PT-2021-17837

Name of the Vulnerable Software and Affected Versions: Soyal Technologies SOYAL 701Server version 9.0.1 Description: The issue is related to an elevation of privileges that can be exploited by an authenticated user to change the executable file with a binary choice. This is due to improper...

Unspecified vulnerability in the Diego F. Aranha relic

Diego F.Aranha relic is a Diego F.Aranha open source application. A modern cryptographic meta-toolkit focusing on efficiency and flexibility. A security vulnerability exists in versions prior to RELIC 2021-04-03, which can be exploited by an attacker PKCS suffers from a buffer overflow...

Diego F. Aranha relic input validation error vulnerability

Diego F.Aranha relic is a Diego F.Aranha open source application. A modern cryptographic meta-toolkit focusing on efficiency and flexibility. A security vulnerability exists in versions prior to RELIC 2020-08-01, which stems from an invalid RSA PKCS.No detailed vulnerability details are provided ...

Diego F.Aranha relic 安全漏洞

Diego F.Aranha relic is a Diego F.Aranha open source application. A modern cryptographic meta-toolkit focusing on efficiency and flexibility. A security vulnerability exists in versions prior to RELIC 2021-04-03, which can be exploited by an attacker PKCS suffers from a buffer overflow...

Weak Password Vulnerability in HUAWEI Secoway USG2110-F

Founded in 1987, Huawei is a leading global provider of ICT information and communications infrastructure and smart terminals. A weak password vulnerability exists in HUAWEI Secoway USG2110-F. An attacker can exploit the vulnerability to obtain sensitive information...

CVE-2021-30003

An issue was discovered on Nokia G-120W-F 3FE46606AGAB91 devices. There is Stored XSS in the administrative interface via urlfilter.cgi?add urladdress...

CVE-2021-30003

An issue was discovered on Nokia G-120W-F 3FE46606AGAB91 devices. There is Stored XSS in the administrative interface via urlfilter.cgi?add urladdress...

Cross site scripting

An issue was discovered on Nokia G-120W-F 3FE46606AGAB91 devices. There is Stored XSS in the administrative interface via urlfilter.cgi?add urladdress...

CVE-2021-30003

An issue was discovered on Nokia G-120W-F 3FE46606AGAB91 devices. There is Stored XSS in the administrative interface via urlfilter.cgi?add urladdress...

CVE-2021-30003

The CVE-2021-30003 entry concerns Nokia G-120W-F devices (model 3FE46606AGAB91) with a Stored XSS vulnerability in the administrative interface, exploitable via the URL filter page parameter urlfilter.cgi?add url_address. The issue is rooted in an XSS flaw that could affect authenticated admins a...

CVE-2021-30003

An issue was discovered on Nokia G-120W-F 3FE46606AGAB91 devices. There is Stored XSS in the administrative interface via urlfilter.cgi?add urladdress...

CVE-2021-30003: Improper Neutralization of Input During Web Page Generation

An issue was discovered on Nokia G-120W-F 3FE46606AGAB91 devices. There is Stored XSS in the administrative interface via urlfilter.cgi?add urladdress...

Nokia G-120W-F 跨站脚本漏洞

The Nokia G-120W-F is a router from Nokia Finland. It provides network connectivity. A security vulnerability exists in Nokia G-120W-F that originates from XSS stored in the management interface via urlfilter.cgi...

PT-2021-18565

Name of the Vulnerable Software and Affected Versions Nokia G-120W-F version 3FE46606AGAB91 Description The issue is related to Stored XSS in the administrative interface. It can be exploited via the "urlfilter.cgi?add url address" endpoint. Recommendations For Nokia G-120W-F version...

Information Disclosure Vulnerability in CR16018-F Core Router of Xinhua San Technologies Co.

The CR16018-F Core Router is a router from Xinhua San Technologies Co. An information disclosure vulnerability exists in the CR16018-F Core Router from Xinhua San Technologies Limited, which can be exploited by attackers to obtain sensitive information...

PT-2021-17185

Name of the Vulnerable Software and Affected Versions: WoWonder versions prior to 3.1 Description: The issue allows remote attackers to gain access to the database by exploiting a SQL Injection vulnerability in the requests.php?f=search-my-followers endpoint via the event id parameter...

CVE-2021-28031

An issue was discovered in the scratchpad crate before 1.3.1 for Rust. The moveelements function can have a double-free upon a panic in a user-provided f function...

SharpSphere - .NET Project For Attacking vCenter

SharpSphere gives red teamers the ability to easily interact with the guest operating systems of virtual machines managed by vCenter. It uses the vSphere Web Services API and exposes the following functions: Command & Control - In combination with F-Secure's C3, SharpSphere provides C&C into VMs...

HiLCOS IPSec Firewall Bypass

The vulnerability of the implementation of IPSec protocols in the HiLCOS operating system for wireless access points OpenBAT and BAT450-F is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to circumvent firewall policies from a remote...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the fmidisetalt function in the drivers/usb/gadget/function/fmidi.c file in Linux operating systems is related to the repeated release of a memory area. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...