CVE-2018-18441-exploit

CVE-2018-18441-exploit D-Link DCS series Wi-Fi cameras expose sensitive information regarding the device configuration. The affected devices include many of DCS series, such as: DCS-936L, DCS-942L, DCS-8000LH, DCS-942LB1, DCS-5222L, DCS-825L, DCS-2630L, DCS-820L, DCS-855L, DCS-2121, DCS-5222LB1,...

D-Link DNS - Info Disclosure CGI Detection

Detects unauthenticated info disclosure on D-Link DNS via /cgi-bin/info.cgi, discovery.cgi, or statusmgr.cgi. !/usr/bin/env python3 -- coding: utf-8 -- """D-Link DNS devices unauthenticated info disclosure CGIs.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

D-Link DNS Series CGI Script - Unauthenticated Detection

A vulnerability has been identified in the D-Link DNS series network storage devices, allowing for the exposure of sensitive device information to unauthorized actors. This vulnerability is due to an unauthenticated access flaw in the info.cgi script, which can be exploited via a simple HTTP GET...

info.cgi Environment Variable - Disclosure Detection

Detected exposure of server environment variables through the info.cgi script. This can leak sensitive paths, internal IPs, software versions, credentials in env, etc. !/usr/bin/env python3 -- coding: utf-8 -- """Detected exposure of server environment variables through the info.""" from...

D-LINK DNS-320L,DNS-320LW and DNS-327L - Information Disclosure Detection

A vulnerability has been found in D-Link DNS-320L, DNS-320LW and DNS-327L up to 20240403 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/info.cgi of the component HTTP GET Request Handler. !/usr/bin/env python3 -- coding: utf-8 -- """...

D-Link CGI Script Code Execution

The vulnerability of the CGI script in the info.cgi microprogramming system of D-Link’s DNS-320L, DNS-320LW, and DNS-327L devices is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted HTTP GET...

Synology RT6600ax info.cgi Exposure of Sensitive Data Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Synology RT6600ax routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the info.cgi file. The issue results from the exposure of sensitive da...

Synology DiskStation Manager Cross-Site Scripting Vulnerability (CNVD-2019-03275)

Synology DiskStation Manager DSM is an operating system for use on Network Storage Servers NAS from Synology. The operating system manages information such as data, files, photos, music, and more. A cross-site scripting vulnerability exists in the info.cgi file in Synology DSM versions prior to...

Synology Router Manager Cross-Site Scripting Vulnerability

Synology Router Manager SRM is a software for configuring and managing Synology routers from Synology. A cross-site scripting vulnerability exists in the info.cgi file in Synology SRM versions prior to 1.1.7-6941, which can be exploited by remote attackers to inject arbitrary web script or HTML...

CVE-2018-8917

Cross-site scripting XSS vulnerability in info.cgi in Synology DiskStation Manager DSM before 6.1.6-15266 allows remote attackers to inject arbitrary web script or HTML via the host parameter...

CVE-2018-8917

Cross-site scripting XSS vulnerability in info.cgi in Synology DiskStation Manager DSM before 6.1.6-15266 allows remote attackers to inject arbitrary web script or HTML via the host parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in info.cgi in Synology DiskStation Manager DSM before 6.1.6-15266 allows remote attackers to inject arbitrary web script or HTML via the host parameter...

CVE-2018-8917

Cross-site scripting XSS vulnerability in info.cgi in Synology DiskStation Manager DSM before 6.1.6-15266 allows remote attackers to inject arbitrary web script or HTML via the host parameter...

CVE-2018-8918

Synology Router Manager (SRM) is affected by a cross-site scripting (XSS) vulnerability in the info.cgi endpoint. The issue allows remote attackers to inject arbitrary web script or HTML via the host parameter in SRM versions prior to 1.1.7-6941. The root cause is an XSS flaw in how the host para...

CVE-2018-8917

The CVE-2018-8917 issue affects Synology DiskStation Manager (DSM) through the info.cgi component, with the host parameter allowing cross-site scripting. Affected versions are DSM before 6.1.6-15266. Root cause is input handling in info.cgi that enables arbitrary web script or HTML injection by r...

CVE-2018-8918

Cross-site scripting XSS vulnerability in info.cgi in Synology Router Manager SRM before 1.1.7-6941 allows remote attackers to inject arbitrary web script or HTML via the host parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in info.cgi in Synology Router Manager SRM before 1.1.7-6941 allows remote attackers to inject arbitrary web script or HTML via the host parameter...

CVE-2018-8918

Cross-site scripting XSS vulnerability in info.cgi in Synology Router Manager SRM before 1.1.7-6941 allows remote attackers to inject arbitrary web script or HTML via the host parameter...

CVE-2018-8918: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in info.cgi in Synology Router Manager SRM before 1.1.7-6941 allows remote attackers to inject arbitrary web script or HTML via the host parameter...

PT-2018-18716

Name of the Vulnerable Software and Affected Versions Synology Router Manager SRM versions prior to 1.1.7-6941 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the host parameter in the info.cgi file...