CVE-2018-25037

A vulnerability was found in Thomson TCW710 ST5D.10.05 and classified as problematic. Affected by this issue is some unknown functionality of the file /goform/RgDdns. The manipulation of the argument DdnsHostName with the input alert1 as part of POST Request leads to cross site scripting...

CVE-2018-25039

A vulnerability was found in Thomson TCW710 ST5D.10.05. It has been declared as problematic. This vulnerability affects unknown code of the file /goform/RgUrlBlock.asp. The manipulation of the argument BasicParentalNewKeyword with the input alert1 as part of POST Request leads to cross site...

CVE-2018-25035

A vulnerability, which was classified as problematic, was found in Thomson TCW710 ST5D.10.05. Affected is an unknown function of the file /goform/RGFirewallEL. The manipulation of the argument EmailAddress/SmtpServerName with the input alert1 as part of POST Request leads to cross site scripting...

CVE-2018-25036

A vulnerability has been found in Thomson TCW710 ST5D.10.05 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /goform/RgTime. The manipulation of the argument TimeServer1/TimeServer2/TimeServer3 with the input alert1 as part of POST Request lead...

CVE-2018-25039

The CVE-2018-25039 entry concerns Thomson TCW710 ST5D.10.05 with a vulnerability in /goform/RgUrlBlock.asp. The issue is a cross-site scripting (stored/persistent) flaw triggered by manipulating the BasicParentalNewKeyword parameter via POST requests, allowing a remote attacker to inject script c...

CVE-2018-25039 Thomson TCW710 RgUrlBlock.asp Persistent cross site scriting

A vulnerability was found in Thomson TCW710 ST5D.10.05. It has been declared as problematic. This vulnerability affects unknown code of the file /goform/RgUrlBlock.asp. The manipulation of the argument BasicParentalNewKeyword with the input alert1 as part of POST Request leads to cross site...

CVE-2018-25039 Thomson TCW710 RgUrlBlock.asp Persistent cross site scriting

A vulnerability was found in Thomson TCW710 ST5D.10.05. It has been declared as problematic. This vulnerability affects unknown code of the file /goform/RgUrlBlock.asp. The manipulation of the argument BasicParentalNewKeyword with the input alert1 as part of POST Request leads to cross site...

CVE-2018-25038

CVE-2018-25038 affects the Thomson TCW710 ST5D.10.05 router, specifically the /goform/RgDhcp endpoint. The vulnerability arises from improper handling of the PppUserName POST parameter, allowing stored cross-site scripting via input like >. Remote attackers can initiate the exploit, and public...

CVE-2018-25038 Thomson TCW710 RgDhcp Persistent cross site scriting

A vulnerability was found in Thomson TCW710 ST5D.10.05. It has been classified as problematic. This affects an unknown part of the file /goform/RgDhcp. The manipulation of the argument PppUserName with the input alert1 as part of POST Request leads to cross site scripting Persistent. It is possib...

CVE-2018-25037 Thomson TCW710 RgDdns Persistent cross site scriting

A vulnerability was found in Thomson TCW710 ST5D.10.05 and classified as problematic. Affected by this issue is some unknown functionality of the file /goform/RgDdns. The manipulation of the argument DdnsHostName with the input alert1 as part of POST Request leads to cross site scripting...

CVE-2018-25037

The CVE-2018-25037 issue affects Thomson TCW710 ST5D.10.05, where the post parameter DdnsHostName in /goform/RgDdns can be manipulated with the payload > to trigger a stored XSS (Persistent). The vulnerability is exploitable remotely and the exploit has been disclosed publicly. No remediation ...

CVE-2018-25036 Thomson TCW710 RgTime Persistent cross site scriting

A vulnerability has been found in Thomson TCW710 ST5D.10.05 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /goform/RgTime. The manipulation of the argument TimeServer1/TimeServer2/TimeServer3 with the input alert1 as part of POST Request lead...

CVE-2018-25036

Thomson TCW710 ST5D.10.05 is affected by CVE-2018-25036 due to an unknown-functionality issue in /goform/RgTime. The vulnerability enables persistent cross-site scripting (XSS) via crafted POST input on TimeServer1/TimeServer2/TimeServer3 (e.g., >). The attack can be launched remotely and the ...

CVE-2018-25035 Thomson TCW710 RGFirewallEL Persistent cross site scriting

A vulnerability, which was classified as problematic, was found in Thomson TCW710 ST5D.10.05. Affected is an unknown function of the file /goform/RGFirewallEL. The manipulation of the argument EmailAddress/SmtpServerName with the input alert1 as part of POST Request leads to cross site scripting...

CVE-2018-25035 Thomson TCW710 RGFirewallEL Persistent cross site scriting

A vulnerability, which was classified as problematic, was found in Thomson TCW710 ST5D.10.05. Affected is an unknown function of the file /goform/RGFirewallEL. The manipulation of the argument EmailAddress/SmtpServerName with the input alert1 as part of POST Request leads to cross site scripting...

CVE-2018-25034

CVE-2018-25034 affects Thomson TCW710 ST5D.10.05. A vulnerability in the handling of the file /goform/wlanPrimaryNetwork allows manipulation of the ServiceSetIdentifier parameter with input like > in a POST request, resulting in a basic persistent cross-site scripting flaw. The attack is descr...

CVE-2018-4901

creationtimestamp| type| source ---|---|--- 2022-06-10 23:02:10+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/37...

CVE-2018-17240

There is a memory dump vulnerability on Netwave IP camera devices at //proc/kcore that allows an unauthenticated attacker to exfiltrate sensitive information from the network configuration e.g., username and password...

CVE-2018-17240

Netwave IP cameras are affected by CVE-2018-17240 due to a memory dump vulnerability at //proc/kcore that allows an unauthenticated attacker to exfiltrate sensitive network configuration data (e.g., usernames and passwords). Public exploit details exist (Netwave exploit) showing how to dump confi...

Security Updates for Microsoft Word Products C2R (November 2018)

The Microsoft Word Products are missing a security update. It is, therefore, affected by the following vulnerability : - A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the...