CVE Vulnerability Catalog

SuperBeam versions up to 4.1.3, when using the LAN or WiFi Direct Share feature, does not use HTTPS or any integrity-protection mechanism for file transfer, making it easier for remote attackers to send crafted files, as demonstrated by APK injection.

An issue was discovered on Ichano AtHome IP Camera devices that allows a remote, unauthenticated user on the LAN to execute arbitrary commands. This is done through the 'noodles' binary running on port 1300, which requires the <system> XML element to specify the command.

The Enterprise version of SyncBreeze 10.2.12 and earlier is affected by a Remote Denial of Service vulnerability. The web server does not check bounds when reading server requests in the Host header, resulting in a classic Buffer Overflow that causes a Denial of Service.

The ZoomLauncher binary in the Zoom client for Linux before version 2.0.115900.1201 does not properly sanitize user input when constructing a shell command, allowing remote attackers to execute arbitrary code by leveraging the zoommtg:// scheme handler.

A stack-based buffer overflow in the ZoomLauncher binary in the Zoom client for Linux before version 2.0.115900.1201 allows remote attackers to execute arbitrary code by leveraging the zoommtg:// scheme handler.

Conarc iChannel allows remote attackers to obtain sensitive information, modify the configuration, or cause a denial of service by deleting the configuration via a wc.dll?wwMaint~EditConfig request, which reaches an older version of a West Wind Web Connection HTTP service.

TP-Link TL-WVR and TL-WAR devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the interface field of an admin/dhcps command to cgi-bin/luci, related to the zone_get_iface_bydev function in /usr/lib/lua/luci/controller/admin/dhcps.lua in uhttpd.

TP-Link TL-WVR and TL-WAR devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the interface field of an admin/wportal command to cgi-bin/luci.

Zivif PR115-204-P-RS web cameras version V2.3.4.2103 contain a hard-coded password 'cat1029' for the root user. The SONIX operating system setup makes this password unchangeable, allowing access to the device via a TELNET session.

CVE-2017-17106 allows unauthenticated remote attackers to obtain credentials for Zivif PR115-204-P-RS V2.3.4.2103 webcams via a standard HTTP request. The vulnerability exists due to a lack of authentication checks in requests to CGI pages.

Zivif PR115-204-P-RS web cameras in versions V2.3.4.2103 and V4.7.4.2121 (and possibly in between versions) are vulnerable to unauthenticated, blind remote command injection via CGI scripts used in the web interface.

The AccessKeys AccessPress Anonymous Post Pro plugin for WordPress versions up to 3.1.9 has an issue with improper input sanitization. This allows an attacker to override settings for allowed file extensions and upload file size, leading to the ability to upload any files to the server.

The CVE-2017-15877 vulnerability in the db.php file in GPWeb 8.4.61 has insecure permissions that allow remote attackers to view the password and user database.

Unrestricted File Upload vulnerability in GPWeb 8.4.61 allows remote authenticated users to upload any type of file, including a PHP shell.

CVE-2017-15875 is a SQL injection vulnerability in the Password Recovery feature in GPWeb 8.4.61. It allows remote attackers to execute arbitrary SQL commands via the 'checkemail' parameter.

The Application Firewall Pack (AFP) component on Kemp Load Balancer devices with software before 7.2.40.1 allows a Security Feature Bypass via an HTTP POST request.

A Session Fixation Vulnerability exists in the MT4 Networks SenhaSegura Web Application 2.2.23.8 via login_if.php.

A flaw in the org.apache.sling.auth.core.AuthUtil#isRedirectValid method in Apache Sling Authentication Service 1.4.0 allows an attacker to trick a victim into sending their credentials through the Sling login form.

An access flaw was found in Heketi 5, where the heketi.json configuration file was world readable. An attacker having local access to the Heketi server could read plain-text passwords from the heketi.json file.

A security-check flaw was found in the way the Heketi 5 server API handled user requests, allowing an authenticated user to send specially crafted requests. This could lead to remote command execution as the user running the Heketi server and possibly privilege escalation.