20967 matches found
Cross site scripting
An issue was discovered on Nokia G-120W-F 3FE46606AGAB91 devices. There is Stored XSS in the administrative interface via urlfilter.cgi?add urladdress...
CVE-2021-30003
An issue was discovered on Nokia G-120W-F 3FE46606AGAB91 devices. There is Stored XSS in the administrative interface via urlfilter.cgi?add urladdress...
CVE-2021-30003
An issue was discovered on Nokia G-120W-F 3FE46606AGAB91 devices. There is Stored XSS in the administrative interface via urlfilter.cgi?add urladdress...
CVE-2021-30003
The CVE-2021-30003 entry concerns Nokia G-120W-F devices (model 3FE46606AGAB91) with a Stored XSS vulnerability in the administrative interface, exploitable via the URL filter page parameter urlfilter.cgi?add url_address. The issue is rooted in an XSS flaw that could affect authenticated admins a...
PT-2021-18565
Name of the Vulnerable Software and Affected Versions Nokia G-120W-F version 3FE46606AGAB91 Description The issue is related to Stored XSS in the administrative interface. It can be exploited via the "urlfilter.cgi?add url address" endpoint. Recommendations For Nokia G-120W-F version...
Nokia G-120W-F 跨站脚本漏洞
The Nokia G-120W-F is a router from Nokia Finland. It provides network connectivity. A security vulnerability exists in Nokia G-120W-F that originates from XSS stored in the management interface via urlfilter.cgi...
CVE-2021-30003: Improper Neutralization of Input During Web Page Generation
An issue was discovered on Nokia G-120W-F 3FE46606AGAB91 devices. There is Stored XSS in the administrative interface via urlfilter.cgi?add urladdress...
Information Disclosure Vulnerability in CR16018-F Core Router of Xinhua San Technologies Co.
The CR16018-F Core Router is a router from Xinhua San Technologies Co. An information disclosure vulnerability exists in the CR16018-F Core Router from Xinhua San Technologies Limited, which can be exploited by attackers to obtain sensitive information...
PT-2021-17185
Name of the Vulnerable Software and Affected Versions: WoWonder versions prior to 3.1 Description: The issue allows remote attackers to gain access to the database by exploiting a SQL Injection vulnerability in the requests.php?f=search-my-followers endpoint via the event id parameter...
CVE-2021-28031
An issue was discovered in the scratchpad crate before 1.3.1 for Rust. The moveelements function can have a double-free upon a panic in a user-provided f function...
SharpSphere - .NET Project For Attacking vCenter
SharpSphere gives red teamers the ability to easily interact with the guest operating systems of virtual machines managed by vCenter. It uses the vSphere Web Services API and exposes the following functions: Command & Control - In combination with F-Secure's C3, SharpSphere provides C&C into VMs...
The vulnerability in the implementation of IPSec protocols for the HiLCOS operating system in wireless access points OpenBAT and BAT450-F allows a hacker to circumvent firewall policies.
The vulnerability of the implementation of IPSec protocols in the HiLCOS operating system for wireless access points OpenBAT and BAT450-F is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to circumvent firewall policies from a remote...
The vulnerability of the f_midi_set_alt function in Linux operating system kernels, which allows a hacker to trigger a service failure
The vulnerability of the fmidisetalt function in the drivers/usb/gadget/function/fmidi.c file in Linux operating systems is related to the repeated release of a memory area. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...
CVE-2021-3304
Sagemcom F@ST 3686 v2 3.495 devices have a buffer overflow via a long sessionKey to the goform/login URI...
CVE-2021-3304
CVE-2021-3304 affects Sagemcom F@ST 3686 v2 with firmware 3.495; a buffer overflow is triggered by a long sessionKey to the /goform/login URI. Connected documents confirm the affected product and input vector, but do not provide exploitation details or remediation steps in the supplied material.
CVE-2021-3304: Buffer Copy without Checking Size of Input
Sagemcom F@ST 3686 v2 3.495 devices have a buffer overflow via a long sessionKey to the goform/login URI...
Sagemcom F@ST3686 Buffer Error Vulnerability
The Sagemcom F@ST3686 is a router from Sagemcom France. A buffer error vulnerability exists in the Sagemcom F@ST 3686 v2 3.495 devices, which originates from a long sessionKey to a goform login URI...
PT-2021-20025
Name of the Vulnerable Software and Affected Versions Sagemcom F@ST 3686 v2 version 3.495 Description The issue is a buffer overflow that can be triggered by sending a long sessionKey to the "goform/login" URI. This can potentially allow for unauthorized access or code execution. Recommendations...
PT-2021-30910
Уязвимость реализации набора протоколов IPSec операционной системы HiLCOS беспроводных точек доступа OpenBAT и BAT450-F связана с недостаточной проверкой вводимых данных. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, обойти политики брандмауэра...
CVE-2020-5665
Improper check or handling of exceptional conditions in MELSEC iQ-F series FX5UC CPU unit firmware version 1.060 and earlier allows an attacker to cause a denial-of-service DoS condition on program execution and communication by sending a specially crafted ARP packet...