PT-2023-32129 · Beijing Baichuo · Beijing Baichuo Smart S45F Multi-Service Secure Gateway Intelligent Management Platform

Name of the Vulnerable Software and Affected Versions: Beijing Baichuo Smart S45F Multi-Service Secure Gateway Intelligent Management Platform versions up to 20230928 Description: A critical vulnerability was found in the Beijing Baichuo Smart S45F Multi-Service Secure Gateway Intelligent...

CVE-2023-5149

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in D-Link DAR-7000 up to 20151231. It has been rated as critical. This issue affects some unknown processing of the file /useratte/userattestation.php. The manipulation of the argument webimg leads to unrestricted upload. The attack may be...

RICOH Aficio SP 4210N vulnerable to cross-site scripting

Overview Aficio SP 4210N provided by RICOH COMPANY, LTD. contains a cross-site scripting vulnerability CWE-79 in Web Image Monitor. Yudai Morii, Takaya Noma, Hiroki Yasui, Takayuki Sasaki and Katsunari Yoshioka of Yokohama National University reported this vulnerability to IPA. JPCERT/CC...

Vulnerability fixed in RICOH Aficio SP 4210N

A vulnerability has been fixed in RICOH Aficio SP 4210N. The vulnerability allows a remote malicious person to perform a Cross-Site Scripting attack. To exploit this vulnerability exploitation requires access to the Web Image Monitor. RICOH has released updates to fix the vulnerability. More...

JVN#24659622: RICOH Aficio SP 4210N vulnerable to cross-site scripting

Aficio SP 4210N provided by RICOH COMPANY, LTD. contains a cross-site scripting vulnerability CWE-79 in Web Image Monitor. Impact An arbitrary script may be executed on the web browser of the user who is logging in to the product with the administrative privilege. Solution Update the firmware...

Dell BIOSConnect feature 缓冲区错误漏洞

Dell BIOSConnect is an underlying platform from Dell USA that enables BIOS to connect to Dell's HTTP backend and load images via HTTP methods. A buffer error vulnerability exists in the Dell BIOSConnect feature that can be exploited by an attacker to run arbitrary code and bypass UEFI restriction...

buildah: Crafted input tar file may lead to local file overwrite during image build process

A path traversal flaw was found in Buildah. This flaw allows an attacker to trick a user into building a malicious container image hosted on an HTTPs server and then write files to the user's system anywhere that the user has permissions...

RICOH Web Image Monitor 1.09 - HTML Injection Vulnerability

Exploit for hardware platform in category web applications Exploit Title: RICOH Web Image Monitor 1.09 - HTML Injection Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.ricoh.com/ Hardware Link: http://support-download.com/services/device/webhlp/nb/gen/v140cc1/en/ptop010.html Software...

RICOH Web Image Monitor 1.09 - HTML Injection

Exploit Title: RICOH Web Image Monitor 1.09 - HTML Injection Date: 2019-05-06 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.ricoh.com/ Hardware Link: http://support-download.com/services/device/webhlp/nb/gen/v140cc1/en/ptop010.html Software: RICOH Web Image Monitor Product Version:...

RICOH Web Image Monitor 1.09 HTML Injection

Exploit Title: RICOH Web Image Monitor 1.09 - HTML Injection Date: 2019-05-06 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.ricoh.com/ Hardware Link: http://support-download.com/services/device/webhlp/nb/gen/v140cc1/en/ptop010.html Software: RICOH Web Image Monitor Product Version:...

OnionScan - Onion Services Security Scan

The purpose of this tool is to make you a better onion service provider. You owe it to yourself and your users to ensure that attackers cannot easily exploit and deanonymize. Go Dependencies h12.me/socks - For the Tor SOCKS Proxy connection. github.com/xiam/exif - For EXIF data extraction...

ASPSiteware ASP Gallery 1.0 - SQL Injection

No description provided by source. Author: R4dc0re Exploit Title: ASPSiteware Gallery SQL injection Vulnerability Date: 04-12-2010 Vendor or Software Link: www.aspsiteware.com Category:WebApp Demo Link:http://www.aspsiteware.com/Gallery/ Version:1.0 Price:50$ Contact: [email protected] Website:...

Ricoh Printer Detection

The remote host is a Ricoh Printer. C Tenable, Inc. include'compat.inc'; if description scriptid50577; scriptversion"1.6"; scriptsetattributeattribute:"pluginmodificationdate", value:"2024/11/26"; scriptnameenglish:"Ricoh Printer Detection"; scriptsetattributeattribute:"synopsis", value: "The...

Ricoh Aficio Web Image Monitor 2.03 Cross Site Scripting

I was poking at some Ricoh MFPs several days ago, when I found this. It is nothing to get to terribly excited about as it's just a reflected XSS. However, the ability to abuse any trusted internal IP should be considered a threat. Companies have taken big hits from less. So without further ado,...

Ricoh Web Image Monitor 2.03 - Cross-Site Scripting

Ricoh Web Image Monitor 2.03 - Cross-Site Scripting source: https://www.securityfocus.com/bid/44772/info Ricoh web image monitor is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...

Ricoh Web Image Monitor 2.03 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/44772/info Ricoh web image monitor is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in t...

imgSvr.txt

Donato Ferrante Application: imgSvr http://adaimgsvr.sourceforge.net/ Version: 0.4 Bug: Index viewing Author: Donato Ferrante e-mail: [email protected] web: www.autistici.org/fdonato xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx 1. Description 2. The bug 3. The code ...