Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-10662 State: PUBLISHED Published: 2018-06-26T18:00:00 Last Updated: 2024-08-05T07:46:46.211Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in multiple models of Axis IP Cameras. There is an Exposed Insecure Interface. Additional Analyst Notes: - CVE Program Container: References: - https://www.axis.com/files/sales/ACV-128401_Affected_Product_List.pdf - https://www.exploit-db.com/exploits/45100/ - https://www.axis.com/files/faq/Advisory_ACV-128401.pdf - https://blog.vdoo.com/2018/06/18/vdoo-discovers-significant-vulnerabilities-in-axis-cameras/
CVE ID: CVE-2018-10663 State: PUBLISHED Published: 2018-06-26T18:00:00 Last Updated: 2024-08-05T07:46:47.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in multiple models of Axis IP Cameras. There is an Incorrect Size Calculation. Additional Analyst Notes: - CVE Program Container: References: - https://www.axis.com/files/sales/ACV-128401_Affected_Product_List.pdf - https://www.axis.com/files/faq/Advisory_ACV-128401.pdf - https://blog.vdoo.com/2018/06/18/vdoo-discovers-significant-vulnerabilities-in-axis-cameras/
CVE ID: CVE-2018-10664 State: PUBLISHED Published: 2018-06-26T18:00:00 Last Updated: 2024-08-05T07:46:46.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the httpd process in multiple models of Axis IP Cameras. There is Memory Corruption. Additional Analyst Notes: - CVE Program Container: References: - https://www.axis.com/files/sales/ACV-128401_Affected_Product_List.pdf - https://www.axis.com/files/faq/Advisory_ACV-128401.pdf - https://blog.vdoo.com/2018/06/18/vdoo-discovers-significant-vulnerabilities-in-axis-cameras/
CVE ID: CVE-2018-10665 State: PUBLISHED Published: 2018-05-02T17:00:00Z Last Updated: 2024-09-16T16:48:25.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: ILIAS 5.3.4 has XSS through unsanitized output of PHP_SELF, related to shib_logout.php and third-party demo files. Additional Analyst Notes: - CVE Program Container: References: - https://www.openbugbounty.org/reports/608858/ - https://github.com/ILIAS-eLearning/ILIAS/commit/c9c9211bd689f2dda02006159e69a856eae8944d - https://github.com/ILIAS-eLearning/ILIAS/commit/3fe6aa778ca06080cf1b7303cbc458aa0c42392a
CVE ID: CVE-2018-10666 State: PUBLISHED Published: 2018-05-03T04:00:00 Last Updated: 2024-08-05T07:46:46.190Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Owned smart contract implementation for Aurora IDEX Membership (IDXM), an Ethereum ERC20 token, allows attackers to acquire contract ownership because the setOwner function is declared as public. A new owner can subsequently modify variables. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40jonghyk.song/aurora-idex-membership-idxm-erc20-token-allows-attackers-to-acquire-contract-ownership-1ff426cee7c6
CVE ID: CVE-2018-10675 State: PUBLISHED Published: 2018-05-02T18:00:00 Last Updated: 2024-08-05T07:46:46.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: The do_get_mempolicy function in mm/mempolicy.c in the Linux kernel before 4.12.9 allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted system calls. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:3540 - https://access.redhat.com/errata/RHSA-2018:2785 - https://access.redhat.com/errata/RHSA-2018:2164 - https://access.redhat.com/errata/RHSA-2018:2925 - https://access.redhat.com/errata/RHSA-2018:2933 - h
a/RHSA-2018:2164 - https://access.redhat.com/errata/RHSA-2018:2925 - https://access.redhat.com/errata/RHSA-2018:2933 - https://access.redhat.com/errata/RHSA-2018:2395 - https://access.redhat.com/errata/RHSA-2018:2384 - https://usn.ubuntu.com/3754-1/ - https://access.redhat.com/errata/RHSA-2018:3590 - http://www.securityfocus.com/bid/104093 - https://access.redhat.com/errata/RHSA-2018:2924 - https://access.redhat.com/errata/RHSA-2018:3586 - https://access.redhat.com/errata/RHSA-2018:2791 - https://www.oracle.com/security-alerts/cpujul2020.html - https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0 - https://github.com/torvalds/linux/c
m/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0 - https://github.com/torvalds/linux/commit/73223e4e2e3867ebf033a5a8eb2e5df0158ccc99 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=73223e4e2e3867ebf033a5a8eb2e5df0158ccc99 - https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.12.9
