The vulnerability in the embedded software of NETGEAR routers such as CBR40, EAX20, EAX80, EX6120, EX6130, EX7500, R7000, R7900, R8000, RAX200, RBS40V, RBW30, EX3700, MR60, R7000P, RAX20, RAX45, RAX80, EX3800, MS60, R6900P, RAX15, RAX50, RAX75, RBR750, RBR850, RBS750, RBS850, RBK752, and RBK852 exists due to the lack of protective measures for website structures. This vulnerability allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the embedded software of NETGEAR routers such as CBR40, EAX20, EAX80, EX6120, EX6130, EX7500, R7000, R7900, R8000, RAX200, RBS40V, RBW30, EX3700, MR60, R7000P, RAX20, RAX45, RAX80, EX3800, MS60, R6900P, RAX15, RAX50, RAX75, RBR750, RBR850, RBS750, RBS850, RBK752, and RBK852...

Backdoor.Win32.BluanWeb Remote Code Execution

Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/30903ccbc6747c0da5a2775884b78def.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.BluanWeb Vulnerability: Unauthenticated Remote Code Execution Description: The malwar...

The vulnerability in the web interface for managing server applications used in food industrial enterprises, AK-EM 800, allows a hacker to lock out any user account at will.

The vulnerability in the web-based interface for managing server applications used in food industry management systems, AK-EM 800, stems from the locking of user accounts after five consecutive unsuccessful attempts to log in to the system. Exploiting this vulnerability could allow a malicious...

The vulnerability in the web interface for managing server applications used in food industrial enterprises, AK-EM 800, allows a perpetrator to gain unauthorized access to the debugging service.

The vulnerability in the web-based management interface for the server application used to manage food manufacturing enterprises AK-EM 800 is related to errors in password generation. Exploiting this vulnerability can allow an attacker to gain unauthorized access to the debugging service...

The vulnerability of the web interface of the server application for managing food industry businesses AK-EM 800 lies in the use of rigidly encrypted user accounts (users “admin”, “administrator”, “user”, and “guest”). This allows a perpetrator to increase their privileges.

The vulnerability of the web interface of the industrial management application AK-EM 800 relates to the use of rigidly encrypted user credentials users “admin”, “administrator”, “user”, and “guest”, with the default password being “danfoss”. Exploiting this vulnerability could allow an attacker ...

CVE-2021-43774

A risky-algorithm issue was discovered on Fujifilm DocuCentre-VI C4471 1.8 devices. An attacker that obtained access to the administrative web interface of a printer e.g., by using the default credentials can download the address book file, which contains the list of users domain users, FTP users...

Default credentials

A risky-algorithm issue was discovered on Fujifilm DocuCentre-VI C4471 1.8 devices. An attacker that obtained access to the administrative web interface of a printer e.g., by using the default credentials can download the address book file, which contains the list of users domain users, FTP users...

CVE-2021-43774

A risky-algorithm issue was discovered on Fujifilm DocuCentre-VI C4471 1.8 devices. An attacker that obtained access to the administrative web interface of a printer e.g., by using the default credentials can download the address book file, which contains the list of users domain users, FTP users...

PT-2022-1785 · Cisco · Cisco Telepresence Video Communication Server +1

Name of the Vulnerable Software and Affected Versions: Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS affected versions not specified Description: The issue is related to multiple vulnerabilities in the API and web-based management interfaces of the affected devices...

Liferay Portal 安全漏洞

Liferay Portal is a J2EE-based portal solution from Liferay, Inc. The solution uses technologies such as EJB as well as JMS, and can be used as a Web publishing and sharing workspace, enterprise collaboration platform, social network, and so on. A security vulnerability exists in Liferay Portal...

CVE-2021-4039

A command injection vulnerability in the web interface of the Zyxel NWA-1100-NH firmware could allow an attacker to execute arbitrary OS commands on the device...

CVE-2021-4039

A command injection vulnerability in the web interface of the Zyxel NWA-1100-NH firmware could allow an attacker to execute arbitrary OS commands on the device...

Command injection

A command injection vulnerability in the web interface of the Zyxel NWA-1100-NH firmware could allow an attacker to execute arbitrary OS commands on the device...

CVE-2021-4039

A command injection vulnerability in the web interface of the Zyxel NWA-1100-NH firmware could allow an attacker to execute arbitrary OS commands on the device...

CVE-2021-4039

CVE-2021-4039 affects Zyxel NWA-1100-NH. The web interface contains a command injection flaw that could allow an attacker to execute arbitrary OS commands on the device via network access without user interaction. This is a high-severity issue (CVSS v3.1: 9.8, Network, Low exploitability, no user...

Zyxel Nwa-1100-Nh 操作系统命令注入漏洞

The Zyxel Nwa-1100-Nh is a remote Poe access point from China's Heqin Technology Zyxel. The Zyxel NWA-1100-NH suffers from an operating system command injection vulnerability that stems from a command injection vulnerability in the web interface of the Zyxel NWA-1100-NH firmware that could allow ...

PT-2022-10387

Name of the Vulnerable Software and Affected Versions Zyxel VMG3625-T50B version V5.50ABTL.0b2k Zyxel NWA-1100-NH affected versions not specified Description A vulnerability exists that could allow an attacker to obtain sensitive information or execute arbitrary OS commands on the device. The iss...

Zyxel NWA-1100-NH 命令注入漏洞

The Zyxel NWA-1100-NH is a remote Poe access point from China's Heqin Technology Zyxel. The Zyxel NWA-1100-NH suffers from a command injection vulnerability that originates in the web interface of the Zyxel NWA-1100-NH firmware that could allow an attacker to execute arbitrary operating system...

PT-2022-16585 · Apache · Apache Airflow

Name of the Vulnerable Software and Affected Versions: Apache Airflow versions prior to 2.2.4 Description: The issue arises from some example DAGs in Apache Airflow not properly sanitizing user-provided params, making them susceptible to OS Command Injection from the web UI. Recommendations: For...

CVE-2020-14504

The web interface of the 1734-AENTR communication module mishandles authentication for HTTP POST requests. A remote, unauthenticated attacker can send a crafted request that may allow for modification of the configuration settings...