158 matches found
Buffer overflow
Buffer overflow in in the copymsgelement function for the devDiscoverHandle server in the TP-Link WR and WDR series, including WDR7400, WDR7500, WDR7660, WDR7800, WDR8400, WDR8500, WDR8600, WDR8620, WDR8640, WDR8660, WR880N, WR886N, WR890N, WR890N, WR882N, and WR708N...
CVE-2020-28877
Buffer overflow in in the copymsgelement function for the devDiscoverHandle server in the TP-Link WR and WDR series, including WDR7400, WDR7500, WDR7660, WDR7800, WDR8400, WDR8500, WDR8600, WDR8620, WDR8640, WDR8660, WR880N, WR886N, WR890N, WR890N, WR882N, and WR708N...
CVE-2020-28877
CVE-2020-28877 : Buffer overflow in the copy_msg_element function of the devDiscoverHandle server on TP-Link WR/WDR devices (WDR7400, WDR7500, WDR7660, WDR7800, WDR8400, WDR8500, WDR8600, WDR8620, WDR8640, WDR8660, WR880N, WR886N, WR890N, WR882N, WR708N). Connected documents do not provide additi...
File upload vulnerability in MCMS backend wr***.do page
MCMS is a website building system of MINGFEI TECHNOLOGY CO. A file upload vulnerability exists in the MCMS backend wr.do page. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...
Secutech DSL WR RIS 330 - Filter Bypass Vulnerability
Document Title: =============== Secutech DSL WR RIS 330 - Filter Bypass Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1988 Release Date: ============= 2018-07-09 Vulnerability Laboratory ID VL-ID: ==================================== 198...
bookstore.linnbenton.edu XSS vulnerability
Vulnerable URL: http://www.bookstore.linnbenton.edu/lbenton/textbookexpress/gettxtexpress.asp?remote=1=2023==SPRING%20ALBANY%202017=WR=121=1/-///'/"//--...
Network Time Protocol Vulnerabilities (Supplement Update A)
OVERVIEW --------- Begin Update A Part 1 of 2 -------- This advisory supplement is to accompany the NCCIC/ICS-CERT advisory titled ICSA-14-353-01C Network Time Protocol Vulnerabilities that was published February 5, 2015, on the ICS‑CERT web site. --------- End Update A Part 1 of 2 ----------...
PT-2012-4127 · Ipswitch · Ipswitch Whatsup Gold
Name of the Vulnerable Software and Affected Versions: Ipswitch WhatsUp Gold version 15.02 Description: The issue allows remote attackers to execute arbitrary SQL commands via the sGroupList parameter in the "WrVMwareHostList.asp" file. This enables attackers to manipulate database queries,...
CVE-2008-2355
Directory traversal vulnerability in index.php in WR-Meeting 1.0, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the msnum parameter in a coment event...
Directory traversal
Directory traversal vulnerability in index.php in WR-Meeting 1.0, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the msnum parameter in a coment event...
CVE-2008-2355
Directory traversal vulnerability in index.php in WR-Meeting 1.0, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the msnum parameter in a coment event...
CVE-2008-2355
CVE-2008-2355 describes a directory traversal vulnerability in WR-Meeting 1.0. When magic_quotes_gpc is disabled, an attacker can cause the application to include and execute local files by inserting a .. (dot dot) in the msnum parameter of a coment event, exposing partial confidentiality and int...
wrmeeting-disclose.txt
| By Cr@zyKing / [email protected] \ ^| GrtZ : TheKacak - CrackersChild - Rmx - TRip - Eno7 - DreamTurk - KnocKout - TheBekir and str0ke \ ^| WR-Meeting v1.0 FI \ ^| Down : http://www.wr-script.ru/ \ ^| Demo : http://www.wr-script.ru/meeting/ ^| Info : t4sc1zkr4L Best Of Bug Researches ^|...
WR-Meeting 1.0 (msnum) Local File Disclosure Vulnerability
No description provided by source. | By Cr@zyKing / [email protected] \ ^| GrtZ : TheKacak - CrackersChild - Rmx - TRip - Eno7 - DreamTurk - KnocKout - TheBekir and str0ke \ ^| WR-Meeting v1.0 FI \ ^| Down : http://www.wr-script.ru/ \ ^| Demo : http://www.wr-script.ru/meeting/ ^| Info :...
WR-Meeting 1.0 (msnum) Local File Disclosure Vulnerability
Exploit for unknown platform in category web applications ========================================================== WR-Meeting 1.0 msnum Local File Disclosure Vulnerability ========================================================== | By email protectedKing ^| GrtZ : TheKacak - CrackersChild - Rm...
WR-Meeting 1.0 - msnum Local File Disclosure
WR-Meeting 1.0 - msnum Local File Disclosure | By Cr@zyKing / [email protected] \ ^| GrtZ : TheKacak - CrackersChild - Rmx - TRip - Eno7 - DreamTurk - KnocKout - TheBekir and str0ke \ ^| WR-Meeting v1.0 FI \ ^| Down : http://www.wr-script.ru/ \ ^| Demo : http://www.wr-script.ru/meeting/ ^|...
WR-Meeting 1.0 - 'msnum' Local File Disclosure
| By Cr@zyKing / [email protected] \ ^| GrtZ : TheKacak - CrackersChild - Rmx - TRip - Eno7 - DreamTurk - KnocKout - TheBekir and str0ke \ ^| WR-Meeting v1.0 FI \ ^| Down : http://www.wr-script.ru/ \ ^| Demo : http://www.wr-script.ru/meeting/ ^| Info : t4sc1zkr4L Best Of Bug Researches ^|...
уязвимости скриптов с www.wr-script.ru (wr-board 1.4Lite)
1 DoS. Не проверяется значение параметра page в index.php http://wr-script.host/board/index.php?event=list&id=112420973596&page=-10000000000000000 2 Открытая почтовая форма. Адрес по которому будет отправлено сообщение с доски передается в поле uemail hidden. Пример использования:...