CVE ID: CVE-2018-10676 State: PUBLISHED Published: 2018-05-02T18:00:00Z Last Updated: 2024-09-17T02:06:41.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: CeNova, Night OWL, Novo, Pulnix, QSee, Securus, and TBK Vision DVR devices allow remote attackers to download a file and obtain sensitive credential information via a direct request for the download.rsp URI. Additional Analyst Notes: - CVE Program Container: References: - http://misteralfa-hack.blogspot.cl/2018/05/0day-dvr-multivendor.html
CVE ID: CVE-2018-10677 State: PUBLISHED Published: 2018-05-02T19:00:00 Last Updated: 2024-08-05T07:46:46.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DecodeGifImg function in ngiflib.c in MiniUPnP ngiflib 0.4 lacks certain checks against width and height, which allows remote attackers to cause a denial of service (WritePixels heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted GIF file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/miniupnp/ngiflib/commit/b588a2249c7abbfc52173e32ee11d6facef82f89 - https://github.com/miniupnp/ngiflib/issues/1
CVE ID: CVE-2018-10678 State: PUBLISHED Published: 2018-05-13T20:00:00 Last Updated: 2024-08-05T07:46:46.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: MyBB 1.8.15, when accessed with Microsoft Edge, mishandles 'target="_blank" rel="noopener"' in A elements, which makes it easier for remote attackers to conduct redirection attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104187 - https://gist.github.com/MayurUdiniya/7aaa50b878d82b6aab6ed0b3e2b080bc
CVE ID: CVE-2018-10680 State: PUBLISHED Published: 2018-05-02T19:00:00 Last Updated: 2024-08-05T07:46:46.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: Z-BlogPHP 1.5.2 has a stored Cross Site Scripting Vulnerability exploitable by an administrator who navigates to "Web site settings --> Basic setting --> Website title" and enters an XSS payload via the zb_system/cmd.php ZC_BLOG_NAME parameter. NOTE: the vendor disputes the security relevance, noting it is "just a functional bug. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zblogcn/zblogphp/issues/205 - https://github.com/zblogcn/zblogphp/issues/185
CVE ID: CVE-2018-10682 State: PUBLISHED Published: 2018-05-09T08:00:00 Last Updated: 2024-08-05T07:46:46.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in WildFly 10.1.2.Final. It is possible for an attacker to access the administration panel on TCP port 9990 without any authentication using "anonymous" access that is automatically created. Once logged in, a misconfiguration present by default (auto-deployment) permits an anonymous user to deploy a malicious .war file, leading to remote code execution. NOTE: the vendor indicates that anonymous access is not available in the default installation; however, it remains optional because there are several u
anonymous access is not available in the default installation; however, it remains optional because there are several use cases for it, including development environments and network architectures that have a proxy server for access control to the WildFly server Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/kmkz/exploit/blob/master/CVE-2018-10682-CVE-2018-10683.txt
CVE ID: CVE-2018-10683 State: PUBLISHED Published: 2018-05-09T08:00:00 Last Updated: 2024-08-05T07:46:46.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in WildFly 10.1.2.Final. In the case of a default installation without a security realm reference, an attacker can successfully access the server without authentication. NOTE: the Security Realms documentation in the product's Admin Guide indicates that "without a security realm reference" implies "effectively unsecured." The vendor explicitly supports these unsecured configurations because they have valid use cases during development Additional Analyst Notes: - CVE Program Container: References: - htt
ecause they have valid use cases during development Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kmkz/exploit/blob/master/CVE-2018-10682-CVE-2018-10683.txt
CVE ID: CVE-2018-10685 State: PUBLISHED Published: 2018-05-02T22:00:00 Last Updated: 2024-08-05T07:46:46.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Long Range Zip (aka lrzip) 0.631, there is a use-after-free in the lzma_decompress_buf function of stream.c, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ckolivas/lrzip/issues/95 - https://lists.debian.org/debian-lts-announce/2021/08/msg00001.html
