osanda malith jayathissa vulnerabilities and exploits

(subscribe to this query)

CMS Made Simple (CMSMS) 2.1.6 allows remote authenticated administrators to execute arbitrary PHP code via the code parameter to admin/editusertag.php, related to the CreateTagFunction and CallUserTag functions. NOTE: the vendor reportedly has stated this is "a feature, not ...

Cmsmadesimple Cms Made Simple 2.1.6

1 EDB exploit

ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK stores sensitive information under the web root with insufficient access control, which allows remote malicious users to obtain the PPPoE/PPPoA password via a direct request for basic/tc2wanfun.js.

Zte Zxv10 W300 Firmware 1.0.0a Zrd Lk Zte Zxv10 W300 -

1 EDB exploit

Cross-site request forgery (CSRF) vulnerability in the ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK allows remote malicious users to hijack the authentication of administrators for requests that change the admin password via a request to Forms/tools_admin_1.

Zte Zxv10 W300 Firmware 1.0.0a Zrd Lk Zte Zxv10 W300 -

1 EDB exploit

The ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK has a default password of admin for the admin account, which makes it easier for remote malicious users to obtain access via unspecified vectors.

Zte Zxv10 W300 Firmware 1.0.0a Zrd Lk Zte Zxv10 W300 -

1 EDB exploit

ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK stores sensitive information under the web root with insufficient access control, which allows remote malicious users to read backup files via a direct request for rom-0.

Zte Zxv10 W300 Firmware W300v1.0.0a Zrd Lk

1 EDB exploit

The installer for the Alcatel OSPREY3_MINI Modem component on EE EE40VB 4G mobile broadband modems with firmware before EE40_00_02.00_45 sets weak permissions (Everyone:Full Control) for the "Web Connecton\EE40" and "Web Connecton\EE40\BackgroundService" direc...

Ee Ee40vb Firmware

1 EDB exploit

Stack-based buffer overflow in GSM SIM Utility (aka SIM Card Editor) 6.6 allows remote malicious users to execute arbitrary code via a long entry in a .sms file.

Gsm Sim Card Editor 6.6

1 EDB exploit

Buffer overflow in the Customize 35mm tab in Two Pilots Exif Pilot 4.7.2 allows remote malicious users to execute arbitrary code via a long string in the maker element in an XML file.

Two Pilots Exif Pilot 4.7.2

1 EDB exploit

The cairo_image_surface_get_data function in Cairo 1.10.2, as used in GTK+ and Wireshark, allows context-dependent malicious users to cause a denial of service (NULL pointer dereference) via a large string.

Cairographics Cairo 1.10.2

1 EDB exploit

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook