CVE-2020-11926

A security vulnerability exists in the Luvion Grand Elite 3 Connect smart monitor (versions through 2020-02-25 ). The root cause allows an unauthenticated web request, such as one for a JavaScript file , to leak the device's username and password credentials. Additionally, this request discloses ...

CVE-2020-11926: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Luvion Grand Elite 3 Connect through 2020-02-25. Clients can authenticate themselves to the device using a username and password. These credentials can be obtained through an unauthenticated web request, e.g., for a JavaScript file. Also, the disclosed information...

PT-2024-13350 · Mercusys · Mercusys Mw325R

Name of the Vulnerable Software and Affected Versions: Mercusys MW325R EU V3 version 1.11.0 221019 Description: An issue allows a WAN attacker to make the admin interface unreachable via an unauthenticated HTTP request. The verification of user data does not occur, and the web server remains...

Cross site request forgery (csrf)

Cribl UI 1.5.0 allows remote attackers to run arbitrary commands via an unauthenticated web request...

CVE-2019-11076

Cribl UI 1.5.0 allows remote attackers to run arbitrary commands via an unauthenticated web request...

CVE-2018-3949: Improper Limitation of a Pathname to a Restricted Directory

An exploitable information disclosure vulnerability exists in the HTTP server functionality of the TP-Link TL-R600VPN. A specially crafted URL can cause a directory traversal, resulting in the disclosure of sensitive system files. An attacker can send either an unauthenticated or an authenticated...

Denial of service

An exploitable denial-of-service vulnerability exists in the URI-parsing functionality of the TP-Link TL-R600VPN HTTP server. A specially crafted URL can cause the server to stop responding to requests, resulting in downtime for the management portal. An attacker can send either an unauthenticate...

CVE-2018-3948: Improper Input Validation

An exploitable denial-of-service vulnerability exists in the URI-parsing functionality of the TP-Link TL-R600VPN HTTP server. A specially crafted URL can cause the server to stop responding to requests, resulting in downtime for the management portal. An attacker can send either an unauthenticate...