9 matches found
EUVD-2020-22906
Malware in sbrugna...
CVE-2024-24818
EspoCRM is an Open Source Customer Relationship Management software. An attacker can inject arbitrary IP or domain in "Password Change" page and redirect victim to malicious page that could lead to credential stealing or another attack. This vulnerability is fixed in 8.1.2...
CVE-2020-35227
A buffer overflow vulnerability in the access control section on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices in the administration web panel allows an attacker to inject IP addresses into the whitelist via the checkedList parameter to the delete command...
BIT-ESPOCRM-2024-24818
EspoCRM is an Open Source Customer Relationship Management software. An attacker can inject arbitrary IP or domain in "Password Change" page and redirect victim to malicious page that could lead to credential stealing or another attack. This vulnerability is fixed in 8.1.2...
CVE-2024-24818
CVE-2024-24818 affects EspoCRM. The vulnerability stems from an input/control on the Password Change page that allows an attacker to inject arbitrary IPs or domains, enabling redirection of victims to a malicious page. This could facilitate credential theft or related attacks. Public documentatio...
Server-Side Request Forgery (SSRF)
calibreweb is vulnerable to server-side request forgerySSRF attacks. An attacker is able to set up their HTTP server to respond with a 302 redirect to redirect the request to localhost which results in injecting malicious ip address via IPV4/IPV4 embedding...
Jackie CMS (<=1.7) SQL injection vulnerability analysis-vulnerability warning-the black bar safety net
Jackie CMS Jieqi CMS is a novel system based CMS, currently the latest version is 1. 7, in the novel class of station use rate is still relatively high, these days took some time to look at his code, but quite interesting, to share with you a bit. The entire system of the core code is zend...
Simple forged X-Forwarded-For-bug warning-the black bar safety net
On the forged X-Forwarded-For purposes I will not say more. In the invasion of a PHP station, the GPC is ON, Character type injection all., while in PHP5, the GPC the default is open. But GPC for$SERVER without any effect, So you can fake the$SERVER to achieve the injection to the purpose. IP. in...
Simple forged X-Forwarded-For-bug warning-the black bar safety net
On the forged X-Forwarded-For purposes I will not say more. In the invasion of a PHP station, the GPC is ON, Character type injection all., while in PHP5, the GPC the default is open. But GPC for$SERVER without any effect, So you can fake the$SERVER to achieve the injection to the purpose. IP. in...