All Vulnerabilities for aptg.com.tw Patched via Open Bug Bounty

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| aptg.com.tw ---|--- Open Bug Bounty...

CVE-2020-26970

When reading SMTP server status codes, Thunderbird writes an integer value to a position on the stack that is intended to contain just one byte. Depending on processor architecture and stack layout, this leads to stack corruption that may be exploitable. This vulnerability affects Thunderbird...

Security Vulnerabilities fixed in Thunderbird 78.5.1 — Mozilla

When reading SMTP server status codes, Thunderbird writes an integer value to a position on the stack that is intended to contain just one byte. Depending on processor architecture and stack layout, this leads to stack corruption that may be exploitable...

Atlassian Products Cross Site Scripting

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple Cross-Site Scripting Vulnerabilities products: PlantUML, Refined Toolkit for Confluence, Linking for Confluence, Countdown Timer, Server Status vulnerable...

CVE-2020-25073

FreedomBox through 20.13 allows remote attackers to obtain sensitive information from the /server-status page of the Apache HTTP Server, because a connection from the Tor onion service or from PageKite is considered a local connection. This affects both the freedombox and plinth packages of some...

UBUNTU-CVE-2020-25073

FreedomBox through 20.13 allows remote attackers to obtain sensitive information from the /server-status page of the Apache HTTP Server, because a connection from the Tor onion service or from PageKite is considered a local connection. This affects both the freedombox and plinth packages of some...

CVE-2019-18864

/server-info and /server-status in Blaauw Remote Kiln Control through v3.00r4 allow an unauthenticated attacker to gain sensitive information about the host machine...

Design/Logic Flaw

/server-info and /server-status in Blaauw Remote Kiln Control through v3.00r4 allow an unauthenticated attacker to gain sensitive information about the host machine...

CVE-2019-18864

/server-info and /server-status in Blaauw Remote Kiln Control through v3.00r4 allow an unauthenticated attacker to gain sensitive information about the host machine...

CVE-2019-18864

CVE-2019-18864 affects Blaauw Remote Kiln Control v3.00r4. The issue is an information-disclosure vulnerability allowing an unauthenticated remote attacker to access sensitive host information via /server-info and /server-status. No explicit root cause details are provided in the documents beyond...

PT-2020-9995

Name of the Vulnerable Software and Affected Versions: Blaauw Remote Kiln Control versions through v3.00r4 Description: The issue allows an unauthenticated attacker to gain sensitive information about the host machine through "/server-info" and "/server-status" API endpoints. Recommendations: For...

CVE-2019-18864: Undefined Security Weakness

/server-info and /server-status in Blaauw Remote Kiln Control through v3.00r4 allow an unauthenticated attacker to gain sensitive information about the host machine...

How to compile a server status report by using XenCenter

This article describes how to use XenCenter to collect a server status report...

WordPress Server Status by Hostname/IP plugin SQL Injection Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Server Status by Hostname/IP plugin is used in one of the server monitoring plugin. A SQL injection vulnerability exists in version 4.6...

CVE-2019-12570

A SQL injection vulnerability in the Xpert Solution "Server Status by Hostname/IP" plugin 4.6 for WordPress allows an authenticated user to execute arbitrary SQL commands via GET parameters...

CVE-2019-12570

A SQL injection vulnerability in the Xpert Solution "Server Status by Hostname/IP" plugin 4.6 for WordPress allows an authenticated user to execute arbitrary SQL commands via GET parameters...

CVE-2019-12570

The CVE-2019-12570 entry concerns the WordPress plugin “Server Status by Hostname/IP” by Xpert Solution, version 4.6. A SQL injection vulnerability exists that allows an authenticated user to execute arbitrary SQL commands via GET parameters due to insufficient input validation in database querie...

PT-2019-12860

Name of the Vulnerable Software and Affected Versions Xpert Solution "Server Status by Hostname/IP" plugin version 4.6 Description A SQL injection issue allows an authenticated user to execute arbitrary SQL commands via GET parameters. Recommendations For Xpert Solution "Server Status by...

CVE-2019-12570: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in the Xpert Solution "Server Status by Hostname/IP" plugin 4.6 for WordPress allows an authenticated user to execute arbitrary SQL commands via GET parameters...

Server Status by Hostname/IP <= 4.6 - Authenticated SQL Injection

The last time it was checked the plugin was still affected and had been closed. PoC http://www.example.com/wp-admin/admin.php?page=all-servers=2+UNION+SELECT+1%2C2%2C3%2C%40%40version+=edit...