CVE-2018-11094

An issue was discovered on Intelbras NCLOUD 300 1.0 devices. /cgi-bin/ExportSettings.sh, /goform/updateWPS, /goform/RebootSystem, and /goform/vpnBasicSettings do not require authentication. For example, when an HTTP POST request is made to /cgi-bin/ExportSettings.sh, the username, password, and other details are retrieved.

• CWE-798

• https://blog.kos-lab.com/Hello-World/Exploit, Third Party Advisory
• https://www.exploit-db.com/exploits/44637/Exploit, Third Party Advisory, VDB Entry
• https://blog.kos-lab.com/Hello-World/Exploit, Third Party Advisory
• https://www.exploit-db.com/exploits/44637/Exploit, Third Party Advisory, VDB Entry

Published

May 15, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-11088Pivotal Applications Manager in Pivotal Application Service,…
• CVE-2018-1109A vulnerability was found in Braces versions 2.2.0 and above…5.3
• CVE-2018-11090An XSS issue was discovered in MyBiz MyProcureNet 5.0.0. Thi…
• CVE-2018-11091An issue was discovered in MyBiz MyProcureNet 5.0.0. A malic…9.9
• CVE-2018-11092An issue was discovered in the Admin Notes plugin 1.1 for My…
• CVE-2018-11093Cross-site scripting (XSS) vulnerability in the Link package…6.1
• CVE-2018-11095The decompileJUMP function in decompile.c in libming through…
• CVE-2018-11096Horse Market Sell & Rent Portal Script 1.5.7 has a CSRF vuln…
• CVE-2018-11097An issue was discovered in cloudwu/cstring through 2016-11-0…
• CVE-2018-11098An issue was discovered in Frog CMS 0.9.5. There is a file u…
• CVE-2018-11099The header::add_INFO_descriptor function in header.cpp in VC…
• CVE-2018-1110A flaw was found in knot-resolver before version 2.3.0. Malf…7.5