39 matches found
ZTE ZXHN H108N R1A / ZXV10 W300 Traversal / Disclosure / Authorization
Exploit Title: ZTE ZXHN H108N R1A + ZXV10 W300 routers - multiple vulnerabilities Discovered by: Karn Ganeshen CERT VU 391604 Vendor Homepage: www.zte.com.cn Versions Reported ZTE ZXHN H108N R1A - Software version ZTE.bhs.ZXHNH108NR1A ZTE ZXV10 W300 - Software version - w300v1.0.0fER1PE Overview...
ZTE ZXHN H108N R1A, ZXV10 W300 Routers - Multiple Vulnerabilities
Exploit for hardware platform in category web applications Exploit Title: ZTE ZXHN H108N R1A + ZXV10 W300 routers - multiple vulnerabilities Discovered by: Karn Ganeshen CERT VU 391604 Vendor Homepage: www.zte.com.cn Versions Reported ZTE ZXHN H108N R1A - Software version ZTE.bhs.ZXHNH108NR1A ZTE...
CVE-2014-7248
Cross-site scripting XSS vulnerability in IPA iLogScanner 4.0 allows remote attackers to inject arbitrary web script or HTML by triggering a crafted entry in a log file...
CVE-2014-7248
CVE-2014-7248 affects IPA iLogScanner 4.0. The vulnerability is a cross-site scripting (CWE-79) flaw in how analysis results are processed/output to HTML, allowing a crafted log entry to inject arbitrary script or HTML into the resulting page. Root cause: improper handling when generating the HTM...
CVE-2013-7248
The CVE-2013-7248 issue in Franklin Fueling Systems TS-550 evo affects firmware 2.0.0.6833 and earlier than 2.4.0, due to a hardcoded password for the roleDiag account that enables remote root access via cmdWebCheckRole in TSA_REQUEST. Trustwave SpiderLabs’ advisory TWSL2014-001 documents the roo...
CVE-2013-7248
creationtimestamp| type| source ---|---|--- 2014-01-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31180...
Franklin Fueling TS-550 evo 2.0.0.6833 - Multiple Vulnerabilities
Trustwave's SpiderLabs Security Advisory TWSL2014-001: Multiple Vulnerabilities in Franklin Fueling's TS-550 evo Published: 01/03/2014 Version: 1.0 Vendor: Franklin Fueling Systems http://www.franklinfueling.com/ Product: TS-550 evo device Version affected: Firmware 2.0.0.6833 confirmed. Affects...
Franklin Fueling TS-550 evo 2.0.0.6833 - Multiple Vulnerabilities
Exploit for hardware platform in category web applications Trustwave's SpiderLabs Security Advisory TWSL2014-001: Multiple Vulnerabilities in Franklin Fueling's TS-550 evo Published: 01/03/2014 Version: 1.0 Vendor: Franklin Fueling Systems http://www.franklinfueling.com/ Product: TS-550 evo devic...
Franklin Fueling TS-550 evo 2.0.0.6833 - Multiple Vulnerabilities
Franklin Fueling TS-550 evo 2.0.0.6833 - Multiple Vulnerabilities Trustwave's SpiderLabs Security Advisory TWSL2014-001: Multiple Vulnerabilities in Franklin Fueling's TS-550 evo Published: 01/03/2014 Version: 1.0 Vendor: Franklin Fueling Systems http://www.franklinfueling.com/ Product: TS-550 ev...
Franklin Fueling's T550 Evo Access Control / Credentials
Franklin Fueling's TS-550 Evo suffers from insufficient access control and hard-coded credential vulnerabilities. Trustwave's SpiderLabs Security Advisory TWSL2014-001: Multiple Vulnerabilities in Franklin Fueling's TS-550 evo Published: 01/03/2014 Version: 1.0 Vendor: Franklin Fueling Systems...
Franklin Fueling's T550 Evo Access Control / Credentials
Trustwave's SpiderLabs Security Advisory TWSL2014-001: Multiple Vulnerabilities in Franklin Fueling's TS-550 evo Published: 01/03/2014 Version: 1.0 Vendor: Franklin Fueling Systems http://www.franklinfueling.com/ Product: TS-550 evo device Version affected: Firmware 2.0.0.6833 confirmed. Affects...
CVE-2006-7248
CVE-2006-7248 is rejected and does not represent an active vulnerability entry.
openSUSE Security Update : rubygem-actionpack-2_3 (rubygem-actionpack-2_3-1934)
This update of rubygems fixes two vulnerabilities : - CVE-2008-7248: CVSS v2 Base Score: 4.3 Rails CSRF protection can be bypassed by using special content-types for a HTTP request. - CVE-2009-4214: CVSS v2 Base Score: 4.3 The method striptags does not completely protect against XSS attacks...
openSUSE Security Update : rubygem-actionpack (rubygem-actionpack-1946)
This update of rubygems fixes two vulnerabilities : - CVE-2008-7248: CVSS v2 Base Score: 4.3 Rails CSRF protection can be bypassed by using special content-types for a HTTP request. - CVE-2009-4214: CVSS v2 Base Score: 4.3 The method striptags does not completely protect against XSS attacks...
openSUSE Security Update : rubygem-actionpack (rubygem-actionpack-1946)
This update of rubygems fixes two vulnerabilities : - CVE-2008-7248: CVSS v2 Base Score: 4.3 Rails CSRF protection can be bypassed by using special content-types for a HTTP request. - CVE-2009-4214: CVSS v2 Base Score: 4.3 The method striptags does not completely protect against XSS attacks...
Gentoo Security Advisory GLSA 200912-02 (rails)
The remote host is missing updates announced in advisory GLSA 200912-02. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
CVE-2008-7248
Affected software / component: Ruby on Rails 2.1 before 2.1.3 and 2.2.x before 2.2.2 in which CSRF protection relies on token verification. Vulnerability / root cause: Rails CSRF protection can be bypassed because tokens are not verified for requests with certain content types (demonstrated with ...