ZTE ADSL ZXV10 W300 Modems - Multiple Vulnerabilities

ZTE ADSL ZXV10 W300 Modems - Multiple Vulnerabilities Exploit Title: ZTE ADSL ZXV10 W300 modems - Multiple vulnerabilities Discovered by: Karn Ganeshen Vendor Homepage: www.zte.com.cn Versions Reported: W300V2.1.0fER7PEO57 and W300V2.1.0hER7PEO57 CVE-ID: CVE-2015-7257 CVE-2015-7258 CVE-2015-7259...

ZTE ADSL Authorization Bypass / Information Disclosure

ZTE ADSL modems - Multiple vulnerabilities Confirmed on 2 of multiple software versions - W300V2.1.0fER7PEO57 and W300V2.1.0hER7PEO57 1 Insufficient authorization controls CVE-ID: CVE-2015-7257 Observed in Password Change functionality. Other functions may be vulnerable as well. Expected behavior...

CVE-2014-7258

Cross-site scripting XSS vulnerability in KENT-WEB Clip Board 2.91 and earlier, when running certain versions of Internet Explorer, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-7258

CVE-2014-7258 is an XSS vulnerability in KENT-WEB Clip Board 2.91 and earlier that can execute arbitrary script in the browser when viewed with certain Internet Explorer versions. JVN details indicate the issue affects Clip Board up to ver. 2.91 and can be exploited in IE 5.01–7 environments lack...

CVE-2013-7258

CVE-2013-7258 is an XSS vulnerability in web2ldap 1.1.x prior to 1.1.49. Exploitation relies on injecting arbitrary script/HTML through the web UI that displays group DN and entry data in the group administration interface. The available documents do not specify a concrete fix version or patch de...

Fedora Update for dovecot FEDORA-2011-7258

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2008-7258

The CVE-2008-7258 issue affects the ssmtp package (versions 2.61 and 2.62) and is tied to the standardise() function, where a long email line beginning with a dot can cause a denial of service (application exit). CVE notes this as a usability problem with no security impact. Distribution advisori...

CVE-2008-7258

The standardise function in Anibal Monsalve Salazar sSMTP 2.61 and 2.62 allows local users to cause a denial of service application exit via an e-mail message containing a long line that begins with a . dot character. NOTE: CVE disputes this issue because it is solely a usability problem for...

Fedora 13 : ssmtp-2.61-15.fc13 (2010-11836)

Corrected patch for the 'standardise -- Buffer overflow' bug. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...