CVE ID: CVE-2018-10686 State: PUBLISHED Published: 2018-05-06T05:00:00 Last Updated: 2024-08-05T07:46:46.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Vesta Control Panel 0.9.8-20. There is Reflected XSS via $_REQUEST['path'] to the view/file/index.php URI, which can lead to remote PHP code execution via vectors involving a file_put_contents call in web/upload/UploadHandler.php. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40ndrbasi/cve-2018-10686-vestacp-rce-d96d95c2bde2 - https://github.com/serghey-rodin/vesta/issues/1558
CVE ID: CVE-2018-10689 State: PUBLISHED Published: 2018-05-03T07:00:00 Last Updated: 2024-08-05T07:46:46.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: blktrace (aka Block IO Tracing) 1.2.0, as used with the Linux kernel and Android, has a buffer overflow in the dev_map_read function in btt/devmap.c because the device and devno arrays are too small, as demonstrated by an invalid free when using the btt program with a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://www.spinics.net/lists/linux-btrace/msg00847.html - http://www.securityfocus.com/bid/104142 - http://git.kernel.dk/?p=blktrace.git%3Ba=log%3Bh=d61ff409cb4dda31386373d706ea0cfb1
://www.securityfocus.com/bid/104142 - http://git.kernel.dk/?p=blktrace.git%3Ba=log%3Bh=d61ff409cb4dda31386373d706ea0cfb1aaac5b7 - https://git.kernel.org/pub/scm/linux/kernel/git/axboe/blktrace.git/commit/?id=d61ff409cb4dda31386373d706ea0cfb1aaac5b7 - https://access.redhat.com/errata/RHSA-2019:2162 - https://security.gentoo.org/glsa/202107-15
CVE ID: CVE-2018-10690 State: PUBLISHED Published: 2019-06-07T19:17:33 Last Updated: 2024-08-05T07:46:46.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Moxa AWK-3121 1.14 devices. The device by default allows HTTP traffic thus providing an insecure communication mechanism for a user connecting to the web server. This allows an attacker to sniff the traffic easily and allows an attacker to compromise sensitive data such as credentials. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/samuelhuntley/Moxa_AWK_1121/blob/master/Moxa_AWK_1121 - https://seclists.org/bugtraq/2019/Jun/8 - http://packetstormsecurity.com/file
/Moxa_AWK_1121/blob/master/Moxa_AWK_1121 - https://seclists.org/bugtraq/2019/Jun/8 - http://packetstormsecurity.com/files/153223/Moxa-AWK-3121-1.14-Information-Disclosure-Command-Execution.html
CVE ID: CVE-2018-10691 State: PUBLISHED Published: 2019-06-07T19:19:28 Last Updated: 2024-08-05T07:46:46.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Moxa AWK-3121 1.14 devices. It is intended that an administrator can download /systemlog.log (the system log). However, the same functionality allows an attacker to download the file without any authentication or authorization. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/samuelhuntley/Moxa_AWK_1121/blob/master/Moxa_AWK_1121 - https://seclists.org/bugtraq/2019/Jun/8 - http://packetstormsecurity.com/files/153223/Moxa-AWK-3121-1.14-Information-Disclosure-Command-
.org/bugtraq/2019/Jun/8 - http://packetstormsecurity.com/files/153223/Moxa-AWK-3121-1.14-Information-Disclosure-Command-Execution.html
CVE ID: CVE-2018-10692 State: PUBLISHED Published: 2019-06-07T19:21:02 Last Updated: 2024-08-05T07:46:46.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Moxa AWK-3121 1.14 devices. The session cookie "Password508" does not have an HttpOnly flag. This allows an attacker who is able to execute a cross-site scripting attack to steal the cookie very easily. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/samuelhuntley/Moxa_AWK_1121/blob/master/Moxa_AWK_1121 - https://seclists.org/bugtraq/2019/Jun/8 - http://packetstormsecurity.com/files/153223/Moxa-AWK-3121-1.14-Information-Disclosure-Command-Execution.html
CVE ID: CVE-2018-10693 State: PUBLISHED Published: 2019-06-07T19:22:36 Last Updated: 2024-08-05T07:46:46.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Moxa AWK-3121 1.14 devices. It provides ping functionality so that an administrator can execute ICMP calls to check if the network is working correctly. However, the same functionality allows an attacker to execute commands on the device. The POST parameter "srvName" is susceptible to a buffer overflow. By crafting a packet that contains a string of 516 characters, it is possible for an attacker to execute the attack. Additional Analyst Notes: - CVE Program Container: References: - https://github.co
or an attacker to execute the attack. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/samuelhuntley/Moxa_AWK_1121/blob/master/Moxa_AWK_1121 - https://seclists.org/bugtraq/2019/Jun/8 - http://packetstormsecurity.com/files/153223/Moxa-AWK-3121-1.14-Information-Disclosure-Command-Execution.html
