The vulnerabilities in the scripts system_mgr.cgi, account_mgr.cgi, dsk_mgr.cgi, and app_mgr.cgi of the D-Link DNS-320 network storage software allow attackers to execute arbitrary commands.

The vulnerability in the scripts systemmgr.cgi, accountmgr.cgi, dskmgr.cgi, and appmgr.cgi of the D-Link DNS-320 network storage software exists due to the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability can allow an...

EUVD-2008-4948

Malware in sbrugna...

EUVD-2017-8761

Malware in sbrugna...

EUVD-2001-0901

Malware in sbrugna...

EUVD-2014-8720

Malware in sbrugna...

EUVD-2005-4286

Malware in sbrugna...

EUVD-2012-0776

Malware in sbrugna...

EUVD-2008-6996

Malware in sbrugna...

EUVD-2018-9620

Malware in sbrugna...

CVE-2004-2291

Microsoft Windows Internet Explorer 5.5 and 6.0 allows remote attackers to execute arbitrary code via an embedded script that uses Shell Helper objects and a shortcut link to execute the target script...

TorchServe script references S3 bucket without ensuring ownership or confirming accessibility

In the latest version of pytorch/serve, the script 'uploadresultstos3.sh' references the S3 bucket 'benchmarkai-metrics-prod' without ensuring its ownership or confirming its accessibility. This could lead to potential security vulnerabilities or unauthorized access to the bucket if it is not...

Mapos 跨站脚本漏洞

Mapos is a service order control system by Ramon Silva Personal Developer. A security vulnerability exists in Mapos version 4.39.0, which stems from the presence of multiple cross-site scripting XSS vulnerabilities that can be exploited by an attacker to execute arbitrary code...

NTP - Local Privilege Escalation

Source: http://www.halfdog.net/Security/2015/NtpCronjobUserNtpToRootPrivilegeEscalation/ Introduction Problem description: The cronjob script bundled with ntp package is intended to perform cleanup on statistics files produced by NTP daemon running with statistics enabled. The script is run as ro...

Solution Scripts Home Free 1.0 search.cgi Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/921/info Home Free is a suite of Perl cgi scripts that allow a website to support user contributions of various types. One of the scripts, search.cgi, accepts a parameter called letter which can be any text string. The...

Zoom X4 / X5 SQL Injection / Authentication Bypass Vulnerabilities

Zoom X4 and X5 modems suffers from authentication bypass and remote SQL injection vulnerabilities. Vulnerable Products - Zoom X4 ADSL Modem and Router running Nucleus/4.3 UPnP/1.0Virata-EmWeb/R620 Server All GS Firmware versions Zoom X5 ADSL Modem and Router running Nucleus/4.3...

Zeeways Script Multiple Vulnerabilities

Exploit for php platform in category web applications ======================================= Zeeways Script Multiple Vulnerabilities ======================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ ...

2DayBiz Advanced Poll Script - Cross-Site Scripting / Authentication Bypass

XSS and Authentication bypass in Advanced Poll Script Vendor:http://www.2daybiz.com/ Author:Sid3^effects Description : Advanced Poll is a polling system with powerful administration tool supports both text file and MySQL database. Its features include multiple polls, unlimited options, IP-Logging...

AccessoriesMe PHP Affiliate Script 1.4 SQL Injection / XSS

/ | | \ \ / / | | \ \ / / | |\ \ /\ / / | | | | | | \ V /| | | \ V V / | | || | || / ||| // ,|, | |/ | | | |/ / | ' \ | | / | | | | | | | |||,|| || || AccessoriesMe PHP Affiliate Script v1.4 bSQL-XSS Multiple Remote Vulnerabilities Discovered By : Moudi Contact : Download :...

AccessoriesMe PHP Affiliate Script 1.4 - Blind SQL Injection Cross-Site Scripting

AccessoriesMe PHP Affiliate Script 1.4 - Blind SQL Injection Cross-Site Scripting / | | \ \ / / | | \ \ / / | |\ \ /\ / / | | | | | | \ V /| | | \ V V / | | || | || / ||| // ,|, | |/ | | | |/ / | ' \ | | / | | | | | | | |||,|| || || AccessoriesMe PHP Affiliate Script v1.4 bSQL-XSS Multiple...

Vulnerability in multiple "now playing" scripts for various IRC clients

In October 2006 I discovered many "now playing" scripts for various IRC clients allow an attacker to send commands to the IRC server on behalf of the user. Details ======= Many scripts for various IRC clients, that report the name of the currently playing song in a media player on IRC share the...