Author: Cyberthreat Blog

Cougar-LG stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain credentials.

The default configuration for Cougar-LG stores sensitive information under the web root with insufficient access control, which might allow remote attackers to obtain private ssh keys.

lg.pl in Cistron-LG 1.01 stores sensitive information under the web root with insufficient access controls, which allows remote attackers to obtain IP addresses and other unspecified router credentials.

mrlg-lib.php in mrlg4php before 1.0.8 allows remote attackers to execute arbitrary shell code.

Pulp before 2.3.0 uses the same the same certificate authority key and certificate for all installations.