting with a . dot, which allows remote attackers to conduct directory traversal attacks, cause a denial of service heap-based buffer overflow and crash, or possibly execute arbitrary code via a crafted URI...

CVE-2014-9707

CVE-2014-9707 affects EmbedThis GoAhead Web Server 3.0.0–3.4.1. The vulnerability is in websNormalizeUriPath, which mishandles URI segments starting with a dot, enabling remote attackers to perform directory traversal and trigger a heap-based buffer overflow, potentially leading to crash or arbit...

CVE-2014-9707

EmbedThis GoAhead 3.0.0 through 3.4.1 does not properly handle path segments starting with a . dot, which allows remote attackers to conduct directory traversal attacks, cause a denial of service heap-based buffer overflow and crash, or possibly execute arbitrary code via a crafted URI...

CVE-2014-9708: NULL Pointer Dereference

Embedthis Appweb before 4.6.6 and 5.x before 5.2.1 allows remote attackers to cause a denial of service NULL pointer dereference via a Range header with an empty value, as demonstrated by "Range: x=,"...

CVE-2014-9708

CVE-2014-9708 relates to Embedthis Appweb, where versions before 4.6.6 and 5.x before 5.2.1 are vulnerable to a remote denial of service caused by a NULL pointer dereference when handling a Range header with an empty value (e.g., “Range: x=,”). The vulnerability is triggered by processing a craft...

PT-2015-4358 · Embedthis +2 · Appweb +2

Name of the Vulnerable Software and Affected Versions: Embedthis Appweb versions 4.6.6 and earlier, 5.x before 5.2.1 PAN-OS versions prior to 5.0.20 PAN-OS versions prior to 5.1.13 PAN-OS versions prior to 6.0.15 PAN-OS versions prior to 6.1.15 PAN-OS versions prior to 7.0.11 PAN-OS versions prio...

CVE-2014-9707: Undefined Security Weakness

EmbedThis GoAhead 3.0.0 through 3.4.1 does not properly handle path segments starting with a . dot, which allows remote attackers to conduct directory traversal attacks, cause a denial of service heap-based buffer overflow and crash, or possibly execute arbitrary code via a crafted URI...

CVE-2014-9708

Embedthis Appweb before 4.6.6 and 5.x before 5.2.1 allows remote attackers to cause a denial of service NULL pointer dereference via a Range header with an empty value, as demonstrated by "Range: x=,"...

PT-2015-4357

Name of the Vulnerable Software and Affected Versions EmbedThis GoAhead versions 3.0.0 through 3.4.1 Description The issue allows remote attackers to conduct directory traversal attacks, cause a denial of service heap-based buffer overflow and crash, or possibly execute arbitrary code via a craft...

Embedthis Appweb 3.1.2 - Remote DoS

No description provided by source. !/usr/bin/perl +------------------------------------------------------------------------+ | ....... | | ..''xxxxxxxxxxxxxxx'... | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxx.. | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'. | | .'xxxxxxxxxxxxxxxxxxxxxxxxxxxx'''.......'. | |...

Embedthis Goahead Webserver存在多个拒绝服务漏洞

BUGTRAQ ID：65747 Embedthis Goahead Webserver是一款多个设备中的嵌入式WEB服务器程序。 Embedthis Goahead Webserver未能正确处理用户提交的请求，允许远程攻击者利用漏洞提交恶意请求使服务程序崩溃，造成拒绝服务攻击。 0 Embedthis Software Goahead Webserver 3.1.3-0 厂商补丁： Goahead ----- Embedthis Goahead Webserver 3.3.0版本以修复此漏洞，建议用户下载使用： http://embedthis.com/products/goahea...

Juniper JunOS crossite scripting

Crossite scripting in EmbedThis...

XSS on Juniper JUNOS 11.4 Embedthis Appweb 3.2.3

Vulnerability Type: XSS Cross-Site Scripting - Original release date: November 11th, 2013 - Last revised: November 11th, 2013 - Discovered by: Andrea Bodei - A2SECURE - Severity: 4.3/10 CVSSv2 Base Scored Products and affected versions: JUNOS up to 11.4 probably 12.1 and 12.3 vulnerable...

Appweb HTTP Server Version

The remote host is running the Appweb HTTP Server, an open source web server. It was possible to read its version number from the banner. Note that 'Embedthis' used to be known as 'Mbedthis' and 'Appweb' used to be known as 'AppWeb'. C Tenable Network Security, Inc. include"compat.inc"; if...

Embedthis Appweb Web Server 3.2.2-1 (Ejscript) Remote XSS Vulnerability

Summary Appweb has a multi-threaded, event-driven, core to deliver exceptional throughput, response and outstanding memory utilization. It is compact and will embed using as little as 800K of memory. Appweb is a standards-based embedded HTTP server that has a wealth of features. Description Appwe...

Embedthis Appweb 3.1.2 Denial Of Service

!/usr/bin/perl +------------------------------------------------------------------------+ | ....... | | ..''xxxxxxxxxxxxxxx'... | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxx.. | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'. | | .'xxxxxxxxxxxxxxxxxxxxxxxxxxxx'''.......'. | | .'xxxxxxxxxxxxxxxxxxxxx''...... ... .....

Embedthis Appweb 3.1.2 - Remote Denial of Service

Embedthis Appweb 3.1.2 - Remote Denial of Service !/usr/bin/perl +------------------------------------------------------------------------+ | ....... | | ..''xxxxxxxxxxxxxxx'... | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxx.. | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'. | |...