cgi

cgi 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

AirOS 6.x – Arbitrary File Upload

EDB-Note Source: https://hackerone.com/reports/73480

2016-04-15 93c08539 webapps

Advantech Switch – ‘Shellshock’ Bash Environment Variable Command Injection (Metasploit)

##

2015-12-02 Metasploit remote

Cambium ePMP 1000 – Multiple Vulnerabilities

timeline. Ceases communication.

2015-11-20 Karn Ganeshen webapps

FortiManager 5.2.2 – Persistent Cross-Site Scripting

[+] Credits: hyp3rlinx

2015-09-25 hyp3rlinx webapps

Synology Video Station 1.5-0757 – Multiple Vulnerabilities

------------------------------------------------------------------------

2015-09-10 Han Sahin webapps

Endian Firewall < 3.0.0 - OS Command Injection (Metasploit)

##

2015-06-29 Ben Lincoln remote

Endian Firewall < 3.0.0 - OS Command Injection

#!/usr/bin/env python

2015-06-29 Ben Lincoln remote

Dell SonicWALL Secure Remote Access (SRA) Appliance – Cross-Site Request Forgery

# Exploit Title: Dell SonicWALL Secure Remote Access (SRA) Appliance Cross-Site Request Forgery

2015-05-07 Veit Hailperin webapps

IBM Endpoint Manager – Persistent Cross-Site Scripting

Advisory: Cross-Site Scripting in IBM Endpoint Manager Relay Diagnostics

2015-02-11 RedTeam Pentesting webapps

Barracuda Networks Cloud Series – Filter Bypass

Document Title:

2015-01-26 Vulnerability-Lab webapps

Advertise With Pleasure! (AWP) 6.6 – SQL Injection

# Exploit Title: Advertise With Pleasure! (AWP)

2014-12-04 Robert Cooper webapps

Device42 WAN Emulator 2.3 – Ping Command Injection (Metasploit)

##

2014-11-26 Brandon Perry webapps

Device42 WAN Emulator 2.3 – Traceroute Command Injection (Metasploit)

##

2014-11-26 Brandon Perry webapps

Advantech EKI-6340 – Command Injection

Core Security - Corelabs Advisory

2014-11-24 Core Security webapps

Ultra Electronics 7.2.0.19/7.4.0.7 – Multiple Vulnerabilities

Ultra Electronics / AEP Networks - SSL VPN (Netilla / Series A / Ultra

2014-10-06 OSI Security webapps

Bash CGI – ‘Shellshock’ Remote Command Injection (Metasploit)

##

2014-10-06 Fady Mohammed Osman webapps

IPFire – CGI Web Interface (Authenticated) Bash Environment Variable Code Injection

#!/usr/bin/env python

2014-10-01 Claudio Viviani webapps

GNU Bash – Environment Variable Command Injection (Metasploit)

require 'msf/core'

2014-09-25 Shaun Colley remote

VTLS Virtua InfoStation.cgi – SQL Injection

=====[Alligator Security Team - Security Advisory]============================

2014-08-26 José Tozo webapps

Barracuda Networks Message Archiver 650 – Persistent Cross-Site Scripting

Document Title:

2014-07-18 Vulnerability-Lab webapps

Mailspect Control Panel 4.0.5 – Multiple Vulnerabilities

Document Title:

