4385 matches found
PT-2020-16926 · Tenda · Tenda Ac1200
Name of the Vulnerable Software and Affected Versions: Tenda AC1200 Model AC6 version 15.03.06.51 multi Description: A large HTTP POST request sent to the "change password API" will trigger the router to crash and enter an infinite boot loop. Recommendations: For Tenda AC1200 Model AC6 version...
CVE-2020-28095: Loop with Unreachable Exit Condition
On Tenda AC1200 Model AC6 15.03.06.51multi devices, a large HTTP POST request sent to the change password API will trigger the router to crash and enter an infinite boot loop...
[SECURITY] Fedora 32 Update: curl-7.69.1-7.fc32
curl is a command line tool for transferring data with URL syntax, supporti ng FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, I MAP, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...
CVE-2020-25759
An issue was discovered on D-Link DSR-250 3.17 devices. Certain functionality in the Unified Services Router web interface could allow an authenticated attacker to execute arbitrary commands, due to a lack of validation of inputs provided in multipart HTTP POST requests...
Design/Logic Flaw
An issue was discovered on D-Link DSR-250 3.17 devices. Certain functionality in the Unified Services Router web interface could allow an authenticated attacker to execute arbitrary commands, due to a lack of validation of inputs provided in multipart HTTP POST requests...
CVE-2020-25759
An issue was discovered on D-Link DSR-250 3.17 devices. Certain functionality in the Unified Services Router web interface could allow an authenticated attacker to execute arbitrary commands, due to a lack of validation of inputs provided in multipart HTTP POST requests...
CVE-2020-25759: Improper Input Validation
An issue was discovered on D-Link DSR-250 3.17 devices. Certain functionality in the Unified Services Router web interface could allow an authenticated attacker to execute arbitrary commands, due to a lack of validation of inputs provided in multipart HTTP POST requests...
CVE-2020-9301
Nolan Ray from Apple Information Security identified a security vulnerability in Spinnaker, all versions prior to version 1.23.4, 1.22.4 or 1.21.5. The vulnerability exists within the handling of SpEL expressions that allows an attacker to read and write arbitrary files within the orca container...
Design/Logic Flaw
Nolan Ray from Apple Information Security identified a security vulnerability in Spinnaker, all versions prior to version 1.23.4, 1.22.4 or 1.21.5. The vulnerability exists within the handling of SpEL expressions that allows an attacker to read and write arbitrary files within the orca container...
PT-2020-20576
Name of the Vulnerable Software and Affected Versions Spinnaker versions prior to 1.23.4 Spinnaker versions prior to 1.22.4 Spinnaker versions prior to 1.21.5 Description A security issue exists in the handling of SpEL expressions, allowing an attacker to read and write arbitrary files within the...
CVE-2020-9301: Deserialization of Untrusted Data
Nolan Ray from Apple Information Security identified a security vulnerability in Spinnaker, all versions prior to version 1.23.4, 1.22.4 or 1.21.5. The vulnerability exists within the handling of SpEL expressions that allows an attacker to read and write arbitrary files within the orca container...
DiveBook <= 1.1.4 - Improper Authorisation Check
An authorisation issue is present in the DiveBook "Add New Dive" feature, allowing anonymous users to create a new dive entry with a crafted HTTP POST request...
Cross-site Scripting (XSS)
openocd is vulnerable to cross-site scripting XSS. The library does not block attempts to use HTTP POST for sending data to 127.0.0.1 port 4444, allowing a malicious user to inject and execute arbitrary web scripts...
HorizontCMS 1.0.0-beta Shell Upload Exploit
This Metasploit module exploits an arbitrary file upload vulnerability in HorizontCMS 1.0.0-beta in order to execute arbitrary commands. The module first attempts to authenticate to HorizontCMS. It then tries to upload a malicious PHP file via an HTTP POST request to /admin/file-manager/fileuploa...
Check Point Response to CVE-2020-28041 - NAT Slipstreaming
Cause The attack involves several vectors - Local IP disclosure, max MTU UDP and TCP calculation and leveraging a SIP parser weakness in fragmented HTTP packets which enables to "Slipstream" a legitimate SIP connection in an HTTP POST request generated by the victim's browser. The full descriptio...
BlogEngine 3.3.8 Cross Site Scripting
Exploit Title: BlogEngine 3.3.8 - 'Content' Stored XSS Date: 11/2020 Exploit Author: Andrey Stoykov Vendor Homepage: https://blogengine.io/ Software Link: https://github.com/BlogEngine/BlogEngine.NET/releases/download/v3.3.8.0/3380.zip Version: 3.3.8 Tested on: Windows Server 2016 Exploit and...
All Vulnerabilities for operativen-stol.matraci.ws Patched via Open Bug Bounty
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| operativen-stol.matraci.ws ---|--- Open...
Broadleaf Commerce Cross-Site Scripting Vulnerability
Broadleaf Commerce is Broadleaf Commerce team of a Java open source e-commerce website framework. A cross-site scripting vulnerability exists in Broadleaf Commerce version 5.1.14-GA, which stems from a slow HTTP post vulnerability. An attacker can exploit this vulnerability to execute JavaScript...
