Displaying items by tag: perl

Rifatron Intelligent Digital Security System (animate.cgi) Stream Disclosure

CGI Files ≈ Packet Storm Sep 10, 2019 | 01:46 am

The Rifatron Intelligent Digital Security System DVR suffers from an unauthenticated and unauthorized live stream disclosure when animate.cgi script is called through Mobile Web Viewer module.

Debian Security Advisory 4507-1

CGI Files ≈ Packet Storm Aug 26, 2019 | 17:54 pm

Debian Linux Security Advisory 4507-1 - Several vulnerabilities were discovered in Squid, a fully featured web proxy cache. The flaws in the HTTP Digest Authentication processing, the HTTP Basic Authentication processing and in the cachemgr.cgi allowed remote attackers to perform[…]

Ubuntu Security Notice USN-4059-1

CGI Files ≈ Packet Storm Jul 16, 2019 | 22:09 pm

Ubuntu Security Notice 4059-1 - It was discovered that Squid incorrectly handled certain SNMP packets. A remote attacker could possibly use this issue to cause memory consumption, leading to a denial of service. This issue only affected Ubuntu 16.04 LTS[…]

ABB IDAL HTTP Server Authentication Bypass

CGI Files ≈ Packet Storm Jun 21, 2019 | 22:32 pm

The IDAL HTTP server CGI interface contains a URL, which allows an unauthenticated attacker to bypass authentication and gain access to privileged functions. In the IDAL CGI interface, there is a URL (/cgi/loginDefaultUser), which will create a session in an[…]

Telus Actiontec WEB6000Q Denial Of Service

CGI Files ≈ Packet Storm Jun 12, 2019 | 20:44 pm

Telus Actiontec WEB6000Q with firmware 1.1.02.22 suffers from a denial of service vulnerability. By querying CGI endpoints with empty (GET/POST/HEAD) requests causes a Segmentation Fault of the uhttpd webserver. Since there is no watchdog on this daemon, a device reboot[…]

RICOH SP 4520DN Printer HTML Injection

CGI Files ≈ Packet Storm May 9, 2019 | 20:22 pm

An HTML Injection vulnerability has been discovered on the RICOH SP 4520DN via the /web/entry/en/address/adrsSetUserWizard.cgi entryNameIn or entryDisplayNameIn parameter.

RICOH SP 4510DN Printer HTML Injection

CGI Files ≈ Packet Storm May 9, 2019 | 16:55 pm

An HTML Injection vulnerability has been discovered on the RICOH SP 4510DN via the /web/entry/en/address/adrsSetUserWizard.cgi entryNameIn parameter.

Sierra Wireless AirLink ES450 ACEManager template_load.cgi Information Disclosure

CGI Files ≈ Packet Storm Apr 27, 2019 | 19:20 pm

An exploitable information disclosure vulnerability exists in the ACEManager template_load.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A specially crafted HTTP request can cause a information leak, resulting in the disclosure of internal paths and files. An attacker can[…]

Sierra Wireless AirLink ES450 ACEManager Embedded_Ace_Set_Task.cgi Permission Assignment

CGI Files ≈ Packet Storm Apr 27, 2019 | 01:55 am

An exploitable Permission Assignment vulnerability exists in the ACEManager EmbeddedAceSet_Task.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A specially crafted HTTP request can cause a arbitrary setting writes, resulting in the unverified changes to any system setting. An attacker[…]

Sierra Wireless AirLink ES450 ACEManager Embedded_Ace_Get_Task.cgi Information Disclosure

CGI Files ≈ Packet Storm Apr 27, 2019 | 01:44 am

An exploitable Information Disclosure vulnerability exists in the ACEManager EmbeddedAceGet_Task.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A specially crafted HTTP request can cause an information disclosure, resulting in the exposure of confidential information, including, but not limited to,[…]

Share This

Follow Us