Mercusys Mercury X18G Path Traversal Vulnerability (CNVD-2021-02626)

The Mercusys Mercury X18G is a router from the Chinese company Mercusys. A security vulnerability exists in the Mercusys Mercury X18G that allows remote attackers to exploit the vulnerability by submitting a special /loginLess/ request that can read sensitive information...

PT-2021-15413

Name of the Vulnerable Software and Affected Versions MERCUSYS Mercury X18G version 1.0.5 Description The issue allows Directory Traversal via ../ in conjunction with a loginLess or login.htm URI to the web server, enabling authentication bypass. This is demonstrated by the...

PYSEC-2019-254

In Tautulli 2.1.9, CSRF in the /shutdown URI allows an attacker to shut down the remote media server. Also, anonymous access can be achieved in applications that do not have a user login area...