Fire Web Server Pre-Alpha Denial Of Service

!/usr/bin/python ''' Exploit Title: Fire Web Server Pre-Alpha - Remote Denial of Service PoC Date: 2020-Jun-26 Exploit Author: Saeed reza Zamanian Vendor Homepage: https://sourceforge.net/projects/firewebserver/ Software Link: https://sourceforge.net/projects/firewebserver/files/ Version: Pre-Alp...

PHP 7.4.x < 7.4.5 Multiple Vulnerabilities

According to its banner, the version of PHP running on the remote web server is prior to 7.2.30, 7.3.x prior to 7.3.17, or 7.4.x prior to 7.4.5. It is, therefore, affected by multiple vulnerabilities: - An out-of-bounds read error exists in urldecode due to improper data validation checks. An...

Suqian Xinchao Information Technology Limited Company PHP cloud talent system (phpyun) file upload vulnerability

PHP cloud talent system phpyun is an open source talent and enterprise job search recruitment, hiring solutions built using PHP and MySQL database. A file upload vulnerability exists in the PHP Cloud Talent System phpyun of Suqian Xinchao Information Technology Limited. An attacker can exploit th...

CVE-2020-11959

An unsafe configuration of nginx lead to information leak in Xiaomi router R3600 ROM before 1.0.50...

Code execution vulnerability in KingView (CNVD-2020-45671)

KingView is an industrial automation configuration software produced by Beijing Asian Control Technology Development Co. A code execution vulnerability exists in KingView, which can be exploited by an attacker to gain control of a web server...

Code execution vulnerability in KingView (CNVD-2020-45670)

KingView is an industrial automation configuration software produced by Beijing Asian Control Technology Development Co. A code execution vulnerability exists in KingView, which can be exploited by an attacker to gain control of a web server...

Command Execution Vulnerability in PHP Version of Nettie CMS of Fuzhou Nettie Software Technology Co.

Nettitanium CMS OTCMS PHP version based on PHP + sqlite/mysql technical architecture, UTF-8 coding, not only can be applied to a wide range of news/article publishing type of website, but also applicable to corporate websites. A command execution vulnerability exists in the PHP version of Fuzhou...

Fedora: Security Advisory for mod_auth_openidc (FEDORA-2020-1106ece93a)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

File Upload Vulnerability in Bole Card Issuing System of Zunyi Xintengda Information Technology Co.

Zunyi Xintengda Information Technology Co., Ltd. is a professional e-commerce operation and network marketing services company. A file upload vulnerability exists in Zunyi Xintengda Information Technology Co., Ltd.'s Bole hairpin system, which can be exploited by an attacker to gain control of a...

Code Execution Vulnerability in KingView of Beijing Asian Control Technology Development Co.

KingView is an industrial automation configuration software produced by Beijing Asian Control Technology Development Co. A code execution vulnerability exists in KingView, which can be exploited by an attacker to gain control of a web server...

CVE-2020-14946

downloadFile.ashx in the Administrator section of the Surveillance module in Global RADAR BSA Radar 1.6.7234.24750 and earlier allows users to download transaction files. When downloading the files, a user is able to view local files on the web server by manipulating the FileName and FilePath...

CVE-2020-14946

CVE-2020-14946 affects Global RADAR BSA Radar versions 1.6.7234.24750 and earlier. The vulnerability resides in the Administrator section of the Surveillance module via the /UC/downloadFile.ashx endpoint, where manipulating FileName and FilePath (in the URL or through a proxy) can disclose local ...

httpd: mod_http2: possible crash on late upgrade

A vulnerability was found in Apache HTTP Server 2.4.34 to 2.4.38. When HTTP/2 was enabled for a http: host or H2Upgrade was enabled for h2 on a https: host, an Upgrade request from http/1.1 to http/2 that was not the first request on a connection could lead to a misconfiguration and crash. Server...

httpd: mod_proxy_ftp use of uninitialized value

A flaw was found in Apache's HTTP server httpd .The modproxyftp module may use uninitialized memory with proxying to a malicious FTP server. The highest threat from this vulnerability is to data confidentiality...

httpd: mod_http2: possible crash on late upgrade

A vulnerability was found in Apache HTTP Server 2.4.34 to 2.4.38. When HTTP/2 was enabled for a http: host or H2Upgrade was enabled for h2 on a https: host, an Upgrade request from http/1.1 to http/2 that was not the first request on a connection could lead to a misconfiguration and crash. Server...

Vulnerability in Cosminexus HTTP Server

Overview A vulnerability CVE-2019-1551 exists in Cosminexus HTTP Server. Impact Regarding the impact of the vulnerability, please refer to the vendor advisory. Solution Please refer to the 'Vendor Information' section for the official countermeasure and take appropriate action...

KingView Buffer Overflow Vulnerability

KingView is an industrial automation configuration software produced by Beijing Asian Control Technology Development Co. A buffer overflow vulnerability exists in KingView. An attacker can exploit this vulnerability to gain control of a web server...

CVE-2020-3337

A vulnerability in the web server of Cisco Umbrella could allow an unauthenticated, remote attacker to redirect a user to an undesired web page. The vulnerability is due to improper input validation of the URL parameters in an HTTP request that is sent to an affected device. An attacker could...

Input validation

A vulnerability in the web server of Cisco Umbrella could allow an unauthenticated, remote attacker to redirect a user to an undesired web page. The vulnerability is due to improper input validation of the URL parameters in an HTTP request that is sent to an affected device. An attacker could...

CVE-2020-3337

Cisco Umbrella web server vulnerability (CVE-2020-3337) stems from improper input validation of URL parameters in an HTTP request, enabling an unauthenticated, remote attacker to redirect users to a malicious URL. Connected sources confirm affected product: Cisco Umbrella web server; vulnerabilit...