Code injection

On the Vonage VDV-23 115 3.2.11-0.9.40 home router, sending a long string of characters in the loginPassword and/or loginUsername field to goform/login causes the router to reboot...

CVE-2017-16902

On the Vonage VDV-23 115 3.2.11-0.9.40 home router, sending a long string of characters in the loginPassword and/or loginUsername field to goform/login causes the router to reboot...

CVE-2017-16902

On the Vonage VDV-23 115 3.2.11-0.9.40 home router, sending a long string of characters in the loginPassword and/or loginUsername field to goform/login causes the router to reboot...

CVE-2017-16902

On the Vonage VDV-23 115 3.2.11-0.9.40 home router, sending a long string of characters in the loginPassword and/or loginUsername field to goform/login causes the router to reboot...

CVE-2017-16902

Vonage VDV-23 115 devices running firmware 3.2.11-0.9.40 are affected by CVE-2017-16902. A long string in loginUsername or loginPassword sent to goform/login can trigger a crash and router reboot, effectively a denial-of-service. CNVD-2017-37697 corroborates the reboot via a long login field; 133...

CVE-2017-16843

Vonage VDV-23 115 3.2.11-0.9.40 devices have stored XSS via the NewKeyword or NewDomain field to /goform/RgParentalBasic...

Cross site scripting

Vonage VDV-23 115 3.2.11-0.9.40 devices have stored XSS via the NewKeyword or NewDomain field to /goform/RgParentalBasic...

CVE-2017-16843

Vonage VDV-23 115 3.2.11-0.9.40 devices have stored XSS via the NewKeyword or NewDomain field to /goform/RgParentalBasic...

CVE-2017-16843

The CVE concerns the Vonage VDV-23 115 router (software version 3.2.11-0.9.40) which exposes a stored XSS in the web UI via the NewKeyword or NewDomain fields sent to /goform/RgParentalBasic. The issue is triggered when untrusted input is injected into these fields, leading to arbitrary script/HT...

ozbusiness.com.au XSS vulnerability

Open Bug Bounty ID: OBB-417939 Description| Value ---|--- Affected Website:| ozbusiness.com.au Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

Vonage VDV23 - Cross-Site Scripting

Vonage VDV23 - Cross-Site Scripting Exploit Title: Vonage Home Router – Stored Xss Date: 16/11/2017 Exploit Author: Nu11By73 Hardware Version: VDV-23: 115 Software Version: 3.2.11-0.9.40 CVE : CVE-2017-16843 NewKeyword Parameter: 1. Login to the router 2. Click advanced setup 3. Click parental...

Vonage VDV23 - Cross-Site Scripting Vulnerability

Exploit for hardware platform in category web applications Exploit Title: Vonage Home Router – Stored Xss Exploit Author: Nu11By73 Hardware Version: VDV-23: 115 Software Version: 3.2.11-0.9.40 CVE : CVE-2017-16843 NewKeyword Parameter: Login to the router Click advanced setup Click parental...

Vonage VDV23 - Cross-Site Scripting

Exploit Title: Vonage Home Router – Stored Xss Date: 16/11/2017 Exploit Author: Nu11By73 Hardware Version: VDV-23: 115 Software Version: 3.2.11-0.9.40 CVE : CVE-2017-16843 NewKeyword Parameter: 1. Login to the router 2. Click advanced setup 3. Click parental controls 4. In the block these keyword...

luckfarm.pw XSS vulnerability

Open Bug Bounty ID: OBB-417543 Description| Value ---|--- Affected Website:| luckfarm.pw Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

mrjatt.me XSS vulnerability

Open Bug Bounty ID: OBB-416721 Description| Value ---|--- Affected Website:| mrjatt.me Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

kompas.tv XSS vulnerability

Open Bug Bounty ID: OBB-392944 Description| Value ---|--- Affected Website:| kompas.tv Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

permon.cz XSS vulnerability

Open Bug Bounty ID: OBB-389053 Description| Value ---|--- Affected Website:| permon.cz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

atlantacuisine.com XSS vulnerability

Open Bug Bounty ID: OBB-385347 Description| Value ---|--- Affected Website:| atlantacuisine.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Chea...

deohoman.org XSS vulnerability

Open Bug Bounty ID: OBB-367690 Description| Value ---|--- Affected Website:| deohoman.org Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Shee...

ayabenyaacov.co.il XSS vulnerability

Open Bug Bounty ID: OBB-367485 Description| Value ---|--- Affected Website:| ayabenyaacov.co.il Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Chea...