CVE-2020-26561

Belkin LINKSYS WRT160NL 1.0.04.002US20130619 devices have a stack-based buffer overflow vulnerability because of sprintf in createdir in minihttpd. Successful exploitation leads to arbitrary code execution. NOTE: This vulnerability only affects products that are no longer supported by the maintai...

CVE-2020-26561

Belkin LINKSYS WRT160NL devices (version 1.0.04.002_US_20130619) are affected by a stack-based buffer overflow in mini_httpd’s create_dir function caused by sprintf. Successful exploitation can lead to arbitrary code execution. The vulnerability affects products no longer supported by the maintai...

CVE-2020-17409

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R6120, R6080, R6260, R6220, R6020, JNR3210, and WNR2020 routers with firmware 1.0.66. Authentication is not required to exploit this vulnerability. The specific flaw exists...

Design/Logic Flaw

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R6120, R6080, R6260, R6220, R6020, JNR3210, and WNR2020 routers with firmware 1.0.66. Authentication is not required to exploit this vulnerability. The specific flaw exists...

CVE-2020-17409

The CVE-2020-17409 issue affects NETGEAR R6120, R6080, R6260, R6220, R6020, JNR3210, and WNR2020 routers with firmware 1.0.66. It stems from the mini_httpd service listening on TCP port 80 and a flawed string-matching logic when accessing protected pages, allowing network-adjacent attackers to di...

NETGEAR Multiple Routers mini_httpd Authentication Bypass Vulnerability

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R6120, R6080, R6260, R6220, R6020, JNR3210, and WNR2020 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the minihttpd...

(0Day) NETGEAR AC1200 mini_httpd Cleartext Transmission of Sensitive Information Information Disclosure Vulnerability

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR AC1200 Smart WiFi Router. User interaction is required to exploit this vulnerability. The specific flaw exists within the handling of admin credentials provided to the...

ALPINE-CVE-2018-18778

ACME minihttpd before 1.30 lets remote users read arbitrary files...

CVE-2018-18778

ACME minihttpd before 1.30 lets remote users read arbitrary files...

CVE-2018-18778

ACME minihttpd before 1.30 lets remote users read arbitrary files...

CVE-2018-18778

ACME minihttpd before 1.30 lets remote users read arbitrary files...

CVE-2018-18778

ACME minihttpd before 1.30 lets remote users read arbitrary files...

CVE-2018-18778

ACME mini_httpd before 1.30 is vulnerable to local file inclusion (LFI) via HTTP handling, enabling a remote attacker to read arbitrary files on the server. The issue is described as improper handling of HTTP GET requests with empty headers, facilitating file read access. Affected software: ACME ...

CVE-2018-18778

ACME minihttpd before 1.30 lets remote users read arbitrary files...

CVE-2018-18778

ACME minihttpd before 1.30 lets remote users read arbitrary files...

FreeBSD : mini_httpd -- disclose arbitrary files is some circumstances (33c384f3-5af6-4662-9741-0acb21c7e499)

Jef Poskanzer reports : Prior versions allowed remote users to read arbitrary files in some circumstances. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018 Jacques Vidrine and contributors...

ACME mini_httpd Arbitrary File Read Vulnerability

ACME minihttpd is a small HTTP server from ACME Labs. A security vulnerability exists in ACME minihttpd versions prior to 1.30. A remote attacker can exploit this vulnerability to read arbitrary files...

mini_httpd -- disclose arbitrary files is some circumstances

Jef Poskanzer reports: Prior versions allowed remote users to read arbitrary files in some circumstances...

mini_httpd Detection (HTTP)

Detection of minihttpd. The script sends a connection request to the server and attempts to detect minihttpd and to extract its version. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

mini_httpd Buffer Overflow Vulnerability

The htpasswd implementation of minihttpd is affected by a buffer overflow that can be exploited remotely to perform code execution. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...