D-Link Dir-X1860 安全漏洞

The D-Link Dir-X1860 is a dual-band router from D-Link, a Chinese company. The security vulnerability in the D-Link DIR-X1860 version 1.03 RevA1, which stems from the lack of effective information protection and filtering of information disclosure in the web interface, could be exploited by a...

The vulnerability of the web interface of NETGEAR RAX43 integrated software routers allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the web interface of NETGEAR RAX43 router software relates to the transmission of data in an open manner. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information through HTTP requests...

The vulnerability in the embedded software of NETGEAR routers such as CBR40, EAX20, EAX80, EX6120, EX6130, EX7500, R7000, R7900, R8000, RAX200, RBS40V, RBW30, EX3700, MR60, R7000P, RAX20, RAX45, RAX80, EX3800, MS60, R6900P, RAX15, RAX50, RAX75, RBR750, RBR850, RBS750, RBS850, RBK752, and RBK852 exists due to the lack of protective measures for website structures. This vulnerability allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the embedded software of NETGEAR routers such as CBR40, EAX20, EAX80, EX6120, EX6130, EX7500, R7000, R7900, R8000, RAX200, RBS40V, RBW30, EX3700, MR60, R7000P, RAX20, RAX45, RAX80, EX3800, MS60, R6900P, RAX15, RAX50, RAX75, RBR750, RBR850, RBS750, RBS850, RBK752, and RBK852...

The vulnerability in the web interface for managing server applications used in food industrial enterprises, AK-EM 800, allows a hacker to lock out any user account at will.

The vulnerability in the web-based interface for managing server applications used in food industry management systems, AK-EM 800, stems from the locking of user accounts after five consecutive unsuccessful attempts to log in to the system. Exploiting this vulnerability could allow a malicious...

The vulnerability of the web interface of the server application for managing food industry businesses AK-EM 800 lies in the use of rigidly encrypted user accounts (users “admin”, “administrator”, “user”, and “guest”). This allows a perpetrator to increase their privileges.

The vulnerability of the web interface of the industrial management application AK-EM 800 relates to the use of rigidly encrypted user credentials users “admin”, “administrator”, “user”, and “guest”, with the default password being “danfoss”. Exploiting this vulnerability could allow an attacker ...

The vulnerability in the web interface for managing server applications used in food industrial enterprises, AK-EM 800, allows a perpetrator to gain unauthorized access to the debugging service.

The vulnerability in the web-based management interface for the server application used to manage food manufacturing enterprises AK-EM 800 is related to errors in password generation. Exploiting this vulnerability can allow an attacker to gain unauthorized access to the debugging service...

Backdoor.Win32.BluanWeb Remote Code Execution

Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/30903ccbc6747c0da5a2775884b78def.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.BluanWeb Vulnerability: Unauthenticated Remote Code Execution Description: The malwar...

CVE-2021-43774

A risky-algorithm issue was discovered on Fujifilm DocuCentre-VI C4471 1.8 devices. An attacker that obtained access to the administrative web interface of a printer e.g., by using the default credentials can download the address book file, which contains the list of users domain users, FTP users...

Default credentials

A risky-algorithm issue was discovered on Fujifilm DocuCentre-VI C4471 1.8 devices. An attacker that obtained access to the administrative web interface of a printer e.g., by using the default credentials can download the address book file, which contains the list of users domain users, FTP users...

CVE-2021-43774

A risky-algorithm issue was discovered on Fujifilm DocuCentre-VI C4471 1.8 devices. An attacker that obtained access to the administrative web interface of a printer e.g., by using the default credentials can download the address book file, which contains the list of users domain users, FTP users...

PT-2022-1785 · Cisco · Cisco Telepresence Video Communication Server +1

Name of the Vulnerable Software and Affected Versions: Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS affected versions not specified Description: The issue is related to multiple vulnerabilities in the API and web-based management interfaces of the affected devices...

Liferay Portal 安全漏洞

Liferay Portal is a J2EE-based portal solution from Liferay, Inc. The solution uses technologies such as EJB as well as JMS, and can be used as a Web publishing and sharing workspace, enterprise collaboration platform, social network, and so on. A security vulnerability exists in Liferay Portal...

CVE-2021-4039

A command injection vulnerability in the web interface of the Zyxel NWA-1100-NH firmware could allow an attacker to execute arbitrary OS commands on the device...

CVE-2021-4039

A command injection vulnerability in the web interface of the Zyxel NWA-1100-NH firmware could allow an attacker to execute arbitrary OS commands on the device...

Command injection

A command injection vulnerability in the web interface of the Zyxel NWA-1100-NH firmware could allow an attacker to execute arbitrary OS commands on the device...

CVE-2021-4039

A command injection vulnerability in the web interface of the Zyxel NWA-1100-NH firmware could allow an attacker to execute arbitrary OS commands on the device...

CVE-2021-4039

CVE-2021-4039 affects Zyxel NWA-1100-NH. The web interface contains a command injection flaw that could allow an attacker to execute arbitrary OS commands on the device via network access without user interaction. This is a high-severity issue (CVSS v3.1: 9.8, Network, Low exploitability, no user...

Zyxel Nwa-1100-Nh 操作系统命令注入漏洞

The Zyxel Nwa-1100-Nh is a remote Poe access point from China's Heqin Technology Zyxel. The Zyxel NWA-1100-NH suffers from an operating system command injection vulnerability that stems from a command injection vulnerability in the web interface of the Zyxel NWA-1100-NH firmware that could allow ...

PT-2022-10387

Name of the Vulnerable Software and Affected Versions Zyxel VMG3625-T50B version V5.50ABTL.0b2k Zyxel NWA-1100-NH affected versions not specified Description A vulnerability exists that could allow an attacker to obtain sensitive information or execute arbitrary OS commands on the device. The iss...

Zyxel NWA-1100-NH 命令注入漏洞

The Zyxel NWA-1100-NH is a remote Poe access point from China's Heqin Technology Zyxel. The Zyxel NWA-1100-NH suffers from a command injection vulnerability that originates in the web interface of the Zyxel NWA-1100-NH firmware that could allow an attacker to execute arbitrary operating system...