CVE-2013-2683

Cisco Linksys E4200 1.0.05 Build 7 devices contain an Information Disclosure Vulnerability which allows remote attackers to obtain private IP addresses and other sensitive information...

PT-2020-7417

Name of the Vulnerable Software and Affected Versions: Cisco Linksys E4200 version 1.0.05 Build 7 Description: The issue allows remote attackers to obtain private IP addresses and other sensitive information, which is a result of an information disclosure problem. Recommendations: For Cisco Links...

CVE-2013-2683: Exposure of Sensitive Information to an Unauthorized Actor

Cisco Linksys E4200 1.0.05 Build 7 devices contain an Information Disclosure Vulnerability which allows remote attackers to obtain private IP addresses and other sensitive information...

Information disclosure

Brother MFC-9970CDW 1.10 firmware L devices contain an information disclosure vulnerability which allows remote attackers to view private IP addresses and other sensitive information...

CVE-2013-2676

Brother MFC-9970CDW 1.10 firmware L devices contain an information disclosure vulnerability which allows remote attackers to view private IP addresses and other sensitive information...

CVE-2013-2676: Exposure of Sensitive Information to an Unauthorized Actor

Brother MFC-9970CDW 1.10 firmware L devices contain an information disclosure vulnerability which allows remote attackers to view private IP addresses and other sensitive information...

PT-2020-7411

Name of the Vulnerable Software and Affected Versions: Brother MFC-9970CDW version 1.10 firmware L Description: The issue allows remote attackers to view private IP addresses and other sensitive information. Recommendations: For Brother MFC-9970CDW version 1.10 firmware L, at the moment, there is...

Amazon Web Services EC2 instance enumeration

Provided AWS credentials, this module will call the authenticated API of Amazon Web Services to list all EC2 instances associated with the account This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'aws-sdk-ec2'...

Information disclosure

An Information Exposure vulnerability in Fortinet FortiOS 6.0.1, 5.6.5 and below, allow attackers to learn private IP as well as the hostname of FortiGate via Application Control Block page...

CVE-2018-13365

An Information Exposure vulnerability in Fortinet FortiOS 6.0.1, 5.6.5 and below, allow attackers to learn private IP as well as the hostname of FortiGate via Application Control Block page...

CVE-2018-13365

An Information Exposure vulnerability in Fortinet FortiOS 6.0.1, 5.6.5 and below, allow attackers to learn private IP as well as the hostname of FortiGate via Application Control Block page...

CVE-2018-13365

CVE-2018-13365 affects Fortinet FortiOS 6.0.1, 5.6.5 and earlier, where the Application Control Block page leaks the FortiGate’s private IP address and hostname. The root cause is information disclosure via the Application Control block page. Fortinet’s advisory FG-IR-18-085 (and related NT vulne...

Configuring Source NAT for Direct Internet Breakout on Branch SDWAN

After setting up Direct Internet Breakout DIA on a Branch Site, it can be seen that packets forwarded to the internet will retain the private IP address as the Source IP. This will result in packets not returning form public IP destinations. To resolve this, you can configure Source NAT on the...

CVE-2014-10079

In Vembu StoreGrid 4.4.x, the front page of the server web interface leaks the private IP address in the "ipaddress" hidden form value of the HTML source code, which is disclosed because of incorrect processing of an index.php/ trailing slash...

PT-2019-7049

Name of the Vulnerable Software and Affected Versions Vembu StoreGrid version 4.4.x Description The issue concerns the server web interface of Vembu StoreGrid, where the front page leaks the private IP address. This leak occurs due to incorrect processing of an index.php trailing slash, which...

CVE-2018-15895

An SSRF vulnerability was discovered in idreamsoft iCMS 7.0.11 because the remote function in app/spider/spidertools.class.php does not block DNS hostnames associated with private and reserved IP addresses, as demonstrated by 127.0.0.1 in an A record. NOTE: this vulnerability exists because of an...

CVE-2018-15895

An SSRF vulnerability was discovered in idreamsoft iCMS 7.0.11 because the remote function in app/spider/spidertools.class.php does not block DNS hostnames associated with private and reserved IP addresses, as demonstrated by 127.0.0.1 in an A record. NOTE: this vulnerability exists because of an...

idreamsoft iCMS server-side request forgery vulnerability (CNVD-2019-10138)

idreamsoft iCMS is an open source content management system CMS based on PHP and MySQL. The idreamsoft iCMS 7.0.11 suffers from a server-side request forgery vulnerability that originates from the 'remote' function in the app/spider/spidertools.class.php file that receives a DNS associated with a...

PT-2018-13275

Name of the Vulnerable Software and Affected Versions idreamsoft iCMS version 7.0.11 Description A Server-Side Request Forgery SSRF issue was found due to the remote function in app/spider/spider tools.class.php not properly blocking DNS hostnames associated with private and reserved IP addresses...

CVE-2018-15895: Server-Side Request Forgery (SSRF)

An SSRF vulnerability was discovered in idreamsoft iCMS 7.0.11 because the remote function in app/spider/spidertools.class.php does not block DNS hostnames associated with private and reserved IP addresses, as demonstrated by 127.0.0.1 in an A record. NOTE: this vulnerability exists because of an...