CVE-2017-11564

The CVE-2017-11564 entry concerns the D-Link EyeOn Baby Monitor (DCS-825L) running 1.08.1, which has multiple command-injection vulnerabilities in its web service framework. The issue allows an attacker to forge crafted HTTP requests to execute commands, with authentication required before the at...

CVE-2017-12575

CVE-2017-12575 affects NEC Aterm WG2600HP2 (and related WG2600HP variants). Connected sources describe an improper access control issue where web service APIs for the device configuration do not require authentication, allowing an attacker to retrieve sensitive data (e.g., DHCP clients, firmware ...

CVE-2018-1157

Mikrotik RouterOS before 6.42.7 and 6.40.9 is vulnerable to a memory exhaustion vulnerability. An authenticated remote attacker can crash the HTTP server and in some circumstances reboot the system via a crafted HTTP POST request...

NEC Aterm WG2600HP2 Information Disclosure

Reserved CVE: CVE-2017-12575 Description The router has a set of web service APIs for access to and setup of the configuration. Some of APIs don't require authentication. An attacker could exploit this vulnerability by sending a crafted HTTP request to retrieve DHCP clients, firmware version, and...

CVE-2018-14058

Pimcore before 5.3.0 allows SQL Injection via the REST web service API...

CVE-2018-14058

CVE-2018-14058 affects Pimcore prior to 5.3.0, enabling SQL Injection via the REST web service API. The vulnerability targets the Pimcore REST API and can disclose data through injectable queries; exact root cause details are not provided in the initial documents, but multiple sources corroborate...

apache-cxf: TLS hostname verification does not work correctly with com.sun.net.ssl.*

It was discovered that when Apache CXF is configured to use the system property com.sun.net.ssl.internal.www.protocol ,it uses reflection to make the HostnameVerifier work with old com.sun.net.ssl.HostnameVerifier interface. Although the CXF implementation throws an exception, which is caught in...

cxf: Improper size validation in message attachment header for JAX-WS and JAX-RS services

Apache CXF supports sending and receiving attachments via either the JAX-WS or JAX-RS specifications. It is possible to craft a message attachment header that could lead to a Denial of Service DoS attack on a CXF web service provider. Both JAX-WS and JAX-RS services are vulnerable to this attack...

cxf: Improper size validation in message attachment header for JAX-WS and JAX-RS services

Apache CXF supports sending and receiving attachments via either the JAX-WS or JAX-RS specifications. It is possible to craft a message attachment header that could lead to a Denial of Service DoS attack on a CXF web service provider. Both JAX-WS and JAX-RS services are vulnerable to this attack...

Samsung Syncthru Web Service Cross-Site Request Forgery Vulnerability

Samsung Syncthru Web Service is a web-based synchronization service for printers from Samsung South Korea. A cross-site request forgery vulnerability exists in Samsung Syncthru Web Service version 4.05.61. A remote attacker can exploit this vulnerability to perform unauthorized operations...

Multiple Cross-Site Scripting Vulnerabilities in Samsung Syncthru Web Service

Samsung Syncthru Web Service is a web-based synchronization service for printers from Samsung South Korea. Multiple cross-site scripting vulnerabilities exist in Samsung Syncthru Web Service version 4.05.61. A remote attacker can exploit the vulnerabilities to inject arbitrary web script or HTML...

Samsung SyncThru Web Service Detection (HTTP)

HTTP based detection of Samsung SyncThru Web Service. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Samsung Syncthru Web Service Multiple Vulnerabilities (Jul 2018)

Samsung Syncthru Web Service is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2018-14904

Samsung Syncthru Web Service V4.05.61 is vulnerable to Multiple unauthenticated XSS attacks on several parameters, as demonstrated by ruiFwpid...

CVE-2018-14908

Samsung Syncthru Web Service V4.05.61 is vulnerable to CSRF on every request, as demonstrated by sws.application/printinformation/printReportSetupView.sws for a "Print emails sent" action...

Cross site scripting

Samsung Syncthru Web Service V4.05.61 is vulnerable to Multiple unauthenticated XSS attacks on several parameters, as demonstrated by ruiFwpid...

CVE-2018-14904

Samsung Syncthru Web Service V4.05.61 is vulnerable to Multiple unauthenticated XSS attacks on several parameters, as demonstrated by ruiFwpid...

CVE-2018-14908

Samsung Syncthru Web Service V4.05.61 is vulnerable to CSRF on every request, as demonstrated by sws.application/printinformation/printReportSetupView.sws for a "Print emails sent" action...

Cross site request forgery (csrf)

Samsung Syncthru Web Service V4.05.61 is vulnerable to CSRF on every request, as demonstrated by sws.application/printinformation/printReportSetupView.sws for a "Print emails sent" action...

CVE-2018-14908

CVE-2018-14908 affects Samsung Syncthru Web Service v4.05.61. Multiple connected sources confirm a cross-site request forgery (CSRF) vulnerability that allows unauthorized operations on the web service, reportedly demonstrated via the sws.application/printinformation/printReportSetupView.sws endp...