CVE-2018-10248: Cross-Site Request Forgery (CSRF)

An issue was discovered in WUZHI CMS 4.1.0. There is a CSRF vulnerability that can delete any article via index.php?m=content&f=content&v=recycledelete...

CVE-2018-9926: Cross-Site Request Forgery (CSRF)

An issue was discovered in WUZHI CMS 4.1.0. There is a CSRF vulnerability that can add an admin account via index.php?m=core&f=power&v=add...

PT-2018-19094

Name of the Vulnerable Software and Affected Versions WUZHI CMS version 4.1.0 Description A CSRF issue was found that allows adding an admin account via the "index.php?m=core&f=power&v=add" endpoint. Recommendations For WUZHI CMS version 4.1.0, update to a newer version that contains a fix for th...

CVE-2018-9927: Cross-Site Request Forgery (CSRF)

An issue was discovered in WUZHI CMS 4.1.0. There is a CSRF vulnerability that can add a user account via index.php?m=member&f=index&v=add...

PT-2018-19095

Name of the Vulnerable Software and Affected Versions WUZHI CMS version 4.1.0 Description A CSRF issue was discovered, allowing an attacker to add a user account via the "index.php?m=member&f=index&v=add" endpoint. Recommendations For WUZHI CMS version 4.1.0, consider implementing proper CSRF...

f-facts.nl XSS vulnerability

Open Bug Bounty ID: OBB-597193 Description| Value ---|--- Affected Website:| f-facts.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

f-f.ir XSS vulnerability

Open Bug Bounty ID: OBB-594194 Description| Value ---|--- Affected Website:| f-f.ir Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

PT-2018-3589 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.16.4 Description: A double free vulnerability in the f midi set alt function of drivers/usb/gadget/function/f midi.c in the f midi driver may allow attackers to cause a denial of service or possibly have...

f-dr.com XSS vulnerability

Open Bug Bounty ID: OBB-573714 Description| Value ---|--- Affected Website:| f-dr.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

FTPShell client denial of service vulnerability

FTPShell client is a set of windows-based file transfer program. A security vulnerability exists in FTPShell Client version 6.7. A remote attacker can cause a denial of service crash and execute arbitrary code by sending 400 'F' characters and FTP 220 response code to exploit the vulnerability...

CVE-2018-7573

An issue was discovered in FTPShell Client 6.7. A remote FTP server can send 400 characters of 'F' in conjunction with the FTP 220 response code to crash the application; after this overflow, one can run arbitrary code on the victim machine. This is similar to CVE-2009-3364 and CVE-2017-6465...

CVE-2018-6324

F-Secure Radar on-premises before 2018-02-15 has an Unvalidated Redirect via the ReturnUrl parameter that triggers upon a user login...

Design/Logic Flaw

F-Secure Radar on-premises before 2018-02-15 has XSS via vectors involving the Tags parameter in the JSON request body in an outbound request for the /api/latest/vulnerabilityscans/tags/batch resource, aka a "suggested metadata tags for assets" issue...

Open redirect

F-Secure Radar on-premises before 2018-02-15 has an Unvalidated Redirect via the ReturnUrl parameter that triggers upon a user login...

CVE-2018-6189

F-Secure Radar on-premises before 2018-02-15 has XSS via vectors involving the Tags parameter in the JSON request body in an outbound request for the /api/latest/vulnerabilityscans/tags/batch resource, aka a "suggested metadata tags for assets" issue...

CVE-2018-6324

F-Secure Radar on-premises before 2018-02-15 has an Unvalidated Redirect via the ReturnUrl parameter that triggers upon a user login...

CVE-2018-6189

F-Secure Radar on-premises before 2018-02-15 has XSS via vectors involving the Tags parameter in the JSON request body in an outbound request for the /api/latest/vulnerabilityscans/tags/batch resource, aka a "suggested metadata tags for assets" issue...

CVE-2018-6189

CVE-2018-6189 affects F-Secure Radar (on-premises) prior to 2018-02-15, enabling a cross-site scripting (XSS) vulnerability via the Tags parameter in the JSON body of an outbound request to /api/latest/vulnerabilityscans/tags/batch. The issue is described as a “suggested metadata tags for assets”...

CVE-2018-6324

F-Secure Radar on-premises before 2018-02-15 has an Unvalidated Redirect via the ReturnUrl parameter that triggers upon a user login...

CVE-2018-6324

The CVE-2018-6324 issue affects F-Secure Radar (on-premises) prior to 2018-02-15, with an unvalidated Redirect via the ReturnUrl parameter that occurs after login. Impact described as an open redirect; user is redirected to a user-controlled destination, potentially leading to phishing or credent...