Evertz SDVN 3080ipx-10G - Unauthenticated Arbitrary Command Injection

The Evertz SDVN 3080ipx-10G is a High Bandwidth Ethernet Switching Fabric for Video Application. This device exposes a web management interface on port 80. This web management interface can be used by administrators to control product features, setup network switching, and register license among...

FatPipe WARP/IPVPN/MPVPN - Authorization Bypass

FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 contain a missing authorization caused by lack of access control in the web management interface, letting remote attackers access sensitive URLs, exploit requires no authentication. id: CVE-2021-27858 info: name:...

Karel IP Phone IP1211 Web Management Panel - Local File Inclusion

Karel IP Phone IP1211 Web Management Panel is vulnerable to local file inclusion and can allow remote attackers to access arbitrary files stored on the remote device via the 'cgiServer.exx' endpoint and the 'page' parameter. id: CVE-2025-34023 info: name: Karel IP Phone IP1211 Web Management Pane...

CVE-2026-19745

Introdução Olá a todos, em maio encontrei vulnerabilidades decentes no meu router, hoje finalmente posso mostrar a todos! Ambas as vulnerabilidades neste repositório são vulnerabilidades de Negação de Serviço autenticadas! Não sei os detalhes técnicos exatos de como ou porquê estas vulnerabilidad...

CVE-2017-6079-Blind-Command-Injection-In-Edgewater-Edgemarc-Devices-Exploit

Introdução Este exploit foi desenvolvido com base na descrição técnica da depthsecurity https://depthsecurity.com/blog/cve-2017-6079-blind-command-injection-in-edgewater-edgemarc-devices Descrição O aplicativo de gerenciamento web HTTP em dispositivos Edgewater Networks Edgemarc possui uma página...

CVE-2021-40904

CVE-2021-40904 - RCE via aplicação embarcada Dokuwiki do CheckMk Aplicação: Console Web de Gerenciamento CheckMK Revisão do Software: De 1.5.0 a 1.5.0p25 Tipo de ataque: RCE Solução: Atualize para a versão 1.6 ou superior. Resumo: O console de gerenciamento web do CheckMk Raw Edition versões 1.5....

CVE-2019-11287

CVE-2019-11287: DoS via Estouro de Heap no Plugin de Gerenciamento Web do RabbitMQ Pivotal RabbitMQ, versões 3.7.x anteriores a 3.7.21 e 3.8.x anteriores a 3.8.1, e RabbitMQ for Pivotal Platform, versões 1.16.x anteriores a 1.16.7 e 1.17.x anteriores a 1.17.4, contêm um plugin de gerenciamento we...

CVE-2021-35492

एक्सप्लॉइट जानकारी एक्सप्लॉइट शीर्षक: Wowza Streaming Engine 4.8.11+5 - Denial of Service CVE: CVE-2021-35492 दिनांक: 2021-10-06 एक्सप्लॉइट लेखक: N4nj0 सॉफ़्टवेयर लिंक: https://www.wowza.com/products/streaming-engine संस्करण: 4.8.11+5 परीक्षण किया गया: Wowza Streaming Engine = 4.8.11+5 भेद्यता...

CVE-2023-31853

CVE-2023-31853 Cudy LT400 के वेब-आधारित प्रबंधन इंटरफ़ेस में रिफ्लेक्टेड क्रॉस-साइट स्क्रिप्टिंग XSS हमला मौजूद है। पेज /cgi-bin/luci/admin/network/bandwidth में icon पैरामीटर के माध्यम से रिफ्लेक्टेड XSS है। हमले के तरीकों में पीड़ित को एक विशेष रूप से तैयार अनुरोध भेजना शामिल होगा जिसमें...

Cisco VPN Routers - Unauthenticated Arbitrary File Upload

A vulnerability in the web-based management interface of Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an unauthenticated, remote attacker to upload arbitrary files to an affected device. This vulnerability is due to insufficient authorization enforcement...

CVE-2020-13259

CVE-2020-13259 PoC de Tomada de Conta Completa no RAD SecFlow-1v Uma vulnerabilidade na interface de gerenciamento baseada na web do RAD SecFlow-1v poderia permitir que um atacante remoto não autenticado realize um ataque de cross-site request forgery CSRF em um sistema afetado. A vulnerabilidade...

CVE-2026-104075

TVU Networks Receiver/Transceiver devices running firmware before version 7.9 contain an authentication bypass vulnerability in the web management login endpoint POST /tvu/Login that allows remote unauthenticated attackers to obtain an administrative session by submitting an empty or absent...

CVE-2026-104075

TVU Networks Receiver/Transceiver devices running firmware before version 7.9 are susceptible to an authentication bypass vulnerability in the web management login endpoint (POST /tvu/Login ). By submitting a crafted HTTP request with an empty or absent UserName parameter, remote unauthenticated ...

EUVD-2026-95250

TVU Networks Receiver/Transceiver devices running firmware before version 7.9 contain an authentication bypass vulnerability in the web management login endpoint POST /tvu/Login that allows remote unauthenticated attackers to obtain an administrative session by submitting an empty or absent...

CVE-2026-36958

CVE-2026-36958: Negação de Serviço via Requisições HTTP Concorrentes ID CVE: CVE-2026-36958 Data: 2026-04-29 Descobridor: Kirubel Solomne Fornecedor: U-SPEED Produto: Roteador U-SPEED Versão do Firmware: V1.0.0 CWE: CWE-400 - Consumo de Recursos Não Controlado Descrição O firmware V1.0.0 do...

CVE-2026-94585

An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions before 9.2.2d running on the MXG610 platform. An unauthenticated, network-adjacent attacker can exploit an unauthenticated endpoint within the Single Sign-On SSO workflow to gain...

CVE-2026-87664

A session context forgery vulnerability exists in the web management daemon of Brocade Fabric OS versions 9.2.2d and 10.0.0 through 10.0.0a1. When processing local inter-process communication IPC storage callbacks, the service accepts and registers session structures including administrative role...

CVE-2026-87661

Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 directly accepts Apache configuration file data during service setup or re-initialization. An attacker capable of corrupting the configuration structure will prevent the web management service from starting or recovering during...

CVE-2025-70545

Roteador PPC Belden ONT 2K05X Autor : Jeyabalaji Código do Produto Afetado: PPC 2K05X Router - V1.1.9206L Testado em : Windows 11 CVE : CVE-2025-70545 Descrição: Existe uma vulnerabilidade de cross-site scripting XSS armazenada na interface de gerenciamento web do roteador PPC Belden ONT 2K05X...

CVE-2026-94585

Brocade Fabric OS versions before 9.2.2d running on the MXG610 platform are susceptible to an authentication bypass vulnerability in the web management interface. A network-adjacent attacker can exploit an unauthenticated endpoint within the Single Sign-On (SSO) workflow to gain administrative ac...