64 matches found
CVE-2021-40349
e7d Speed Test aka speedtest 0.5.3 allows a path-traversal attack that results in information disclosure via the "GET /.." substring...
CVE-2021-40349
e7d Speed Test aka speedtest 0.5.3 allows a path-traversal attack that results in information disclosure via the "GET /.." substring...
Path traversal
e7d Speed Test aka speedtest 0.5.3 allows a path-traversal attack that results in information disclosure via the "GET /.." substring...
CVE-2021-40349
CVE-2021-40349 affects e7d Speed Test (aka speedtest) 0.5.3. The issue is a path-traversal vulnerability that allows information disclosure via the GET /.. substring. Documented impact is information disclosure; exploitation details are not provided in the sources. CVSS vectors (NVD) indicate a N...
CVE-2021-40349
e7d Speed Test aka speedtest 0.5.3 allows a path-traversal attack that results in information disclosure via the "GET /.." substring...
e7d Speed Test 路径遍历漏洞
E7d Speed Test is a self-hosted lightweight Html5 speed test A security vulnerability exists in e7d Speed Test 0.5.3, which stems from a GET /... string leads to information disclosure and path traversal attacks...
Does using a VPN slow down your Internet?
A Virtual Private Network VPN can stop others from snooping on or tampering with your Internet traffic. It does this by concealing your traffic inside an encrypted tunnel between you and your VPN provider. And because your traffic appears to join the the Internet from your VPN providers computer...
Unspecified Vulnerability in Tenda AC1200
The Tenda AC1200 is a wireless router from the Chinese company Tenda. A security vulnerability exists in Tenda AC1200 Model AC6 15.03.06.51multi devices, which originates from the default router speed test settings containing a malware download link named live or CNKI E-Learning. No details of th...
CVE-2020-28094
On Tenda AC1200 Model AC6 15.03.06.51multi devices, the default settings for the router speed test contain links to download malware named elive or CNKI E-Learning...
CVE-2020-28094
On Tenda AC1200 Model AC6 15.03.06.51multi devices, the default settings for the router speed test contain links to download malware named elive or CNKI E-Learning...
Default configuration
On Tenda AC1200 Model AC6 15.03.06.51multi devices, the default settings for the router speed test contain links to download malware named elive or CNKI E-Learning...
CVE-2020-28094
On Tenda AC1200 Model AC6 15.03.06.51multi devices, the default settings for the router speed test contain links to download malware named elive or CNKI E-Learning...
CVE-2020-28094
CVE-2020-28094 affects the Tenda AC1200 (Model AC6) with firmware 15.03.06.51_multi. The root cause is that the default router speed-test settings contain links to download malware named elive or CNKI E-Learning, which could lead to malware download without user intent. According to NVD, the vuln...
Tenda AC1200 安全漏洞
The Tenda AC1200 is a wireless router from the Chinese company Tenda. A security vulnerability exists in Tenda AC1200 Model AC6 15.03.06.51multi devices, which originates from the default router speed test settings containing a malware download link named live or CNKI E-Learning. No details of th...
Command injection
An issue was discovered on Xiaomi Mi WiFi R3G devices before 2.28.23-stable. The backup file is in tar.gz format. After uploading, the application uses the tar zxf command to decompress, so one can control the contents of the files in the decompressed directory. In addition, the application's sh...
CVE-2017-9085
Multiple cross-site scripting XSS vulnerabilities in Kodak InSite 6.5 to 8.0 allow remote attackers to inject arbitrary web script via the 1 "paramFile" parameter to /Site/Troubleshooting/DiagnosticReport.asp, or 2 "paramFile" parameter to /Site/Troubleshooting/SpeedTest.asp...
Information disclosure
The RBB SPEED TEST App for Android version 2.0.3 and earlier, RBB SPEED TEST App for iOS version 2.1.0 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2017-2278
CVE-2017-2278 affects the RBB SPEED TEST App for Android (v2.0.3 and earlier) and iOS (v2.1.0 and earlier). The root cause is failure to verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information. Public entries confirm the i...
CVE-2017-2278
The RBB SPEED TEST App for Android version 2.0.3 and earlier, RBB SPEED TEST App for iOS version 2.1.0 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Ubiquiti Inc.: Read-Only user can execute arbitraty shell commands on AirOS
This issue is similar to 119317, but happen on the server side data actionRemote. The function "parseHeaders" in remote.inc:38 don't sanitize the input received from the other server other side of the speed test. If the attacker started an speed test against a controlled server attacker itself an...