Command Execution Vulnerability in the InRouter900 Industrial Router from Johnstone (CNVD-2021-10451)

The Johnton-InRouter900 series industrial router is a 4G industrial router. A command execution vulnerability exists in the InRouter900 Industrial Router. The vulnerability stems from the program's failure to properly validate user data and can be exploited by a remote attacker to execute arbitra...

Cisco RV110W/RV130/RV130W/RV215W Remote Command Execution and Denial of Service Vulnerability (CNVD-2021-41222)

The Cisco RV110W is a Wireless-N VPN firewall, the Cisco RV130 is a multifunction VPN router, the Cisco RV130W is a Wireless-N multifunction VPN router, and the Cisco RV215W is a Wireless-N VPN router. A remote command execution and denial of service vulnerability exists in the Web management...

CVE-2018-1000809

privacyIDEA version 2.23.1 and earlier contains a Improper Input Validation vulnerability in token validation api that can result in Denial-of-Service. This attack appear to be exploitable via http request with user=&pass= to /validate/check url. This vulnerability appears to have been fixed in...

CMS Made Simple 1.x - Cross-Site Scripting Cross-Site Request Forgery

CMS Made Simple 1.x - Cross-Site Scripting Cross-Site Request Forgery source: https://www.securityfocus.com/bid/40483/info CMS Made Simple is prone to multiple cross-site scripting vulnerabilities because the software fails to sufficiently sanitize user-supplied inputs. The application is also...

CVE-2005-0655

auraCMS 1.5 allows remote attackers to obtain sensitive information via an HTTP request with an invalid id parameter to 1 teman.php, 2 hal.php, or 3 arsip.php, which reveals the path in a PHP error message...

Pingtel Xpressa 1.2.x2.02.1 - Handset Remote Denial of Service

Pingtel Xpressa 1.2.x2.02.1 - Handset Remote Denial of Service source: https://www.securityfocus.com/bid/11161/info Pingtel Xpressa handsets are reported prone to a remote denial of service vulnerability. The issue is reported to exist because of a lack of sufficient boundary checks performed on...

Cross-Site Scripting (XSS) in Nihuo Web Log Analyzer

--------------------------------------------------------------------------- Cross-Site Scripting XSS in Nihuo Web Log Analyzer --------------------------------------------------------------------------- Author: Audun Larsen larsen at xqus dot com Date: Aug 20, 2004 Affected software:...

Conceptronic CADSLR1 Router - Denial of Service

Conceptronic CADSLR1 Router - Denial of Service $ $victima="ip.victim" $ perl -e 'print "GET / HTTP/1.1\r\nHost: '"$victima"'\r\nAuthorization: Basic " . 'A' x 65536 . "\r\n\r\n"' | nc -vvn $victima 80 milw0rm.com 2004-07-22...

SCI Photo Chat 3.4.9 - Cross-Site Scripting

SCI Photo Chat 3.4.9 - Cross-Site Scripting source: https://www.securityfocus.com/bid/10648/info SCI Photo Chat is reported susceptible to a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input. The web server component...

Snowblind Web Server 1.0/1.1 - Malformed HTTP Request Denial of Service

source: https://www.securityfocus.com/bid/7617/info A denial of service vulnerability has been reported for Snowblind. The vulnerability will cause the web server to crash when processing a malformed HTTP request. http://localhost//...

CVE-2002-1483

db4webc and db4webc.exe programs in DB4Web 3.4 and 3.6 allow remote attackers to read arbitrary files via an HTTP request whose argument is a filename of the form 1 C: drive letter, 2 //absolute/path double-slash, or 3 .. dot-dot...

CVE-2002-1213

Directory traversal vulnerability in RadioBird Software WebServer 4 Everyone 1.23 and 1.27, and other versions before 1.30, allows remote attackers to read arbitrary files via an HTTP request with ".." dot-dot sequences containing URL-encoded forward slash "%2F" characters...

CVE-2002-1451

Blazix before 1.2.2 allows remote attackers to read source code of JSP scripts or list restricted web directories via an HTTP request that ends in a 1 "+" or 2 "" backslash character...

[ARL02-A05] PHP FirstPost System Information Path Disclosure Vulnerability

+/--------------- ALPER Research Labs -----/--------/+ +/--------------- Security Advisory ----/---------/+ +/--------------- ID: ARL02-A05 ---/----------/+ +/--------------- [email protected] --/-----------/+ Advisory Information -------------------- Name : PHP FirstPost System Information Path...

CVE-2001-0925

The default installation of Apache before 1.3.19 allows remote attackers to list directories instead of the multiview index.html file via an HTTP request for a path that contains many / slash characters, which causes the path to be mishandled by 1 modnegotiation, 2 moddir, or 3 modautoindex...

Pacific Software Carello 1.2.1 Shopping Cart - Command Execution

source: https://www.securityfocus.com/bid/2729/info It is possible for a remote user to execute arbitrary commands on a host using Carello Shopping Cart software. A specially crafted HTTP request could cause inetinfo.exe to consume all available system resources, refusing any new connections. If...

MS01-023: Microsoft IIS 5.0 Malformed HTTP Printer Request Header Remote Buffer Overflow (953155) (uncredentialed check)

The remote version of the IIS web server contains a bug which might be used by an attacker to execute arbitrary code on the remote system. To exploit this vulnerability, an attacker would need to send a malicious HTTP/1.1 request to the remote host. %NASLMINLEVEL 70300 C Tenable Network Security,...

Lotus Domino Server 5.0.x - Directory Traversal (2)

source: https://www.securityfocus.com/bid/2173/info It is possible for a remote user to gain access to any known file residing on the Lotus Domino Server 5.0.6 and previous. A specially crafted HTTP request comprised of '.nsf' and '../' along with the known filename, will display the contents of...

BEA Systems WebLogic Express 3.1.8/4/5 - Source Code Disclosure

source: https://www.securityfocus.com/bid/1378/info Within WebLogic Server and WebLogic Express there are four main java servlets registered to serve different kind of files. A default servlet exists if a requested file does not have an assigned servlet. If an http request is made that includes...