CVE-2018-17065: Out-of-bounds Write

An issue was discovered on D-Link DIR-816 A2 1.10 B05 devices. Within the handler function of the /goform/DDNS route, a very long password could lead to a stack-based buffer overflow and overwrite the return address...

PT-2018-3884 · D Link · D-Link Dir-816 A2

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 A2 version 1.10 B05 Description: An issue exists in the handler function of the "/goform/NTPSyncWithHost" route, where an HTTP request parameter is used in command string construction. This could lead to command injection via...

CVE-2018-17063: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered on D-Link DIR-816 A2 1.10 B05 devices. An HTTP request parameter is used in command string construction within the handler function of the /goform/NTPSyncWithHost route. This could lead to command injection via shell metacharacters...

CVE-2018-17066: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered on D-Link DIR-816 A2 1.10 B05 devices. An HTTP request parameter is used in command string construction in the handler function of the /goform/form2systime.cgi route. This could lead to command injection via shell metacharacters in the datetime parameter...

CVE-2018-17064: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered on D-Link DIR-816 A2 1.10 B05 devices. An HTTP request parameter is used in command string construction within the handler function of the /goform/sylogapply route. This could lead to command injection via the syslogIp parameter after /goform/clearlog is invoked...

CVE-2018-17068: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered on D-Link DIR-816 A2 1.10 B05 devices. An HTTP request parameter is used in command string construction in the handler function of the /goform/Diagnosis route. This could lead to command injection via shell metacharacters in the sendNum parameter...

CVE-2018-17067: Out-of-bounds Write

An issue was discovered on D-Link DIR-816 A2 1.10 B05 devices. A very long password to /goform/formLogin could lead to a stack-based buffer overflow and overwrite the return address...

CVE-2017-12577

An issue was discovered on the PLANEX CS-QR20 1.30. A hardcoded account / password "admin:password" is used in the Android application that allows attackers to use a hidden API URL "/goform/SystemCommand" to execute any command with root permission...

CVE-2017-12577: Use of Hard-coded Credentials

An issue was discovered on the PLANEX CS-QR20 1.30. A hardcoded account / password "admin:password" is used in the Android application that allows attackers to use a hidden API URL "/goform/SystemCommand" to execute any command with root permission...

Reprise License Manager license editor cross-site scripting vulnerability

Reprise License Manager RLM is a set of license management software from Reprise, Inc. license editor is one of the certificate editors. A cross-site scripting vulnerability exists in the 'lf' parameter of the /goform/editlfgetdata URL of the license editor in Reprise RLM 12.2BL2 and earlier...

Reprise License Manager Arbitrary File Read Vulnerability

Reprise License Manager RLM is a suite of license management software from Reprise, Inc. An arbitrary file read vulnerability exists in Reprise RLM 12.2BL2 and earlier versions, which stems from the fact that by default, the web interface on port 5054 does not require authentication. The...

CVE-2018-15574

An issue was discovered in the license editor in Reprise License Manager RLM through 12.2BL2. It is a cross-site scripting vulnerability in the /goform/editlfgetdata lf parameter via GET or POST. NOTE: the vendor has stated "We do not consider this a vulnerability."...

PT-2018-13099 · Reprise · Reprise License Manager

Name of the Vulnerable Software and Affected Versions: Reprise License Manager RLM versions through 12.2BL2 Description: The issue is related to a cross-site scripting vulnerability in the license editor. It affects the "/goform/edit lf get data" endpoint, specifically the lf parameter, which can...

PT-2018-13098 · Reprise · Reprise License Manager

Name of the Vulnerable Software and Affected Versions: Reprise License Manager versions through 12.2BL2 Description: An issue was discovered in the Reprise License Manager, where attackers can use the web interface to read and write data to any file on disk, as long as rlm.exe has access to it, v...

CVE-2018-15574: Improper Neutralization of Input During Web Page Generation

An issue was discovered in the license editor in Reprise License Manager RLM through 12.2BL2. It is a cross-site scripting vulnerability in the /goform/editlfgetdata lf parameter via GET or POST. NOTE: the vendor has stated "We do not consider this a vulnerability."...

CVE-2018-14492

Tenda AC7 through V15.03.06.44CN, AC9 through V15.03.05.196318CN, and AC10 through V15.03.06.23CN devices have a Stack-based Buffer Overflow via a long limitSpeed or limitSpeedup parameter to an unspecified /goform URI...

PT-2018-3769

Name of the Vulnerable Software and Affected Versions Tenda AC7 versions through V15.03.06.44 CNAC7 Tenda AC9 versions through V15.03.05.196318 CNAC9 Tenda AC10 versions through V15.03.06.23 CNAC10 Description A command injection issue allows attackers to execute arbitrary OS commands via a craft...

Intelbras NCLOUD 300 Denial of Service Vulnerability

Intelbras NCLOUD 300 is a wireless router device from Intelbras, Brazil. A security vulnerability exists in Intelbras NCLOUD 300 version 1.0, which stems from the program failing to require authentication. An attacker can exploit the vulnerability by sending requests to /cgi-bin/ExportSettings.sh...

Moxa EDR-810 Command Injection Vulnerability (CNVD-2018-11722)

The EDR-810 is a highly integrated industrial multi-port security router with firewall/NAT/VPN and two-layer manageable switch functionality. A command injection vulnerability exists in the web server functionality of the Moxa EDR-810 V4.1 build 17030317. The vulnerability can be exploited to gai...

Moxa EDR-810 Command Injection Vulnerability (CNVD-2018-11733)

The EDR-810 is a highly integrated industrial multi-port security router with firewall/NAT/VPN and two-layer manageable switch functionality. A command injection vulnerability exists in the Web server functionality of the Moxa EDR-810 V4.1 build 17030317. The vulnerability can be exploited to...