31 matches found
ConceptronicIPCam_MultipleVulnerabilities
Conceptronic IP 카메라 0.61.X 웹 펌웨어의 다중 취약점 Conceptronic IP 카메라에서 CSRF 및 서비스 거부DoS 취약점이 발견되었습니다. CVE| 설명 ---|--- CVE-2018-6407| 인증되지 않은 원격 서비스 거부DoS 취약점 CVE-2018-6408| CSRF를 통해 관리자 사용자 자격 증명 변경 또는 새 사용자 생성 가능 0. 소개 Conceptronic 카메라는 사운드와 비디오를 녹화하고 네트워크를 통해 스트리밍할 수 있습니다. 현재 이러한 종류의 IP 카메라는 주로 제어 및 보안...
CVE-2025-56752
A vulnerability in the Ruijie RG-ES series switch firmware ESW1.01B1P39 enables remote attackers to fully bypass authentication mechanisms, providing them with unrestricted access to alter administrative settings and potentially seize control of affected devices via crafted HTTP POST request to...
CVE-2025-56752
A vulnerability in the Ruijie RG-ES series switch firmware ESW1.01B1P39 enables remote attackers to fully bypass authentication mechanisms, providing them with unrestricted access to alter administrative settings and potentially seize control of affected devices via crafted HTTP POST request to...
CVE-2025-56752: Improper Authentication
A vulnerability in the Ruijie RG-ES series switch firmware ESW1.01B1P39 enables remote attackers to fully bypass authentication mechanisms, providing them with unrestricted access to alter administrative settings and potentially seize control of affected devices via crafted HTTP POST request to...
CVE-2025-56752
The Ruijie RG-ES series switch is vulnerable in firmware version ESW_1.0(1)B1P39 due to an authentication bypass. A remote attacker can send a crafted HTTP POST request to the /user.cgi endpoint to fully bypass authentication mechanisms. This allows unauthorized access to alter administrative set...
Command injection
OS command injection in user.cgi in ASUSTOR ADM version 3.1.1 allows attackers to execute system commands as root via the "secretkey" URL parameter...
CVE-2018-12312
OS command injection in user.cgi in ASUSTOR ADM version 3.1.1 allows attackers to execute system commands as root via the "secretkey" URL parameter...
CVE-2018-12307
OS command injection in user.cgi in ASUSTOR ADM version 3.1.1 allows attackers to execute system commands as root via the "name" POST parameter...
CVE-2018-12312
OS command injection in user.cgi in ASUSTOR ADM version 3.1.1 allows attackers to execute system commands as root via the "secretkey" URL parameter...
CVE-2018-12307: Improper Neutralization of Special Elements used in an OS Command
OS command injection in user.cgi in ASUSTOR ADM version 3.1.1 allows attackers to execute system commands as root via the "name" POST parameter...
PT-2018-11105
Name of the Vulnerable Software and Affected Versions ASUSTOR ADM version 3.1.1 Description The issue allows attackers to execute system commands as root via the name POST parameter in the user.cgi module. This can be exploited by sending a malicious POST request to the vulnerable endpoint...
CVE-2018-12312: Improper Neutralization of Special Elements used in an OS Command
OS command injection in user.cgi in ASUSTOR ADM version 3.1.1 allows attackers to execute system commands as root via the "secretkey" URL parameter...
PT-2018-11111
Name of the Vulnerable Software and Affected Versions ASUSTOR ADM version 3.1.1 Description The issue allows attackers to execute system commands as root via the secret key URL parameter in the user.cgi module. Recommendations For ASUSTOR ADM version 3.1.1, avoid using the secret key parameter in...
ASUSTOR Data Master Account Enumeration Vulnerability
ASUSTOR Data Master ADM is a dedicated operating system for ASUSTOR NAS storage devices from ASUSTOR. A security vulnerability exists in ASUSTOR ADM 3.1.5 and earlier versions. A remote attacker can exploit this vulnerability to enumerate all accounts on the device with the help of the user.cgi...
Code injection
ASUSTOR Data Master 3.1.5 and below allows authenticated remote non-administrative users to enumerate all user accounts via user.cgi...
CVE-2018-15696
ASUSTOR Data Master 3.1.5 and below allows authenticated remote non-administrative users to enumerate all user accounts via user.cgi...
CVE-2018-15696
ASUSTOR Data Master 3.1.5 and below allows authenticated remote non-administrative users to enumerate all user accounts via user.cgi...
CVE-2018-15696: Exposure of Sensitive Information to an Unauthorized Actor
ASUSTOR Data Master 3.1.5 and below allows authenticated remote non-administrative users to enumerate all user accounts via user.cgi...
suchhits.de XSS vulnerability
Open Bug Bounty ID: OBB-627396 Description| Value ---|--- Affected Website:| suchhits.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...