CVE-2018-10088

CVE-2018-10088 affects XiongMai uc-httpd 1.0.0. A buffer overflow in the login handling (POST /login.htm) can be triggered by a crafted username field (e.g., a long input like 85 'A's) to overflow a stack buffer. PoC Exploit code and public exploit entries demonstrate sending this crafted request...

CVE-2017-7577

CVE-2017-7577 affects XiongMai uc-httpd. A directory traversal vulnerability allows reading arbitrary files via a GET ../ HTTP request. Connected sources document the flaw and impact (read access; no public exploit details provided); remediation/patch information is not specified in the supplied ...