CVE ID: CVE-2018-10694 State: PUBLISHED Published: 2019-06-07T19:24:46 Last Updated: 2024-08-05T07:46:46.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Moxa AWK-3121 1.14 devices. The device provides a Wi-Fi connection that is open and does not use any encryption mechanism by default. An administrator who uses the open wireless connection to set up the device can allow an attacker to sniff the traffic passing between the user's computer and the device. This can allow an attacker to steal the credentials passing over the HTTP connection as well as TELNET traffic. Also an attacker can MITM the response and infect a user's computer very easily as well
ction as well as TELNET traffic. Also an attacker can MITM the response and infect a user's computer very easily as well. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/samuelhuntley/Moxa_AWK_1121/blob/master/Moxa_AWK_1121 - https://seclists.org/bugtraq/2019/Jun/8 - http://packetstormsecurity.com/files/153223/Moxa-AWK-3121-1.14-Information-Disclosure-Command-Execution.html
CVE ID: CVE-2018-10695 State: PUBLISHED Published: 2019-06-07T19:26:26 Last Updated: 2024-08-05T07:46:46.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Moxa AWK-3121 1.14 devices. It provides alert functionality so that an administrator can send emails to his/her account when there are changes to the device's network. However, the same functionality allows an attacker to execute commands on the device. The POST parameters "to1,to2,to3,to4" are all susceptible to buffer overflow. By crafting a packet that contains a string of 678 characters, it is possible for an attacker to execute the attack. Additional Analyst Notes: - CVE Program Container: Refe
haracters, it is possible for an attacker to execute the attack. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/samuelhuntley/Moxa_AWK_1121/blob/master/Moxa_AWK_1121 - https://seclists.org/bugtraq/2019/Jun/8 - http://packetstormsecurity.com/files/153223/Moxa-AWK-3121-1.14-Information-Disclosure-Command-Execution.html
CVE ID: CVE-2018-10696 State: PUBLISHED Published: 2019-06-07T19:28:00 Last Updated: 2024-08-05T07:46:46.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Moxa AWK-3121 1.14 devices. The device provides a web interface to allow an administrator to manage the device. However, this interface is not protected against CSRF attacks, which allows an attacker to trick an administrator into executing actions without his/her knowledge, as demonstrated by the forms/iw_webSetParameters and forms/webSetMainRestart URIs. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/samuelhuntley/Moxa_AWK_1121/blob/master/Moxa_AWK_1121 - https
- CVE Program Container: References: - https://github.com/samuelhuntley/Moxa_AWK_1121/blob/master/Moxa_AWK_1121 - https://seclists.org/bugtraq/2019/Jun/8 - http://packetstormsecurity.com/files/153223/Moxa-AWK-3121-1.14-Information-Disclosure-Command-Execution.html
CVE ID: CVE-2018-10697 State: PUBLISHED Published: 2019-06-07T19:29:44 Last Updated: 2024-08-05T07:46:46.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Moxa AWK-3121 1.14 devices. The Moxa AWK 3121 provides ping functionality so that an administrator can execute ICMP calls to check if the network is working correctly. However, the same functionality allows an attacker to execute commands on the device. The POST parameter "srvName" is susceptible to this injection. By crafting a packet that contains shell metacharacters, it is possible for an attacker to execute the attack. Additional Analyst Notes: - CVE Program Container: References: - https://git
ible for an attacker to execute the attack. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/samuelhuntley/Moxa_AWK_1121/blob/master/Moxa_AWK_1121 - https://seclists.org/bugtraq/2019/Jun/8 - http://packetstormsecurity.com/files/153223/Moxa-AWK-3121-1.14-Information-Disclosure-Command-Execution.html
CVE ID: CVE-2018-10698 State: PUBLISHED Published: 2019-06-07T19:33:42 Last Updated: 2024-08-05T07:46:46.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Moxa AWK-3121 1.14 devices. The device enables an unencrypted TELNET service by default. This allows an attacker who has been able to gain an MITM position to easily sniff the traffic between the device and the user. Also an attacker can easily connect to the TELNET daemon using the default credentials if they have not been changed by the user. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/samuelhuntley/Moxa_AWK_1121/blob/master/Moxa_AWK_1121 - https://seclists.
