CVE-2016-10561

Bitty is a development web server tool that functions similar to python -m SimpleHTTPServer. Version 0.2.10 has a directory traversal vulnerability that is exploitable via the URL path in GET requests...

CVE-2018-1133

An issue was discovered in Moodle 3.x. A Teacher creating a Calculated question can intentionally cause remote code execution on the server, aka eval injection...

D-Link DIR-620 Router Information Disclosure Vulnerability

D-link DIR-620 is a wireless router product of AUO D-Link. web server is one of the web servers. A security vulnerability exists in the web server of the D-Link DIR-620, which originates from the use of a hard-coded password for the admin account. An attacker can exploit this vulnerability to...

Citrix XenMobile Server Hazelcast Library Java Deserialization Vulnerability

Citrix XenMobile Server is a mobility management solution. The solution is able to manage mobile devices, set mobile policies and compliance rules, gain insight into mobile mobile network operations, and more. A security vulnerability exists in Citrix XenMobile Server. No detailed vulnerability...

Citrix XenMobile Server Open Redirect Vulnerability

Citrix XenMobile Server is a mobility management solution. The solution is able to manage mobile devices, set mobile policies and compliance rules, gain insight into mobile mobile network operations, and more. An open redirection vulnerability exists in Citrix XenMobile Server. No detailed...

Cisco Enterprise NFV Infrastructure Software Secure Copy Protocol Server Input Validation Vulnerability

Cisco Enterprise NFV Infrastructure Software NFVIS is a suite of NVF infrastructure software platforms from the U.S.-based Cisco. The platform enables full lifecycle management of virtualization services through a central coordinator and controller. secure copy protocol SCP server is one of the...

Moxa EDR-810 Command Injection Vulnerability (CNVD-2018-11733)

The EDR-810 is a highly integrated industrial multi-port security router with firewall/NAT/VPN and two-layer manageable switch functionality. A command injection vulnerability exists in the Web server functionality of the Moxa EDR-810 V4.1 build 17030317. The vulnerability can be exploited to...

Moxa EDR-810 Command Injection Vulnerability (CNVD-2018-11723)

The EDR-810 is a highly integrated industrial multi-port security router with firewall/NAT/VPN and two-layer manageable switch functionality. A command injection vulnerability exists in the Web server functionality of the Moxa EDR-810 V4.1 build 17030317. The vulnerability can be exploited to...

Moxa EDR-810 Cross-Site Request Forgery Vulnerability

The EDR-810 is a highly integrated industrial multi-port security router with firewall/NAT/VPN and two-layer manageable switch functionality. A cross-site request forgery vulnerability exists in the web server functionality of the Moxa EDR-810 V4.1 build 17030317. An attacker can exploit this...

CVE-2017-14433

An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP POST can cause a privilege escalation resulting in root shell. An attacker can inject OS commands into the remoteNetwork0= parameter in the...

CVE-2017-12120

An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP POST can cause a privilege escalation, resulting in a root shell. An attacker can inject OS commands into the ip= parm in the...

CVE-2017-14437

An exploitable denial of service vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP URI can cause a null pointer dereference resulting in denial of service. An attacker can send a GET request to "/MOXA\LOG.ini" without a cookie heade...

SAP BC-SRV-ALV Authentication Bypass Vulnerability

SAP BC-SRV-ALV is a flexible tool for displaying lists that provides basic functionality for list manipulation and can also be enhanced with customization for use in large applications. An authentication bypass vulnerability exists in SAP BC-SRV-ALV. An attacker could use this vulnerability to ga...

undertow: improper whitespace parsing leading to potential HTTP request smuggling

It was discovered that Undertow processes http request headers with unusual whitespaces which can cause possible http request smuggling...

Seagate Personal Cloud Seagate Media Server Path Traversal Vulnerability

Seagate Personal Cloud is a personal cloud storage device from Seagate, U.S. Seagate Media Server is one of the media servers. A path traversal vulnerability exists in the getPhotoPlaylistPhotos.psp file of Seagate Media Server in Seagate Personal Cloud versions prior to 4.3.18.4. An attacker can...

RATELIMITED: Local File Download

Summary: This bug affects suuport.ratelimited.me and can be used by attackers to download local file from your servers including your emails, and files uploaded by your admins and other users. Description: While starting a conversation with your support agent, I noticed an option to upload a file...

Cloudcms v1.5.9.0 File Upload Vulnerability

Cloudcms is a backend content management system for enterprise websites. There is a file upload vulnerability in cloudcms v1.5.9.0, which allows attackers to obtain a webshell by uploading a php file...

Design/Logic Flaw

glusterfs server before versions 3.10.12, 4.0.2 is vulnerable when using 'auth.allow' option which allows any unauthenticated gluster client to connect from any network to mount gluster storage volumes. NOTE: this vulnerability exists because of a CVE-2018-1088 regression...

python-paramiko: Authentication bypass in transport.py

It was found that when acting as an SSH server, paramiko did not properly check whether authentication is completed before processing other requests. A customized SSH client could use this to bypass authentication when accessing any resources controlled by paramiko...

CVE-2017-2825

In the trapper functionality of Zabbix Server 2.4.x, specifically crafted trapper packets can pass database logic checks, resulting in database writes. An attacker can set up a Man-in-the-Middle server to alter trapper requests made between an active Zabbix proxy and Server to trigger this...