Vulnerabilidades

Cortafuegos Endian versión 3.3.25 y anteriores permiten cross-site scripting (XSS) almacenado mediante el parámetro remark a /manage/dhcp/fixed_leases/. Un atacante autenticado puede inyectar JavaScript arbitrario que se almacena y se ejecuta cuando otros usuarios ven la página afectada.

Endian cortafuegos versión 3.3.25 y anteriores permiten cross-site scripting (XSS) almacenado a través del parámetro NAME a /cgi-bin/uplinkeditor.cgi. Un atacante autenticado puede inyectar JavaScript arbitrario que se almacena y ejecuta cuando otros usuarios ven la página afectada.

Endian cortafuegos versión 3.3.25 y anteriores permiten cross-site scripting (XSS) almacenado a través del parámetro remark a /manage/dnsmasq/hosts/. Un atacante autenticado puede inyectar JavaScript arbitrario que se almacena y ejecuta cuando otros usuarios ven la página afectada.

Endian Firewall versión 3.3.25 y anteriores permiten cross-site scripting (XSS) almacenado a través del parámetro 'remark' a /cgi-bin/routing.cgi. Un atacante autenticado puede inyectar JavaScript arbitrario que se almacena y ejecuta cuando otros usuarios ven la página afectada.

Endian Firewall versión 3.3.25 y anteriores permiten a usuarios autenticados ejecutar comandos arbitrarios del sistema operativo a través del parámetro DATE a /cgi-bin/logs_smtp.cgi. El valor del parámetro DATE se utiliza para construir una ruta de archivo que se pasa a una llamada open() de Perl, lo que permite la…

El Cortafuegos Endian versión 3.3.25 y anteriores permiten a usuarios autenticados ejecutar comandos arbitrarios del sistema operativo a través del parámetro DATE a /cgi-bin/logs_openvpn.cgi. El valor del parámetro DATE se utiliza para construir una ruta de archivo que se pasa a una llamada open() de Perl, lo que…

Las versiones 3.3.25 y anteriores de Endian Cortafuegos permiten a usuarios autenticados ejecutar comandos arbitrarios del sistema operativo a través del parámetro DATE en /cgi-bin/logs_log.cgi. El valor del parámetro DATE se utiliza para construir una ruta de archivo que se pasa a una llamada open() de Perl, lo que…

El Cortafuegos Endian versión 3.3.25 y anteriores permiten a usuarios autenticados ejecutar comandos arbitrarios del sistema operativo a través del parámetro DATE a /cgi-bin/logs_ids.cgi. El valor del parámetro DATE se utiliza para construir una ruta de archivo que se pasa a una llamada open() de Perl, lo que permite…

El Cortafuegos Endian versión 3.3.25 y anteriores permiten a usuarios autenticados ejecutar comandos arbitrarios del sistema operativo a través del parámetro DATE a /cgi-bin/logs_firewall.cgi. El valor del parámetro DATE se utiliza para construir una ruta de archivo que se pasa a una llamada open() de Perl, lo que…

El cortafuegos Endian versión 3.3.25 y anteriores permiten a usuarios autenticados ejecutar comandos arbitrarios del sistema operativo a través del parámetro DATE a /cgi-bin/logs_clamav.cgi. El valor del parámetro DATE se utiliza para construir una ruta de archivo que se pasa a una llamada open() de Perl, lo que…

Endian Firewall version 3.3.25 and prior allow authenticated users to execute arbitrary OS commands via the DATE parameter to /cgi-bin/logs_proxy.cgi. The DATE parameter value is used to construct a file path that is passed to a Perl open() call, which allows command injection due to an incomplete regular expression…

Endian Firewall version 3.3.25 and prior allow authenticated users to delete arbitrary files via directory traversal in the remove ARCHIVE parameter to /cgi-bin/backup.cgi. The remove ARCHIVE parameter value is used to construct a file path without sanitization of directory traversal sequences, which is then passed to…

Glances is an open-source system cross-platform monitoring tool. Prior to version 4.5.3, Glances supports dynamic configuration values in which substrings enclosed in backticks are executed as system commands during configuration parsing. This behavior occurs in Config.get_value() and is implemented without validation…

Glances is an open-source system cross-platform monitoring tool. Prior to version 4.5.3, the Glances XML-RPC server (activated with glances -s or glances --server) sends Access-Control-Allow-Origin: * on every HTTP response. Because the XML-RPC handler does not validate the Content-Type header, an attacker-controlled…

A vulnerability has been found in AlejandroArciniegas mcp-data-vis bc597e391f184d2187062fd567599a3cb72adf51/de5a51525a69822290eaee569a1ab447b490746d. This affects the function Request of the file src/servers/database/server.js of the component MCP Handler. The manipulation leads to sql injection. The attack may be…

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with admin-level privileges to execute arbitrary code as the root user. This vulnerability is due to improper validation of user-supplied input to the web-based management interface. An attacker could…

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with admin-level privileges to perform command injection attacks on an affected system and execute arbitrary commands as the root user. This vulnerability is due to improper validation of user-supplied…

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with admin-level privileges to perform command injection attacks on an affected system and execute arbitrary commands as the root user. This vulnerability is due to improper validation of user-supplied…

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with read-only privileges to perform command injection attacks on an affected system and execute arbitrary commands as the root user. This vulnerability is due to improper validation of user-supplied input.…

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user input. An attacker could exploit this…

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user input. An attacker could exploit this…

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user input. An attacker could exploit this…

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user input. An attacker could exploit this…

A vulnerability in the web-based management interface of Cisco IMC could allow an unauthenticated, remote attacker to conduct a reflected XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user input. An attacker could exploit this vulnerability by persuading a user of…

A Business Logic vulnerability exists in SourceCodester Pharmacy Product Management System 1.0. The vulnerability is located in the add-sales.php file. The application fails to validate the "txtprice" and "txttotalcost" parameters, allowing attackers to submit negative values for sales transactions. This leads to…