Prometheus Blackbox Exporter - Server-Side Request Forgery (SSRF)

Prometheus Blackbox Exporter through 0.17.0 contains a server-side request forgery caused by unsanitized target parameter in /probe, letting attackers perform SSRF attacks, exploit requires sending crafted target parameter. id: CVE-2020-16248 info: name: Prometheus Blackbox Exporter - Server-Side...

The vulnerability of the /goform/diag_traceroute file in D-Link DIR-823X router microprogramming software allows a attacker to execute arbitrary commands.

The vulnerability of the /goform/diagtraceroute function in D-Link DIR-823X router microprogramming software is related to the lack of data cleaning at the control level when processing the targetaddr parameter. Exploiting this vulnerability allows an attacker to execute arbitrary commands by...

CVE-2011-10017

Snort Report versions 1.3.2 contains a remote command execution vulnerability in the nmap.php and nbtscan.php scripts. These scripts fail to properly sanitize user input passed via the target GET parameter, allowing attackers to inject arbitrary shell commands. Exploitation requires no...