CVE-2018-10823

CVE-2018-10823 affects several D-Link router models (DWR-116 up to 1.06, DWR-512 up to 2.02, DWR-712 up to 2.02, DWR-912 up to 2.02, DWR-921 up to 2.02, DWR-111 up to 1.01). An authenticated attacker can inject shell commands via the chkisg.htm Sip parameter, leading to arbitrary code execution a...

CVE-2018-17532

Teltonika RUT9XX routers with firmware before 00.04.233 are affected by CVE-2018-17532, a set of unauthenticated OS command-injection vulnerabilities in autologin.cgi and hotspotlogin.cgi due to insufficient input sanitization. Successful exploitation allows remote command execution with root pri...

CVE-2018-8006

CVE-2018-8006 affects Apache ActiveMQ versions 5.0.0–5.15.5, where the web-based administration console on the queue.jsp page is vulnerable to cross-site scripting. The root cause is improper data filtering of the QueueFilter parameter, allowing an attacker to execute script in a victim’s browser...

CVE-2018-8453

CVE-2018-8453 is a Windows Win32k local privilege escalation vulnerability. The flaw arises when Win32k fails to properly handle memory objects, allowing an attacker to escalate privileges via local code execution. Affected products include Windows 7, Windows 8.1, Windows 10 (and server variants ...

CVE-2018-18084

CVE-2018-18084 affects DuomiCMS 3.0. A SQL injection exists in the ajax.php file, demonstrated by the uid parameter. The issue is rated with CVSS v3.1: base score 9.8 (CRITICAL), vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating network attack needs no authentication or user interac...

CVE-2018-14634

CVE-2018-14634 is a Linux kernel integer overflow vulnerability in create_elf_tables(). An unprivileged local user with access to a SUID (or otherwise privileged) binary could escalate privileges. Documented vulnerable kernel families include 2.6.x, 3.10.x, and 4.14.x. Mitigations/recognitions ex...

CVE-2018-15961

CVE-2018-15961 affects Adobe ColdFusion 2018 (July 12 release 2018.0.0.310739) and Update 6 and earlier, and Update 14 and earlier. The vulnerability is an unrestricted file upload via CKEditor (upload.cfm) that could allow remote attackers to upload arbitrary files and execute code on the affect...

CVE-2018-17173

CVE-2018-17173 affects LG SuperSign EZ CMS (2.5 era) and allows unauthenticated remote code execution via the sourceUri parameter to qsr_server/device/getThumbnail. Exploitation can lead to arbitrary command execution and complete server compromise. Remediation: upgrade to a patched LG SuperSign ...

CVE-2018-17283

Zoho ManageEngine OpManager before 12.3 Build 123196 is affected by an authentication bypass in /oputilsServlet and can be leveraged for SQL injection via /api/json/device/setManaged name parameter or to add an admin user via /api/json/v2/admin/addUser. The vulnerability arises from lack of acces...

CVE-2018-17254

Summary: CVE-2018-17254 affects Joomla! JCK Editor component 6.4.4. The vulnerability is an SQL Injection in the jtreelink/dialogs/links.php parent parameter, enabling attacker-controlled SQL execution. The issue is documented with explicit exploitation details (e.g., UNION-based payloads) in pub...

CVE-2018-8440

CVE-2018-8440 is a Windows elevation-of-privilege flaw in ALPC handling, enabling local privilege escalation via the ALPC Task Scheduler interface. Public details in connected docs show exploit PoCs and proof-of-concept code exist (e.g., CANVAS and metasploit references) and that tested environme...

CVE-2018-16763

Summary (CVE-2018-16763) : Fuel CMS version 1.4.1 is vulnerable to a pre-auth Remote Code Execution via PHP code evaluation. The flaw is triggered through unsafe handling of user-controlled data in the pages/select/ filter parameter or the preview/ data parameter, allowing arbitrary PHP execution...

CVE-2018-16059

CVE-2018-16059 affects Endress+Hauser WirelessHART Fieldgate SWG70 devices (3.x/3.0). It is a Local File Inclusion/Directory Traversal vulnerability via the fcgi-bin/wgsetcgi filename parameter, enabling reading of sensitive files and potentially unauthorized access. Affected firmware paths per I...

CVE-2018-5391

CVE-2018-5391 affects the Linux kernel (3.9+) via FragmentSmack: IP fragment reassembly can be exploited to exhaust CPU and cause DoS. Citrix/Arista/CentOS advisories describe affected products and kernel updates; CentOS/RH advisories list patched versions and note the vulnerability stems from fr...

CVE-2018-15745

CVE-2018-15745 affects Argus Surveillance DVR 4.0.0.0. Unauthenticated directory traversal allows file disclosure via a ..%2F sequence in the WEBACCOUNT.CGI RESULTPAGE parameter, enabling an attacker to read sensitive server files. The NVD and related advisories confirm a local file inclusion/vec...

CVE-2018-16159

CVE-2018-16159 affects the WordPress Gift Vouchers plugin (versions up to 2.0.1; later fixed in 4.1.8). The vulnerability is a blind SQL injection via the template_id parameter in the wpgv_doajax_front_template AJAX request (wp-admin/admin-ajax.php). Root cause: insufficient input handling for te...

CVE-2017-17762

CVE-2017-17762: Episerver 7 patch 4 and earlier is vulnerable to an XML External Entity (XXE) issue triggered by processing crafted DTDs in XML requests that involve util/xmlrpc/Handler.ashx, allowing remote attackers to read arbitrary files on the server. Affected component is Episerver 7 series...

CVE-2018-15919

CVE-2018-15919 affects OpenSSH up to version 7.8, where Remotely observable behaviour in auth-gss2.c could allow a remote attacker to enumerate existing usernames when GSS2 is used. The IBM/linked bulletin explicitly notes the discoverer’s statement that username enumeration is not treated as a v...

CVE-2018-15887

The CVE-2018-15887 entry concerns ASUS DSL-N12E_C1 (firmware version 1.1.2.3_345). A vulnerability in Main_Analysis_Content.asp allows an authenticated remote attacker to execute arbitrary OS commands by crafting service parameters (e.g., destIP in a cmdMethod=ping request). Affected component/fu...

CVE-2018-11776

The CVE-2018-11776 issue affects Apache Struts 2.x versions 2.3–2.3.34 and 2.5–2.5.16. The underlying condition is when alwaysSelectFullNamespace is true and a result or url tag lacks a namespace/value, and the upper namespace/action configuration also has no or a wildcard namespace, allowing rem...