CVE-2019-16198

KSLabs KSWEB 3.93 allows ../ directory traversal, as demonstrated by the hostFile parameter...

EUVD-2019-7010

Malware in sbrugna...

EUVD-2019-6691

Malware in sbrugna...

CVE-2019-15766

The KSLABS KSWEB aka ru.kslabs.ksweb application 3.93 for Android allows authenticated remote code execution via a POST request to the AJAX handler with the configFile parameter set to the arbitrary file to be written to and the configtext parameter set to the content of the file to be created...

KSLabs KSWEB hostFile parameter directory traversal vulnerability

KSLabs KSWEB is an open source server. A directory traversal vulnerability exists in the handling of the KSLabs KSWEB hostFile parameter, which can be exploited by remote attackers to submit a special request to view the contents of system files...

KSLabs KSWEB Code Injection Vulnerability

KSLabs KSWEB is an open source server. A code injection vulnerability exists in the handling of the KSLabs KSWEB hconfigFile parameter, which can be exploited by an attacker to submit a special request that can write arbitrary code and execute it...

CVE-2019-15766

The KSLABS KSWEB aka ru.kslabs.ksweb application 3.93 for Android allows authenticated remote code execution via a POST request to the AJAX handler with the configFile parameter set to the arbitrary file to be written to and the configtext parameter set to the content of the file to be created...

CVE-2019-16198

KSLabs KSWEB 3.93 allows ../ directory traversal, as demonstrated by the hostFile parameter...

Remote code execution

The KSLABS KSWEB aka ru.kslabs.ksweb application 3.93 for Android allows authenticated remote code execution via a POST request to the AJAX handler with the configFile parameter set to the arbitrary file to be written to and the configtext parameter set to the content of the file to be created...

CVE-2019-16198

CVE-2019-16198 affects KSLabs KSWEB 3.93. The issue is a directory traversal in the hostFile parameter handling, enabling an attacker to traverse directories and view system files. Public references across multiple feeds (NVD, CNVD, Red Hat, PRION, CVE records) consistently describe this vulnerab...

CVE-2019-15766

CVE-2019-15766 affects the KSLABS KSWEB Android app (v3.93). An authenticated attacker can trigger remote code execution by sending a POST to the AJAX handler with configFile (arbitrary file path) and config_text (content to write), potentially writing and executing a PHP file in the device’s pub...