am Container: References: - https://github.com/samuelhuntley/Moxa_AWK_1121/blob/master/Moxa_AWK_1121 - https://seclists.org/bugtraq/2019/Jun/8 - http://packetstormsecurity.com/files/153223/Moxa-AWK-3121-1.14-Information-Disclosure-Command-Execution.html
CVE ID: CVE-2018-10699 State: PUBLISHED Published: 2019-06-07T19:36:48 Last Updated: 2024-08-05T07:46:46.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Moxa AWK-3121 1.14 devices. The Moxa AWK 3121 provides certfile upload functionality so that an administrator can upload a certificate file used for connecting to the wireless network. However, the same functionality allows an attacker to execute commands on the device. The POST parameter "iw_privatePass" is susceptible to this injection. By crafting a packet that contains shell metacharacters, it is possible for an attacker to execute the attack. Additional Analyst Notes: - CVE Program Container: R
tacharacters, it is possible for an attacker to execute the attack. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/samuelhuntley/Moxa_AWK_1121/blob/master/Moxa_AWK_1121 - https://seclists.org/bugtraq/2019/Jun/8 - http://packetstormsecurity.com/files/153223/Moxa-AWK-3121-1.14-Information-Disclosure-Command-Execution.html
CVE ID: CVE-2018-10700 State: PUBLISHED Published: 2019-06-07T19:51:53 Last Updated: 2024-08-05T07:46:46.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Moxa AWK-3121 1.19 devices. It provides functionality so that an administrator can change the name of the device. However, the same functionality allows an attacker to execute XSS by injecting an XSS payload. The POST parameter "iw_board_deviceName" is susceptible to this injection. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/samuelhuntley/Moxa_AWK_1121/blob/master/Moxa_AWK_1121 - https://seclists.org/bugtraq/2019/Jun/8 - http://packetstormsecurity.com/files/1
xa_AWK_1121/blob/master/Moxa_AWK_1121 - https://seclists.org/bugtraq/2019/Jun/8 - http://packetstormsecurity.com/files/153223/Moxa-AWK-3121-1.14-Information-Disclosure-Command-Execution.html
CVE ID: CVE-2018-10701 State: PUBLISHED Published: 2019-06-07T19:54:07 Last Updated: 2024-08-05T07:46:46.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Moxa AWK-3121 1.14 devices. It provides functionality so that an administrator can run scripts on the device to troubleshoot any issues. However, the same functionality allows an attacker to execute commands on the device. The POST parameter "iw_filename" is susceptible to buffer overflow. By crafting a packet that contains a string of 162 characters, it is possible for an attacker to execute the attack. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/samuelhuntle
to execute the attack. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/samuelhuntley/Moxa_AWK_1121/blob/master/Moxa_AWK_1121 - https://seclists.org/bugtraq/2019/Jun/8 - http://packetstormsecurity.com/files/153223/Moxa-AWK-3121-1.14-Information-Disclosure-Command-Execution.html
CVE ID: CVE-2018-10702 State: PUBLISHED Published: 2019-06-07T19:55:26 Last Updated: 2024-08-05T07:46:46.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Moxa AWK-3121 1.14 devices. It provides functionality so that an administrator can run scripts on the device to troubleshoot any issues. However, the same functionality allows an attacker to execute commands on the device. The POST parameter "iw_filename" is susceptible to command injection via shell metacharacters. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/samuelhuntley/Moxa_AWK_1121/blob/master/Moxa_AWK_1121 - https://seclists.org/bugtraq/2019/Jun/8 - http
ttps://github.com/samuelhuntley/Moxa_AWK_1121/blob/master/Moxa_AWK_1121 - https://seclists.org/bugtraq/2019/Jun/8 - http://packetstormsecurity.com/files/153223/Moxa-AWK-3121-1.14-Information-Disclosure-Command-Execution.html