Malicious code in merchantweb-lang-cookie-reset (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fff16333aa7ffc7fc2c7decc1458c23b7d89f8caacb5c6129ba76168d08ec4be package.json declares the sole dependency packet-table-thread-stream as a direct tarball URL to a non-npm host...

EUVD-2008-0825

Malware in sbrugna...

EUVD-2006-5877

Malware in sbrugna...

EUVD-2007-2045

Malware in sbrugna...

EUVD-2014-2871

Malware in sbrugna...

EUVD-2007-0102

Malware in sbrugna...

gitea -- multiple vulnerabilities

The Gitea Team reports for release 1.13.2: Prevent panic on fuzzer provided string Add secure/httpOnly attributes to the lang cookie...

PT-2015-6583

Name of the Vulnerable Software and Affected Versions Anima Gallery version 2.6 Description The issue concerns directory traversal vulnerabilities in the func.php file of Anima Gallery. Remote attackers can exploit this by including and executing arbitrary local files. This can be achieved by usi...

Western Digital Arkeia Remote Code Execution (CVE-2014-2846)

A remote code execution vulnerability has been reported in WD Arkeia appliance. A remote attacker may exploit this vulnerability by uploading a malicious php file using the lang cookie in order to parse this file. Successful exploitation could result in an arbitrary code execution...

CVE-2014-2846: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in opt/arkeia/wui/htdocs/index.php in the WD Arkeia virtual appliance AVA with firmware before 10.2.9 allows remote attackers to read arbitrary files and execute arbitrary PHP code via a ..././ dot dot dot slash dot slash in the lang Cookie parameter, as...

PT-2014-4914

Name of the Vulnerable Software and Affected Versions WD Arkeia virtual appliance AVA versions prior to 10.2.9 Description A directory traversal issue exists, allowing remote attackers to read arbitrary files and execute arbitrary PHP code. This is achieved by manipulating the lang Cookie paramet...

PT-2013-5366

Name of the Vulnerable Software and Affected Versions RockMongo versions 1.1.5 and earlier Description The issue allows remote attackers to read arbitrary files by exploiting a directory traversal vulnerability. This can be achieved by including a .. dot dot in the ROCK LANG cookie, as seen in a...

PT-2012-5968

Name of the Vulnerable Software and Affected Versions phpPaleo version 4.8b180 Description A directory traversal issue exists, allowing remote attackers to include and execute arbitrary local files. This is achieved by using a .. dot dot in the phppaleo4 lang cookie. Recommendations For phpPaleo...

CVE-2012-4031

Multiple directory traversal vulnerabilities in src/acloglogin.php in Wangkongbao CNS-1000 and 1100 allow remote attackers to read arbitrary files via a .. dot dot in the 1 lang or 2 langid cookie to port 85...

Directory traversal

Multiple directory traversal vulnerabilities in src/acloglogin.php in Wangkongbao CNS-1000 and 1100 allow remote attackers to read arbitrary files via a .. dot dot in the 1 lang or 2 langid cookie to port 85...

PT-2012-5156

Name of the Vulnerable Software and Affected Versions Wangkongbao CNS-1000 and 1100 Description The issue concerns multiple directory traversal vulnerabilities. These vulnerabilities allow remote attackers to read arbitrary files. The attack can be performed by including a .. dot dot in the lang ...

WANGKONGBAO CNS-1000 UTM IPS-FW - Directory Traversal (Metasploit)

Exploit Title: WANGKONGBAO CNS-1000 and 1100 Network Security Platform UTM Directory Traversal Date: 7/2/2012 Exploit Author: Dillon Beresford Vendor Homepage: http://www.wangkongbao.com/products.html Version: CNS-1000 and 1100 The issue is in the /src/acloglogin.php langid and lang parameters...

Directory traversal

Directory traversal vulnerability in index.php in Smeego 1.0, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lang cookie...

CVE-2008-2352

Directory traversal vulnerability in index.php in Smeego 1.0, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lang cookie...

CVE-2008-2352

CVE-2008-2352 documents a directory traversal in index.php of Smeego 1.0 where disabling magic_quotes_gpc allows remote attackers to include and execute arbitrary local files via a .. in the lang cookie. The issue is caused by insufficient validation of the cookie value used in file inclusion, en...