CVE-2015-2916

CVE-2015-2916 affects Securifi Almond devices (AL1 firmware ≤ R201EXP10-L304-W34; Almond 2015 ≤ AL2-R088M). The flaw is a Cross-Site Request Forgery in the web management interface that lets an attacker hijack a user’s authenticated session and perform actions with the user’s privileges. The issu...

CVE-2015-2914

CVE-2015-2914 affects Securifi Almond devices running firmware before AL1-R201EXP10-L304-W34 and Almond-2015 devices before AL2-R088M. The issue is a fixed source-port number used in outbound DNS queries performed on behalf of any device, which, in combination with the destination port, facilitat...

CVE-2015-7296

Securifi Almond devices prior to AL1-R201EXP10-L304-W34 and Almond-2015 devices prior to AL2-R088M are affected by a vulnerability in DNS query ID selection: the devices use a linear algorithm to choose the ID in DNS query headers, which can allow remote attackers to spoof responses (e.g., direct...

CVE-2015-2917

Securifi Almond devices with firmware before AL1-R201EXP10-L304-W34 and Almond-2015 devices with firmware before AL2-R088M unintentionally omit the X-Frame-Options HTTP header, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site that contains a 1 FRAM...

CVE-2015-7296

Securifi Almond devices with firmware before AL1-R201EXP10-L304-W34 and Almond-2015 devices with firmware before AL2-R088M use a linear algorithm for selecting the ID value in the header of a DNS query performed on behalf of the device itself, which makes it easier for remote attackers to spoof...

Securifi Almond Access Restriction Bypass Vulnerability

Securifi Almond is a wireless router product from Securifi. The Securifi Almond 2015's web management interface does not enforce the same-origin policy in the X-Frame-Options response header, allowing remote attackers to exploit specially crafted web pages that can be used for clickjacking attack...

Securifi Almond Security Bypass Vulnerability

Securifi Almond is a wireless router product from Securifi. Securifi Almond uses static source ports for DNS queries in the local network, allowing an attacker to exploit a vulnerability that can be exploited to spoof DNS responses and allow Almond LAN clients to connect to incorrect or malicious...

Securifi Almond Cross-Site Request Forgery Vulnerability

Securifi Almond is a wireless router product from Securifi. Securifi Almond uses a default password and suffers from a cross-site request forgery vulnerability that allows remote attackers to construct malicious URIs, trick users into parsing them, and can perform malicious actions in the context...

Securifi Almond Cross-Site Request Forgery Vulnerability (CNVD-2015-06095)

Securifi Almond is a wireless router product from Securifi. Securifi Almond suffers from a cross-site request forgery vulnerability that allows remote attackers to construct malicious URIs, trick users into parsing them, and can perform malicious actions in the context of the target user...

Securifi Almond routers contains multiple vulnerabilities

Overview Securifi Almond, firmware version AL1-R200-L302-W33 and earlier, and Securifi Almond 2015, firmware version AL2-R088 and earlier, contain multiple vulnerabilities. Description CWE-330: Use of Insufficiently Random Values - CVE-2015-2914Securifi Almond and Almond 2015 use static source...

almond classifieds ads (bsql/xss) Multiple Vulnerabilities

No description provided by source. -----------------------------I AM MUSLIM !!------------------------------ ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...

Almond Classifieds Component for Joomla! 7.5 Cross-Site Scripting and SQL-Injection Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/35815/info Almond Classifieds Component for Joomla! is prone to a cross-site scripting vulnerability and an SQL-injection vulnerability because the application fails to sufficiently sanitize user-supplied input. A...

Joomla Almond Classifieds 5.6.2 - Blind SQL Injection Vuln

No description provided by source. || || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ /'\ \ /\ \ \ \ /'\ \ | | \ \ /\ /\ \ \ \ /...

AlmondSoft Multiple Classifieds Products index.php replid Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/35816/info AlmondSoft Almond Classifieds is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues...

Joomla! Component Almond Classifieds - Arbitrary File Upload

Joomla! Component Almond Classifieds - Arbitrary File Upload source: https://www.securityfocus.com/bid/64788/info The Almond Classifieds Component for Joomla is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately saniti...

Joomla! Component Almond Classifieds - Arbitrary File Upload

source: https://www.securityfocus.com/bid/64788/info The Almond Classifieds Component for Joomla is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize user-supplied input. An attacker may leverage this issue t...

CVE-2009-3227

Cross-site scripting XSS vulnerability in index.php in AlmondSoft Almond Classifieds Ads Enterprise and Almond Affiliate Network Classifieds allows remote attackers to inject arbitrary web script or HTML via the city parameter in a search action. NOTE: some of these details are obtained from thir...

CVE-2009-3227

The CVE-2009-3227 entry documents a Cross-site scripting (XSS) vulnerability in index.php of AlmondSoft Almond Classifieds Ads Enterprise and Almond Affiliate Network Classifieds. The issue permits remote attackers to inject arbitrary web script or HTML via the city parameter in a search action. ...

CVE-2009-3225

CVE-2009-3225 affects AlmondSoft Almond Classifieds Wap and Pro (and possibly Almond Affiliate Network Classifieds). The issue is multiple XSS vulnerabilities that allow remote attackers to inject arbitrary web script/HTML via (1) the page parameter in a browse action to index.php and (2) the add...

CVE-2009-3155

Cross-site scripting XSS vulnerability in gmap.php in the Almond Classifieds comaclassf component 7.5 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the addr parameter...