Netgear-ssl-vpn-20211222-CVE-2022-29383

Netgear-ssl-vpn-20211222 CVE-2022-29383 NETGEAR ProSafe SSL VPN SQL injection vulnerability exists in scgi-bin/platform.cgi Firmware version： FVS336Gv2 - FVS336Gv3 sqlmap command SQL Injection Vulnerability : USERDBDomains.Domainname...

netgear-to-CVE-2022-29383

NETGEAR ProSafe SSL VPN CVE-2022-29383 to https://github.com/badboycxcc/Netgear-ssl-vpn-20211222-CVE-2022-29383 SQL injection vulnerability exists in scgi-bin/platform.cgi Firmware version： FVS318Gv2 and FVS318N FVS318Gv2 FVS318N...

D-Link DSR - Default Credentials Detection

Tries admin:admin against /scgi-bin/platform.cgi on D-Link DSR devices and looks for authenticated UI markers or already-logged-in session prompts. !/usr/bin/env python3 -- coding: utf-8 -- """D-Link DSR devices default credentials admin:admin.""" from urllib.parse import quote from kittysploit...

platform.cgi - Unauth LFI Detection (CVE-2025-60344)

Detects unauthenticated file disclosure via POST /scgi-bin/platform.cgi thispage= path traversal NETGEAR/D-Link/Cisco Embedded HTTP Server. !/usr/bin/env python3 -- coding: utf-8 -- """Multiple routers /scgi-bin/platform.cgi LFI CVE-2025-60344.""" import re from kittysploit import from...

Dlink DSR-250 and Netgear Prosafe - Cross-Site Scripting Detection

Dlink DSR-250 and Netgear Prosafe are vulnerable to reflected cross site scripting endpoint scgi-bin/platform.cgi in parameter SSLVPN. !/usr/bin/env python3 -- coding: utf-8 -- """Dlink DSR-250 and Netgear Prosafe are vulnerable to reflected cross site scripting endpoint scgi-bin/platform.""" fro...

CVE-2023-2384

CVE-2023-2384 affects Netgear SRX5308 Web Management Interface, specifically the file scgi-bin/platform.cgi?page=dmz_setup.htm. The vulnerability arises from insufficient input validation on the dhcp.SecDnsIPByte2 parameter, enabling remote cross-site scripting. Multiple sources confirm versions ...

CVE-2023-2381

CVE-2023-2381 affects Netgear SRX5308 Web Management Interface up to firmware 4.3.5-3. The vulnerability is a cross-site scripting flaw in the BandWidthProfile.ProfileName parameter within scgi-bin/platform.cgi?page=bandwidth_profile.htm, exploitable remotely and reportedly disclosed. Public refe...

CVE-2023-2393: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Netgear SRX5308 up to 4.3.5-3. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file scgi-bin/platform.cgi?page=dmzsetup.htm of the component Web Management Interface. The manipulation of the argument...

CVE-2023-2392: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Netgear SRX5308 up to 4.3.5-3. It has been classified as problematic. Affected is an unknown function of the file scgi-bin/platform.cgi?page=timezone.htm of the component Web Management Interface. The manipulation of the argument ManualDate.minutes leads to cross site...

CVE-2023-2391: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Netgear SRX5308 up to 4.3.5-3 and classified as problematic. This issue affects some unknown processing of the file scgi-bin/platform.cgi?page=timezone.htm of the component Web Management Interface. The manipulation of the argument ntp.server2 leads to cross site...

CVE-2023-2390: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in Netgear SRX5308 up to 4.3.5-3 and classified as problematic. This vulnerability affects unknown code of the file scgi-bin/platform.cgi?page=timezone.htm of the component Web Management Interface. The manipulation of the argument ntp.server1 leads to cross site...

CVE-2023-2389: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in Netgear SRX5308 up to 4.3.5-3. This affects an unknown part of the file scgi-bin/platform.cgi?page=firewalllogsemail.htm of the component Web Management Interface. The manipulation of the argument smtpServer.emailServer leads to...

CVE-2023-2388: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in Netgear SRX5308 up to 4.3.5-3. Affected by this issue is some unknown functionality of the file scgi-bin/platform.cgi?page=firewalllogsemail.htm of the component Web Management Interface. The manipulation of the argument...

CVE-2023-2387: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in Netgear SRX5308 up to 4.3.5-3. Affected by this vulnerability is an unknown functionality of the file scgi-bin/platform.cgi?page=dmzsetup.htm of the component Web Management Interface. The manipulation of the argument winsServer1 leads to cro...

CVE-2023-2386: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in Netgear SRX5308 up to 4.3.5-3. Affected is an unknown function of the file scgi-bin/platform.cgi?page=firewalllogsemail.htm of the component Web Management Interface. The manipulation of the argument smtpServer.toAddr leads to cross site...

CVE-2023-2383: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Netgear SRX5308 up to 4.3.5-3. It has been classified as problematic. This affects an unknown part of the file scgi-bin/platform.cgi?page=firewalllogsemail.htm of the component Web Management Interface. The manipulation of the argument smtpServer.fromAddr leads to cro...

CVE-2023-2382: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Netgear SRX5308 up to 4.3.5-3 and classified as problematic. Affected by this issue is some unknown functionality of the file scgi-bin/platform.cgi?page=firewalllogsemail.htm of the component Web Management Interface. The manipulation of the argument...

CVE-2023-2381: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in Netgear SRX5308 up to 4.3.5-3 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file scgi-bin/platform.cgi?page=bandwidthprofile.htm of the component Web Management Interface. The manipulation of the argument...

CVE-2023-2385: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Netgear SRX5308 up to 4.3.5-3. It has been rated as problematic. This issue affects some unknown processing of the file scgi-bin/platform.cgi?page=ikepolicies.htm of the component Web Management Interface. The manipulation of the argument IpsecIKEPolicy.IKEPolicyName...

CVE-2023-2384: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Netgear SRX5308 up to 4.3.5-3. It has been declared as problematic. This vulnerability affects unknown code of the file scgi-bin/platform.cgi?page=dmzsetup.htm of the component Web Management Interface. The manipulation of the argument dhcp.SecDnsIPByte2 leads to cros...