2014-06-27 Onur Alanbel (BGA) webapps

Web Terra 1.1 – ‘books.cgi’ Remote Command Execution

[+] Remote Comand Execution on books.cgi Web Terra v. 1.1

2014-05-24 felipe andrian webapps

VM Turbo Operations Manager 4.5x – Directory Traversal

Product: VM Turbo Operations Manager

2014-05-12 Jamal Pecou webapps

Xangati XSR / XNR – ‘gui_input_test.pl’ Remote Command Execution

source: https://www.securityfocus.com/bid/66819/info

2014-04-14 Jan Kadijk webapps

ZamFoo – Multiple Remote Command Execution Vulnerabilities

source: https://www.securityfocus.com/bid/67215/info

2014-04-02 Al-Shabaab webapps

Primo Interactive CMS – ‘pcm.cgi’ Remote Command Execution

source: https://www.securityfocus.com/bid/66549/info

2014-03-31 Felipe Andrian Peixoto webapps

Beheer Systeem – ‘pbs.cgi’ Remote Command Execution

source: https://www.securityfocus.com/bid/66489/info

2014-03-26 Felipe Andrian Peixoto webapps

DotItYourself – ‘dot-it-yourself.cgi’ Remote Command Execution

source: https://www.securityfocus.com/bid/66487/info

2014-03-26 Felipe Andrian Peixoto webapps

innoEDIT – ‘innoedit.cgi’ Remote Command Execution

source: https://www.securityfocus.com/bid/66367/info

2014-03-21 Felipe Andrian Peixoto webapps

Seowon Intech WiMAX SWC-9100 Router – ‘/cgi-bin/diagnostic.cgi?ping_ipaddr’ Remote Code Execution

source: https://www.securityfocus.com/bid/65306/info

2014-02-03 Josue Rojas remote

Seowon Intech WiMAX SWC-9100 Router – ‘/cgi-bin/reboot.cgi’ Remote Reboot (Denial of Service)

source: https://www.securityfocus.com/bid/65306/info

2014-02-03 Josue Rojas dos

Synology DSM 4.3-3810 – Directory Traversal

Title: Synology DSM multiple directory traversal

2013-12-24 Andrea Fabrizi webapps

Icinga – cgi/config.c process_cgivars Function Off-by-One Read Remote Denial of Service

source: https://www.securityfocus.com/bid/64363/info

2013-12-16 DTAG Group Information Security dos

CGILua 3.0 – SQL Injection

# Exploit Title: CGILua SQL Injection

2013-12-09 aceeeeeeeer . webapps

Bugzilla 4.2 – Tabular Reports Cross-Site Scripting

source: https://www.securityfocus.com/bid/63205/info

2013-10-09 Mateusz Goik webapps

Bugzilla – ‘editflagtypes.cgi’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/63204/info

2013-10-09 Mateusz Goik webapps

Kwok Information Server – Multiple SQL Injections

source: https://www.securityfocus.com/bid/61728/info

2013-08-07 Yogesh Phadtare webapps

FtpLocate – HTML Injection

source: https://www.securityfocus.com/bid/60760/info

2013-06-24 Chako webapps

QNAP VioStor NVR / QNAP NAS – Remote Code Execution

source: https://www.securityfocus.com/bid/60354/info

2013-06-05 Tim Herres webapps

mnoGoSearch 3.3.12 (search.cgi) – Arbitrary File Read

-----------------------------------------------------------

2013-03-07 Sergey Bobrov webapps

Smartphone Pentest Framework – Multiple Remote Command Execution Vulnerabilities

source: https://www.securityfocus.com/bid/56881/info

2012-12-10 High-Tech Bridge webapps

ZEN Load Balancer – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/55638/info

2012-09-24 Brendan Coles webapps

AxisInternet VoIP Manager – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/55589/info

2012-09-18 Benjamin Kunz Mejri webapps

E-Mail Security Virtual Appliance – ‘learn-msg.cgi’ Command Injection (Metasploit)

##

2012-08-22 Metasploit webapps

LISTSERV 16 – ‘SHOWTPL’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/55082/info

2012-08-17 Jose Carlos de Arriba webapps

Scrutinizer 9.0.1.19899 – HTTP Authentication Bypass

source: https://www.securityfocus.com/bid/54727/info

2012-07-30 Mario Ceballos webapps

Lynx Message Server – Multiple Vulnerabilities

1. Summary

2012-05-07 Mark Lachniet webapps

Websense Triton – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/51086/info

2012-05-02 Ben Williams webapps

Munin 2.0~rc4-1 – Remote Command Injection

source: https://www.securityfocus.com/bid/53032/info

2012-04-13 Helmut Grohne webapps

ZTE – Change Admin Password

# Exploit Title: ZTE Change admin password

2012-04-08 Nuevo Asesino webapps