Cross-site Request Forgery (CSRF)

apache solr is vulnerable to cross-site request forgery CSRF. A remote attacker with access to the server could perform HTTP GET requests to any reachable URL on behalf of the user. This is due to the shards parameter not having a corresponding whitelist mechanism, disallowing the server to...

Reolink IP Cameras Detection

Detects the installation of Reolink IP Cameras. This script sends an HTTP GET request and tries to ensure the presence of a Reolink IP Camera. Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...

TP-Link Wi-Fi extender remote code execution vulnerability analysis-vulnerability warning-the black bar safety net

WiFi extender can enlarge the WiFi signal, mainly used for large or multi-storey residential, and the router signal can not cover the family's case. The extender's principle is from the main router to get a WiFi signal, and broadcast channel other WiFi signal weak or no signal area. IBM X-Force...

PT-2019-10054

Name of the Vulnerable Software and Affected Versions: Cesanta Mongoose Embedded Web Server Library versions 6.13 and earlier Description: The issue is caused by a use-after-free vulnerability in the mg http get proto data function, which can lead to a denial of service or remote code execution...

CVE-2019-12494

In Gardener before 0.20.0, incorrect access control in seed clusters allows information disclosure by sending HTTP GET requests from one's own shoot clusters to foreign shoot clusters. This occurs because traffic from shoot to seed via the VPN endpoint is not blocked...

PT-2019-12823

Name of the Vulnerable Software and Affected Versions Gardener versions prior to 0.20.0 Description The issue allows information disclosure due to incorrect access control in seed clusters. This can be exploited by sending HTTP GET requests from one's own shoot clusters to foreign shoot clusters,...

PT-2019-3773

Name of the Vulnerable Software and Affected Versions TP-Link RE365 affected versions not specified TP-Link RE650 affected versions not specified TP-Link RE350 affected versions not specified TP-Link RE500 affected versions not specified Description The issue is due to insufficient input...

CommSy 8.6.5 SQL Injection

Title: ====== CommSy 8.6.5 - SQL injection Researcher: =========== Jens Regel, Schneider & Wulf EDV-Beratung GmbH & Co. KG CVE-ID: ======= CVE-2019-11880 Timeline: ========= 2019-04-15 Vulnerability discovered 2019-04-15 Asked for security contact and PGP key 2019-04-16 Send details to the vendor...

Novatek NT9665X HFS Recv buffer overflow code execution vulnerability

Summary An exploitable code execution vulnerability exists in the HTTP request-parsing function of the NT9665X Chipset firmware running on the Anker Roav A1 Dashcam, version “RoavA1SWV1.9.” A specially crafted packet can cause an unlimited and arbitrary write to memory, resulting in code executio...

Server side request forgery (ssrf)

openid.php in LightOpenID through 1.3.1 allows SSRF via a crafted OpenID 2.0 assertion request using the HTTP GET method...

CVE-2019-11066

openid.php in LightOpenID through 1.3.1 allows SSRF via a crafted OpenID 2.0 assertion request using the HTTP GET method...

CVE-2019-11066

openid.php in LightOpenID through 1.3.1 allows SSRF via a crafted OpenID 2.0 assertion request using the HTTP GET method...

CVE-2019-11066

CVE-2019-11066 affects LightOpenID up to version 1.3.1, where openid.php is vulnerable to SSRF via a crafted OpenID 2.0 assertion request that uses HTTP GET. The vulnerability originates in LightOpenID’s handling of OpenID 2.0 assertion requests, enabling server-side requests to arbitrary destina...

CVE-2019-11066

openid.php in LightOpenID through 1.3.1 allows SSRF via a crafted OpenID 2.0 assertion request using the HTTP GET method...

CVE-2019-11066

openid.php in LightOpenID through 1.3.1 allows SSRF via a crafted OpenID 2.0 assertion request using the HTTP GET method...

PT-2019-12163

Name of the Vulnerable Software and Affected Versions LightOpenID versions through 1.3.1 Description The issue allows for Server-Side Request Forgery SSRF via a crafted OpenID 2.0 assertion request using the HTTP GET method. This is related to the openid.php file in LightOpenID. Recommendations F...

CVE-2019-11066: Server-Side Request Forgery (SSRF)

openid.php in LightOpenID through 1.3.1 allows SSRF via a crafted OpenID 2.0 assertion request using the HTTP GET method...

Rockwell Automation/Allen-Bradley MicroLogix Controllers <= 16.00 Information Exposure

Binary data 720124.prm...

Remote Code Execution

Red Hat Satellite is a systems management tool for Linux-based infrastructures. It allows for provisioning, remote management and monitoring of multiple Linux deployments with a single, centralized tool. A cross-site scripting XSS flaw was found in the way the Red Hat Satellite web interface...

Improper access control

Incorrect Access Control in the Account Access / Password Reset Link in SimplyBook.me Enterprise before 2019-04-23 allows Unauthorized Attackers to READ/WRITE Customer or Administrator data via a persistent HTTP GET Request Hash Link Replay, as demonstrated by a login-link from the browser histor...