4383 matches found
Fedora 30 : coturn (2020-f3fcb1608a)
An exploitable heap overflow vulnerability exists in the way CoTURN 4.5.1.1 web server parses POST requests. A specially crafted HTTP POST request can lead to information leaks and other misbehavior. - An exploitable denial-of-service vulnerability exists in the way CoTURN 4.5.1.1 web server...
PT-2020-4985
Name of the Vulnerable Software and Affected Versions КТС «Маяк» affected versions not specified Description The issue is related to the lack of protection for the SQL query structure in the web interface. This could allow a remote attacker to execute arbitrary SQL commands using a specially...
PT-2020-4986
Name of the Vulnerable Software and Affected Versions КТС «Маяк» affected versions not specified Description The issue is related to the lack of protection for the SQL query structure in the web interface. This could allow a remote attacker to execute arbitrary SQL commands using a specially...
PT-2020-4988
Name of the Vulnerable Software and Affected Versions КТС «Маяк» affected versions not specified Description The issue is related to the lack of protection for the SQL query structure in the web interface. This could allow a remote attacker to execute arbitrary SQL commands using a specially...
PT-2020-4984
Name of the Vulnerable Software and Affected Versions КТС «Маяк» affected versions not specified Description The issue is related to the lack of protection for the SQL query structure in the web interface. This could allow a remote attacker to execute arbitrary SQL commands using a specially...
PT-2020-4995
Name of the Vulnerable Software and Affected Versions КТС «Маяк» affected versions not specified Description The issue is related to the lack of protection for the SQL query structure in the web interface. This could allow a remote attacker to execute arbitrary SQL commands using a specially...
CVE-2019-9509
The web interface of the Vertiv Avocent UMG-4000 version 4.2.1.19 is vulnerable to reflected XSS in an HTTP POST parameter. The web application does not neutralize user-controllable input before displaying to users in a web page, which could allow a remote attacker authenticated with a user accou...
Cross site scripting
The web interface of the Vertiv Avocent UMG-4000 version 4.2.1.19 is vulnerable to reflected XSS in an HTTP POST parameter. The web application does not neutralize user-controllable input before displaying to users in a web page, which could allow a remote attacker authenticated with a user accou...
CVE-2019-9509 The web interface of the Vertiv Avocent UMG-4000 version 4.2.1.19 is vulnerable to reflected cross site scripting
The web interface of the Vertiv Avocent UMG-4000 version 4.2.1.19 is vulnerable to reflected XSS in an HTTP POST parameter. The web application does not neutralize user-controllable input before displaying to users in a web page, which could allow a remote attacker authenticated with a user accou...
PT-2020-11358
Name of the Vulnerable Software and Affected Versions Vertiv Avocent UMG-4000 version 4.2.1.19 Description The web interface is vulnerable to reflected XSS in an HTTP POST parameter. The web application does not neutralize user-controllable input before displaying it to users in a web page, which...
CVE-2019-9509: Improper Neutralization of Input During Web Page Generation
The web interface of the Vertiv Avocent UMG-4000 version 4.2.1.19 is vulnerable to reflected XSS in an HTTP POST parameter. The web application does not neutralize user-controllable input before displaying to users in a web page, which could allow a remote attacker authenticated with a user accou...
Unknown 'WildPressure' Malware Campaign Lets Off Steam in Middle East
A malware campaign that shares no known similarities to previous attacks has been uncovered, targeting organizations in the Middle East. Dubbed “WildPressure,” the campaign used a previously unknown malware that researchers named Milum, after the C++ class names inside the code. According to...
koinonia.ro Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1123327 Security Researcher g0bl1nsec Helped patch 3768 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting koinonia.ro website and i...
rConfig 3.9.4 - 'search.crud.php' Remote Command Injection
Exploit Title: rConfig 3.9.4 - 'search.crud.php' Remote Command Injection Date: 2020-03-21 Exploit Author: Matthew Aberegg, Michael Burkey Vendor Homepage: https://www.rconfig.com Software Link: https://www.rconfig.com/downloads/rconfig-3.9.4.zip Version: rConfig 3.9.4 Tested on: Cent OS 7 1908...
CVE-2019-19945
uhttpd in OpenWrt through 18.06.5 and 19.x through 19.07.0-rc2 has an integer signedness error. This leads to out-of-bounds access to a heap buffer and a subsequent crash. It can be triggered with an HTTP POST request to a CGI script, specifying both "Transfer-Encoding: chunked" and a large...
Integer overflow
uhttpd in OpenWrt through 18.06.5 and 19.x through 19.07.0-rc2 has an integer signedness error. This leads to out-of-bounds access to a heap buffer and a subsequent crash. It can be triggered with an HTTP POST request to a CGI script, specifying both "Transfer-Encoding: chunked" and a large...
CVE-2019-19945
uhttpd in OpenWrt through 18.06.5 and 19.x through 19.07.0-rc2 has an integer signedness error. This leads to out-of-bounds access to a heap buffer and a subsequent crash. It can be triggered with an HTTP POST request to a CGI script, specifying both "Transfer-Encoding: chunked" and a large...
CVE-2019-19945: Out-of-bounds Read
uhttpd in OpenWrt through 18.06.5 and 19.x through 19.07.0-rc2 has an integer signedness error. This leads to out-of-bounds access to a heap buffer and a subsequent crash. It can be triggered with an HTTP POST request to a CGI script, specifying both "Transfer-Encoding: chunked" and a large...
SQL Server Reporting Services (SSRS) ViewState Deserialization
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SQL Server Reporting Services SSRS ViewState Deserialization', 'Description' = %q A vulnerability exists within Microsoft's SQL Server Reporting...
WAGO PFC100/200 Web-Based Management (WBM) Authentication Timing Information Disclosure Vulnerability
Summary An exploitable timing discrepancy vulnerability exists in the authentication functionality of the Web-Based Management WBM web application on WAGO PFC100/200 controllers. The WBM application makes use of the PHP crypt function which can be exploited to disclose hashed user credentials...