13 matches found
EUVD-2023-44469
Malicious code in bioql PyPI...
DrayTek Vigor routers 安全漏洞
DrayTek Vigor routers are a series of routers from Taiwan's DrayTek Corporation DrayTek. A security vulnerability exists in Draytek Vigor3910 4.3.2.5 and earlier versions, which stems from a directory traversal vulnerability in processpost...
CVE-2024-23721
A Directory Traversal issue was discovered in processpost on Draytek Vigor3910 4.3.2.5 devices. When sending a certain POST request, it calls the function and exports information...
Design/Logic Flaw
A vulnerability, which was classified as problematic, has been found in Jahastech NxFilter 4.3.2.5. This issue affects some unknown processing of the file user,adap.jsp?actionFlag=test&id=1 of the component Bind Request Handler. The manipulation leads to ldap injection. The attack may be initiate...
PT-2023-32814 · Jahastech · Nxfilter
Name of the Vulnerable Software and Affected Versions: Jahastech NxFilter version 4.3.2.5 Description: A problematic issue has been found in the Bind Request Handler component, affecting the processing of the file user,adap.jsp?actionFlag=test&id=1. This leads to ldap injection and can be initiat...
NxFilter Injection Vulnerability
NxFilter is a lightweight DNS filter from NxFilter, Inc. An injection vulnerability exists in Jahastech NxFilter version 4.3.2.5, which stems from the file user,adap.jsp?actionFlag=test&id=1 causes LDAP injection...
CVE-2023-3841
A vulnerability has been found in NxFilter 4.3.2.5 and classified as problematic. This vulnerability affects unknown code of the file user.jsp. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The identifier of this vulnerability is VDB-235192. NOTE: The...
CVE-2023-3841
A vulnerability has been found in NxFilter 4.3.2.5 and classified as problematic. This vulnerability affects unknown code of the file user.jsp. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The identifier of this vulnerability is VDB-235192. NOTE: The...
Cross site request forgery (csrf)
A vulnerability has been found in NxFilter 4.3.2.5 and classified as problematic. This vulnerability affects unknown code of the file user.jsp. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The identifier of this vulnerability is VDB-235192. NOTE: The...
PT-2023-26406 · Nxfilter · Nxfilter
Name of the Vulnerable Software and Affected Versions: NxFilter version 4.3.2.5 Description: A problematic issue was found in NxFilter, affecting an unknown part of the file "/report,daily.jsp". The manipulation of the user argument leads to cross-site scripting. It is possible to initiate the...
PT-2023-26410 · Nxfilter · Nxfilter
Name of the Vulnerable Software and Affected Versions: NxFilter version 4.3.2.5 Description: A vulnerability has been found in NxFilter, affecting unknown code of the file user.jsp, leading to cross-site request forgery. The attack can be initiated remotely. The vendor was contacted early about...
NxFilter 跨站请求伪造漏洞
NxFilter is a lightweight DNS filter from NxFilter, Inc. A cross-site request forgery vulnerability exists in NxFilter version 4.3.2.5, which stems from a cross-site request forgery CSRF vulnerability in the file user.jsp...
NxFilter 跨站脚本漏洞
NxFilter is a lightweight DNS filter from NxFilter, Inc. A cross-site scripting vulnerability exists in NxFilter version 4.3.2.5, which stems from a cross-site scripting XSS vulnerability in the parameter user...