6 Commits (f9861715ab39c45ed714775b32a063a6fe738e3a)

Author	SHA1	Message	Date
Ice3man543	e9f728c321	Added cve annotations + severity adjustments	2021-09-10 16:56:40 +05:30
sandeep	609705f676	removed extra headers not required for template	2021-09-08 17:47:19 +05:30
forgedhallpass	cdf9451158	Removed pipe (|) character from references, because the structure requires it to be a string slice, not a string ... Related nuclei tickets: * #259 - dynamic key-value field support for template information * #940 - new infos in template * #834 * RES-84	2021-08-18 14:44:27 +03:00
sandeep	b990243906	uniform tags	2021-07-26 14:25:43 +05:30
sandeep	767f173f88	minor updates	2021-07-10 18:45:09 +05:30
GwanYeong Kim	3bf1c929ed	Create Hongdian Vulnerability ... CVE-2021-28149 : Hongdian H8922 3.0.5 devices allow Directory Traversal. The /log_download.cgi log export handler does not validate user input and allows a remote attacker with minimal privileges to download any file from the device by substituting ../ (e.g., ../../etc/passwd) This can be carried out with a web browser by changing the file name accordingly. Upon visiting log_download.cgi?type=../../etc/passwd and logging in, the web server will allow a download of the contents of the /etc/passwd file. CVE-2021-28150 : Hongdian H8922 3.0.5 devices allow the unprivileged guest user to read cli.conf (with the administrator password and other sensitive data) via /backup2.cgi. CVE-2021-28151 : Hongdian H8922 3.0.5 devices allow OS command injection via shell metacharacters into the ip-address (aka Destination) field to the tools.cgi ping command, which is accessible with the username guest and password guest. Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>	2021-07-10 21:16:35 +09:00