Command injection

FiberHome ONU GPON AN5506-04-F RP2617 is affected by an OS command injection vulnerability. This vulnerability allows the attacker, once logged in, to send commands to the operating system as the root user via the ping diagnostic tool, bypassing the IP address field, and concatenating OS commands...

CVE-2021-42912

FiberHome ONU GPON AN5506-04-F RP2617 is affected by an OS command injection vulnerability. This vulnerability allows the attacker, once logged in, to send commands to the operating system as the root user via the ping diagnostic tool, bypassing the IP address field, and concatenating OS commands...

CVE-2021-42912

The FiberHome ONU GPON AN5506-04-F RP2617 is affected by an OS command injection vulnerability. This flaw allows an authenticated attacker to execute arbitrary commands on the operating system as the root user . The attack is initiated via the ping diagnostic tool , where the attacker can bypass ...

CVE-2021-40835 URL Address Bar Spoofing in F-Secure SAFE Browser for iOS

An URL Address bar spoofing vulnerability was discovered in Safe Browser for iOS. When user clicks on a specially crafted a malicious URL, if user does not carefully pay attention to url, user may be tricked to think content may be coming from a valid domain, while it comes from another. This is...

CVE-2021-42912: Improper Neutralization of Special Elements used in an OS Command

FiberHome ONU GPON AN5506-04-F RP2617 is affected by an OS command injection vulnerability. This vulnerability allows the attacker, once logged in, to send commands to the operating system as the root user via the ping diagnostic tool, bypassing the IP address field, and concatenating OS commands...

PT-2021-23696

Name of the Vulnerable Software and Affected Versions FiberHome ONU GPON AN5506-04-F RP2617 affected versions not specified Description The issue allows an attacker, once logged in, to send commands to the operating system as the root user via the ping diagnostic tool. This is achieved by bypassi...

F-Secure Safe Browser 安全漏洞

F-Secure Safe Browser is an Internet security browser from the Finnish company F-Secure. It is used to block viruses, Trojans, ransomware and other threats in real time. A security vulnerability exists in F-Secure Safe Browser for iOS that stems from a URL address bar spoofing vulnerability...

PT-2021-6788

Name of the Vulnerable Software and Affected Versions Mitsubishi Electric MELSEC iQ-F series FX5UC CPU all versions Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all versions Mitsubishi Electric MELSEC iQ-R series R00/01/02CPU all versions Mitsubishi Electric MELSEC iQ-R series...

PT-2021-6789

Name of the Vulnerable Software and Affected Versions Mitsubishi Electric MELSEC iQ-F series FX5UC CPU all versions Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all versions Mitsubishi Electric MELSEC iQ-R series R00/01/02CPU all versions Mitsubishi Electric MELSEC iQ-R series...

PT-2021-7079

Name of the Vulnerable Software and Affected Versions Mitsubishi Electric MELSEC iQ-F series FX5U-xMy/z versions prior to 1.270 Mitsubishi Electric MELSEC iQ-F series FX5U-xMy/z with serial number 179 and prior versions prior to 1.073 Mitsubishi Electric MELSEC iQ-F series FX5UC-xMy/z versions...

PT-2021-7078

Name of the Vulnerable Software and Affected Versions Mitsubishi Electric MELSEC iQ-F series FX5U-xMy/z versions prior to 1.270 Mitsubishi Electric MELSEC iQ-F series FX5UC-xMy/z versions prior to 1.270 Mitsubishi Electric MELSEC iQ-F series FX5UC-32MT/DS-TS versions prior to 1.270 Mitsubishi...

CVE-2021-40834

A user interface overlay vulnerability was discovered in F-secure SAFE Browser for Android. When user click on a specially crafted seemingly legitimate URL SAFE browser goes into full screen and hides the user interface. A remote attacker can leverage this to perform spoofing attack...

Input validation

A user interface overlay vulnerability was discovered in F-secure SAFE Browser for Android. When user click on a specially crafted seemingly legitimate URL SAFE browser goes into full screen and hides the user interface. A remote attacker can leverage this to perform spoofing attack...

CVE-2021-40834 User interface Spoofing in F-Secure SAFE browser for Android

A user interface overlay vulnerability was discovered in F-secure SAFE Browser for Android. When user click on a specially crafted seemingly legitimate URL SAFE browser goes into full screen and hides the user interface. A remote attacker can leverage this to perform spoofing attack...

CVE-2021-40834

CVE-2021-40834 is an UI overlay vulnerability in F‑Secure SAFE Browser for Android. A specially crafted URL can cause the browser to go full screen and hide the user interface, enabling a spoofing attack by a remote attacker. Documented impact is spoofing; CVSS v3.1 vector indicates Network attac...

PT-2021-22970

Name of the Vulnerable Software and Affected Versions F-secure SAFE Browser for Android affected versions not specified Description A user interface overlay issue was found, allowing a remote attacker to perform a spoofing attack when a user clicks on a specially crafted URL, causing the browser ...

CVE-2021-40834: Improper Restriction of Rendered UI Layers or Frames

A user interface overlay vulnerability was discovered in F-secure SAFE Browser for Android. When user click on a specially crafted seemingly legitimate URL SAFE browser goes into full screen and hides the user interface. A remote attacker can leverage this to perform spoofing attack...

Auerswald COMfortel 1400和2600 IP 授权问题漏洞

The Auerswald Comfortel 1400 Ip is an Ip phone from Auerswald Germany. A security vulnerability exists in the web-based configuration management interface of the Auerswald COMfortel 1400 and 2600 IP desk phones. The vulnerability allows access to configuration data and settings in the web-based...

HP Printer Buffer Overflow Vulnerability (HPSBPI03749, Printing-Shellz)

Multiple HP printers are prone to a buffer overflow vulnerability dubbed Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is fre...

CVE-2021-40833

A vulnerability affecting F-Secure antivirus engine was discovered whereby unpacking UPX file can lead to denial-of-service. The vulnerability can be exploited remotely by an attacker. A successful attack will result in denial-of-service of the antivirus engine...