Lucene search
K

13 matches found

OSV
OSV
added 2025/04/04 8:15 p.m.2 views

CVE-2025-3266

A vulnerability, which was classified as critical, has been found in qinguoyi TinyWebServer up to 1.0. Affected by this issue is some unknown functionality of the file /http/httpconn.cpp. The manipulation of the argument name/password leads to stack-based buffer overflow. The attack may be launch...

9.8CVSS6.2AI score0.00578EPSS
Exploits1References4
OSV
OSV
added 2025/04/04 8:15 p.m.3 views

CVE-2025-3267

A vulnerability, which was classified as critical, was found in qinguoyi TinyWebServer up to 1.0. This affects an unknown part of the file /http/httpconn.cpp. The manipulation of the argument name/password leads to sql injection. It is possible to initiate the attack remotely. The exploit has bee...

8.8CVSS6.4AI score0.00158EPSS
Exploits1References4
CNNVD
CNNVD
added 2025/04/04 12:0 a.m.5 views

TinyWebServer 安全漏洞

TinyWebServer is a C++ lightweight WebServer server for Linux by qinguoyi personal developer. A security vulnerability exists in TinyWebServer 1.0 and earlier versions, which stems from an incorrect manipulation of the name/password parameter that can lead to SQL injection...

8.8CVSS6.8AI score0.00158EPSS
Exploits1References5
CNVD
CNVD
added 2024/12/30 12:0 a.m.2 views

Chat System update_room.php File SQL Injection Vulnerability

Chat System is a chat system. Chat System suffers from a SQL injection vulnerability that originates from insufficient input validation of the id/name/password parameters in the /admin/updateroom.php file. An attacker can use this vulnerability to execute arbitrary SQL commands to obtain sensitiv...

7.5CVSS8.3AI score0.00057EPSS
Exploits0References1
CNNVD
CNNVD
added 2022/04/21 12:0 a.m.2 views

GLPI 信息泄露漏洞

GLPI is an open source IT and asset management software for individual developers. The software provides a full-featured IT resource management interface that you can use to build a database to fully manage IT computers, monitors, servers, printers, network devices, phones, even toner cartridges...

7.8CVSS5.8AI score0.0036EPSS
Exploits0References4
Packet Storm
Packet Storm
added 2021/01/26 12:0 a.m.252 views

Tenda AC5 AC1200 Wireless Cross Site Scripting

Exploit Title: Tenda AC5 AC1200 Wireless - 'WiFi Name & Password' Stored Cross Site Scripting Exploit Author: Chiragh Arora Hardware Model: Tenda AC5 AC1200 Firmware version: V15.03.06.47multi Tested on: Kali Linux CVE ID: CVE-2021-3186 Date: 25.01.2021 Steps to Reproduce - - Navigate to the Tend...

6.4AI score0.00341EPSS
Exploits3
Citrix
Citrix
added 2020/06/21 12:0 a.m.4 views

Unable to login to Citrix Access Gateway Vserver using RADIUS DUO Authentication

Incorrect user name and password via NetScaler - can't login...

7.3AI score
Exploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.21 views

Easy Chat Server 2.2 - Remote Denial of Service Exploit

No description provided by source. ?php ---------------------------------------------------- --------Easy Chat Server Remote DoS Exploit--------- ---------------------------------------------------- -http://www.echatserver.com/------------------------...

7.1AI score
Exploits0
myhack58
myhack58
added 2010/03/09 12:0 a.m.26 views

Bijie hotline enterprise built Station system vulnerabilities-vulnerability warning-the black bar safety net

google inurl:friendlink. asp website description: Email: exp: Broke Management User name password (poc:cmd5 encryption 3. Background address: admin/adminlogin. asp 4. Background a database backup...

0.8AI score
Exploits0
securityvulns
securityvulns
added 2007/05/02 12:0 a.m.86 views

GHH Portal 1.1 (passwd.txt) Remote Password Disclosure Vulnerability

By Cr@zyKing [email protected] Biyosecurity.Net & Expw0rm.Com Thanks : Liz0 & DarkXBoyZ & Eno7 & ApAci & Uyuss & CrackersChild & Th343k1R & Xoron & Ajannn Portal : GHH Wersion : 1.1 GHH Portal 1.1 passwd.txt Remote Password Disclosure Vulnerability Demo : http://ghh.sourceforge.net/demo Vuln :...

1.6AI score
Exploits0
Cvelist
Cvelist
added 2006/04/13 10:0 a.m.22 views

CVE-2006-1782

Unspecified vulnerability in Solaris 8 and 9 allows local users to obtain the LDAP Directory Server root Distinguished Name rootDN password when a privileged user 1 runs idsconfig; or "insecurely" runs LDAP2 commands with the -w option, including 2 ldapadd, 3 ldapdelete, 4 ldapmodify, 5 ldapmodrd...

6.5AI score0.00071EPSS
Exploits0References15
Tenable Nessus
Tenable Nessus
added 2005/07/13 12:0 a.m.26 views

FreeBSD : mpg123 -- buffer overflow in URL handling (20d16518-2477-11d9-814e-0001020eed82)

Carlos Barros reports that mpg123 contains two buffer overflows. These vulnerabilities can potentially lead to execution of arbitrary code. The first buffer overflow can occur when mpg123 parses a URL with a user-name/password field that is more than 256 characters long. This problem can be...

10CVSS6AI score0.08227EPSS
Exploits0References3
FreeBSD
FreeBSD
added 2004/10/02 12:0 a.m.34 views

mpg123 -- buffer overflow in URL handling

Carlos Barros reports that mpg123 contains two buffer overflows. These vulnerabilities can potentially lead to execution of arbitrary code. The first buffer overflow can occur when mpg123 parses a URL with a user-name/password field that is more than 256 characters long. This problem can be...

10CVSS7.1AI score0.08227EPSS
Exploits0References1
Rows per page
Query Builder