PT-2022-22083 · Jenkins · Jenkins Vrealize Orchestrator Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins vRealize Orchestrator Plugin versions 3.0 and earlier Description: A missing permission check in the plugin allows attackers with Overall/Read permission to send an HTTP POST request to an attacker-specified URL, such as...

CVE-2022-26258

D-Link DIR-820L 1.05B03 was discovered to contain remote command execution RCE vulnerability via HTTP POST to get set ccp...

The vulnerability of the NX-API implementation for Cisco NX-OS router systems allows a hacker to execute arbitrary commands.

The vulnerability of the NX-API implementation for Cisco NX-OS router systems involves the failure to eliminate special elements used in operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands by sending a specially crafted HTTP POST request...

CVE-2021-31227

An issue was discovered in HCC embedded InterNiche 4.0.1. A potential heap buffer overflow exists in the code that parses the HTTP POST request, due to an incorrect signed integer comparison. This vulnerability requires the attacker to send a malformed HTTP packet with a negative Content-Length,...

Sonicwall SMA100 Operating System Command Injection Vulnerability

The Sonicwall SMA100 is a secure access gateway device from Sonicwall USA. A command injection vulnerability exists in the SonicWall SMA100 appliance that allows an authenticated administrative user to perform OS command injection using HTTP POST parameters. No detailed vulnerability details are...

VulnCheck KEV: CVE-2017-9841

PHPUnit allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a "?php " substring, as demonstrated by an attack on a site with an exposed /vendor folder, i.e., external access to the /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php URI...

CVE-2020-5757

Grandstream UCM6200 series firmware version 1.0.20.23 and below is vulnerable to OS command injection via HTTP. An authenticated remote attacker can bypass command injection mitigations and execute commands as the root user by sending a crafted HTTP POST to the UCM's "New" HTTPS API...

USN-4415-1 coturn vulnerabilities

Felix Dörre discovered that coTURN response buffer is not initialized properly. An attacker could possibly use this issue to obtain sensitive information. CVE-2020-4067 It was discovered that coTURN web server incorrectly handled HTTP POST requests. An attacker could possibly use this issue to...

Unspecified vulnerability in CIPPlanner CIPAce (CNVD-2020-21815)

CIPPlanner CIPAce is a suite of business process automation and application development platforms from the US-based CIPPlanner. CIPPlanner CIPAce contains a security vulnerability that can be exploited by an attacker to send an HTTP POST request using injected HTML data, which can later be utiliz...

CVE-2019-3994

ELOG 3.1.4-57bea22 and below is affected by a denial of service vulnerability due to a use after free. A remote unauthenticated attacker can crash the ELOG server by sending multiple HTTP POST requests which causes the ELOG function retrieveurl to use a freed variable...

The vulnerability of D-Link DIR-655, D-Link DIR-866L, D-Link DIR-652, and D-Link DHP-1565 router microprogramming software lies in insufficient checking of arguments passed in commands, allowing attackers to execute arbitrary code.

The vulnerability of D-Link DIR-655, D-Link DIR-866L, D-Link DIR-652, and D-Link DHP-1565 router microprogramming software is related to insufficient testing of the arguments passed in the command. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a...

CVE-2019-5071

An exploitable command injection vulnerability exists in the /goform/WanParameterSetting functionality of Tenda AC9 Router AC1200 Smart Dual-Band Gigabit WiFi Route AC9V1.0 Firmware V15.03.05.16multiTRU. A specially crafted HTTP POST request can cause a command injection in the DNS1 post...

File Sharing Wizard Buffer Overflow Vulnerability

File Sharing Wizard is a set of file sharing transfer software. A buffer overflow vulnerability exists in the HTTP POST parameter in File Sharing Wizard version 1.5.0, which can be exploited by remote attackers to execute arbitrary code...

CVE-2019-16724

File Sharing Wizard 1.5.0 allows a remote attacker to obtain arbitrary code execution by exploiting a Structured Exception Handler SEH based buffer overflow in an HTTP POST parameter, a similar issue to CVE-2010-2330 and CVE-2010-2331...

PT-2019-14795 · Upredsun · File Sharing Wizard

File Sharing Wizard 1.5.0 allows a remote attacker to obtain arbitrary code execution by exploiting a Structured Exception Handler SEH based buffer overflow in an HTTP POST parameter, a similar issue to CVE-2010-2330 and CVE-2010-2331...

PT-2019-4006 · D Link · Dhp-1565 +9

Name of the Vulnerable Software and Affected Versions: D-Link DIR-655C versions D-Link DIR-866L versions D-Link DIR-652 versions D-Link DHP-1565 versions D-Link DIR-855L versions D-Link DAP-1533 versions D-Link DIR-862L versions D-Link DIR-615 versions D-Link DIR-835 versions D-Link DIR-825...

solr: remote code execution due to unsafe deserialization

A flaw was found in the Apache Solr's Config API, where it would permit the configuration of the JMX server via an HTTP POST request. An attacker could use this flaw to direct traffic to a malicious RMI server, and then trigger remote code execution or conduct further attacks...

PT-2019-9056 · Lg · Lg N1A1 Nas

Name of the Vulnerable Software and Affected Versions: LG N1A1 NAS version 3718.510 Description: The issue allows for remote command execution, enabling the execution of arbitrary code. The attack vector involves an HTTP POST request with specific parameters. Recommendations: For LG N1A1 NAS...

Mikrotik RouterOS Memory Exhaustion Vulnerability

MikroTik RouterOS is a set of routing operating system developed based on Linux core by MikroTik Latvia. The system turns a PC computer into a professional router. A memory exhaustion vulnerability exists in Mikrotik RouterOS versions prior to 6.42.7 and prior to 6.40.9. A remote attacker could...

Belkin Wemo Insight Smart Plug Stack Buffer Overflow Vulnerability

Belkin Wemo Insight Smart Plug is a smart plug device from Belkin USA. A stack buffer overflow vulnerability exists in the libUPnPHndlr.so file in the Belkin Wemo Insight Smart Plug. A remote attacker can exploit this vulnerability to bypass local security protections with the help of specially...