The admin terminal in Hawt.io does not require authentication, which allows remote attackers to execute arbitrary commands via the k parameter.
Published at: December 29, 2017 at 10:29PM
View on website
New vulnerability on the NVD: CVE-2014-0121
Tag: government hack NVD security
No comments: