11 matches found
WebPort-v1.19.1-Reflected-XSS
WebPort-v1.19.1-Reflected-XSS Reflected XSS in WebPort-v1.19.1 impacts users who open a maliciously crafted link or third-party web page. CVE-2019-12460 https://vulners.com/cve/CVE-2019-12460 PoC-1 To exploit vulnerability, someone could use 'http://server:8090/access/setup?type=" request to impa...
SUSE CVE-2026-64168
In the Linux kernel, the following vulnerability has been resolved: spi: sprd: fix error pointer deref after DMA setup failure The driver falls back to PIO mode if DMA setup fails during probe. Make sure to check the dma.enabled flag before trying to release the DMA channels also on late probe...
Linux Kernel Security Vulnerabilities
The Linux kernel is the kernel used by the Linux operating system developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the failure of the DAMON sysfs scheme directory setup, resulting in the uncleaned retention of the...
EUVD-2019-4068
Malware in sbrugna...
CVE-2025-50124
A CWE-269: Improper Privilege Management vulnerability exists that could cause privilege escalation when the server is accessed by a privileged account via a console and through exploitation of a setup script...
CVE-2021-21276
Polr is an open source URL shortener. in Polr before version 2.3.0, a vulnerability in the setup process allows attackers to gain admin access to site instances, even if they do not possess an existing account. This vulnerability exists regardless of users' settings. If an attacker crafts a reque...
Design/Logic Flaw
Web Port 1.19.1 allows XSS via the /access/setup type parameter...
CVE-2019-12460
Web Port 1.19.1 allows XSS via the /access/setup type parameter...
CVE-2019-12460
CVE-2019-12460 affects Web Port 1.19.1 with a reflected XSS flaw exploitable via the /access/setup?type parameter. The issue stems from unsanitized input in the setup endpoint, enabling an attacker to inject and execute script in a victim’s browser. Public evidence includes PoC payloads and explo...
PT-2019-12806
Name of the Vulnerable Software and Affected Versions Web Port version 1.19.1 Description The issue allows for XSS via the /access/setup type parameter. Recommendations For version 1.19.1, avoid using the type parameter in the /access/setup API endpoint until the issue is resolved...
