Sitel CAP/PRX Information Disclosure Vulnerability

Sitel CAP/PRX is an operating system from Sitel France. It is used for central processing units that have a 180 MHz ARM9 architecture. An information disclosure vulnerability exists in SITEL CAP/PRX firmware 5.2.01, which can be exploited by an attacker to access the device's internal configurati...

sane-backends: NULL pointer dereference in sanei_epson_net_read function

A NULL pointer dereference in saneiepsonnetread in SANE Backends before 1.0.30 allows a malicious device connected to the same local network as the victim to cause a denial of service, aka GHSL-2020-075...

CVE-2021-32456

SITEL CAP/PRX firmware version 5.2.01 allows an attacker with access to the local network of the device to obtain the authentication passwords by analysing the network traffic...

CVE-2021-32456 SITEL CAP/PRX cleartext transmission of sensitive information

SITEL CAP/PRX firmware version 5.2.01 allows an attacker with access to the local network of the device to obtain the authentication passwords by analysing the network traffic...

PT-2021-19705 · Sitel · Sitel Cap/Prx

Name of the Vulnerable Software and Affected Versions: SITEL CAP/PRX firmware version 5.2.01 Description: The issue allows an attacker with access to the local network to access the internal configuration database of the device via HTTP without any authentication. This could be exploited to obtai...

PT-2021-19708 · Sitel · Sitel Cap/Prx

Name of the Vulnerable Software and Affected Versions: SITEL CAP/PRX firmware version 5.2.01 Description: The issue allows an attacker with access to the local network of the device to obtain authentication passwords by analyzing network traffic. Recommendations: For SITEL CAP/PRX firmware versio...

Sitel CAP/PRX 访问控制错误漏洞

Sitel CAP/PRX is an operating system from Sitel France. It is used for central processing units that have a 180 MHz ARM9 architecture. An information disclosure vulnerability exists in SITEL CAP/PRX firmware 5.2.01, which can be exploited by an attacker to access the device's internal configurati...

CVE-2021-32456

SITEL CAP/PRX firmware version 5.2.01 allows an attacker with access to the local network of the device to obtain the authentication passwords by analysing the network traffic...

MERCUSYS Mercury X18G 安全漏洞

The Mercusys Mercury X18G is a router from the Chinese company Mercusys. A security vulnerability exists in MERCUSYS Mercury X18G 1.0.5 that allows denial of service via a crafted value to POST to listen for http LAN parameters...

CVE-2021-31802

NETGEAR R7000 1.0.11.116 devices have a heap-based Buffer Overflow that is exploitable from the local network without authentication. The vulnerability exists within the handling of an HTTP request. An attacker can leverage this to execute code as root. The problem is that a user-provided length...

MGASA-2021-0188 Updated chromium-browser-stable package fixes security vulnerabilities

The updated packages fix security vulnerabilities and a crash when a device does some cast traffic in the local network. See upstream release notes...

Updated chromium-browser-stable package fixes security vulnerabilities

The updated packages fix security vulnerabilities and a crash when a device does some cast traffic in the local network. See upstream release notes...

WCMS Server-Side Request Forgery Vulnerability

WCMS is a content management system CMS that uses an open web interface to build websites. A server-side request forgery vulnerability exists in WCMS version 0.3.2. An attacker can send a specially crafted request from the web application's back-end server via the path parameter of wex/cssjs.php,...

CVE-2020-24140

Server-side request forgery in Wcms 0.3.2 let an attacker send crafted requests from the back-end server of a vulnerable web application via the pagename parameter to wex/html.php. It can help identify open ports, local network hosts and execute command on local services...

CVE-2020-24139

Server-side request forgery in Wcms 0.3.2 lets an attacker send crafted requests from the back-end server of a vulnerable web application via the path parameter to wex/cssjs.php. It can help identify open ports, local network hosts and execute command on local services...

Server side request forgery (ssrf)

Server-side request forgery in Wcms 0.3.2 lets an attacker send crafted requests from the back-end server of a vulnerable web application via the path parameter to wex/cssjs.php. It can help identify open ports, local network hosts and execute command on local services...

CVE-2020-24140

Server-side request forgery in Wcms 0.3.2 let an attacker send crafted requests from the back-end server of a vulnerable web application via the pagename parameter to wex/html.php. It can help identify open ports, local network hosts and execute command on local services...

CVE-2020-24139

CVE-2020-24139 affects WCMS/Wcms 0.3.2, exposing a server‑side request forgery (SSRF) in the wex/cssjs.php path parameter. The described impact is that an attacker can issue crafted requests from the vulnerable web application's back end to identify open ports and local network hosts and may exec...

CVE-2021-30127

TerraMaster F2-210 devices through 2021-04-03 use UPnP to make the admin web server accessible over the Internet on TCP port 8181, which is arguably inconsistent with the "It is only available on the local network" documentation. NOTE: manually editing /etc/upnp.json provides a partial but...

PT-2021-9428 · Unknown · Wiz Colors A60

Name of the Vulnerable Software and Affected Versions: WiZ Colors A60 version 1.14.0 Description: An issue was discovered where the device sends unnecessary information to the cloud controller server, including the local IP address and the SSID of the Wi-Fi network it is connected to. Although th...