brother-usa.com XSS vulnerability

Open Bug Bounty ID: OBB-167052 Description| Value ---|--- Affected Website:| brother-usa.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

brother-usa.com XSS vulnerability

Vulnerable URL: http://www.brother-usa.com/leavingoursite.aspx?goto=jaVasCript:"/-///'//// /oNcliCk=alert/OPENBUGBOUNTY/ //%0D%0A%0D%0A// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

Brother iPrint&Scan - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Brother iPrint&Scan published at the 'play' market has multiple vulnerabilities...

Big Brother Türkiye - Customized SSL, Dangerous filesystem permissions, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Big Brother Türkiye published at the 'play' market has multiple vulnerabilities...

Brother MFC Administration Reflected Cross-Site Scripting

Class Cross-Site Scripting Remote Yes Disclosed 9th October 2014 Published 7th January 2015 Credit Dave Daly of Dionach [email protected] Confirmed Vulnerable Brother MFC-J4410DW with F/W Versions J and K The printer administration web application on Brother MFC-J4410DW model printers with firmwa...

Brother printing devices crossite scripting

Crossite cripting in web interface...

Cross site scripting

Cross-site scripting XSS vulnerability in Brother MFC-J4410DW printer with firmware before L allows remote attackers to inject arbitrary web script or HTML via the url parameter to general/status.html and possibly other pages...

CVE-2015-1056

The CVE-2015-1056 entry describes a cross-site scripting (XSS) vulnerability in Brother MFC-J4410DW printers, exploitable through the web interface (e.g., general/status.html) via the url parameter. Affected firmware is before version L; the root cause is improper handling/validation of URL param...

CVE-2015-1056

Cross-site scripting XSS vulnerability in Brother MFC-J4410DW printer with firmware before L allows remote attackers to inject arbitrary web script or HTML via the url parameter to general/status.html and possibly other pages...

Brother MFC-J4410DW XSS Vulnerability (Jan 2015) - Active Check

Brother MFC-J4410DW is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Multiple Cross-Site Scripting Vulnerabilities in Brother MFC-J4410DW Printer 'url' Parameter

Brother MFC-J4410DW is a color laser printer device that supports wireless network printing. Multiple cross-site scripting vulnerabilities exist in the Brother MFC-J4410DW printer 'url' parameter because it fails to properly filter user-supplied input. An attacker could use these vulnerabilities ...

Brother MFC-J4410DW Cross Site Scripting

Class Cross-Site Scripting Remote Yes Disclosed 9th October 2014 Published 7th January 2015 Credit Dave Daly of Dionach [email protected] Confirmed Vulnerable Brother MFC-J4410DW with F/W Versions J and K The printer administration web application on Brother MFC-J4410DW model printers with firmwa...

Sean MacGuire Big Brother 1.0/1.3/1.4 CGI File Creation Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1494/info A vulnerability in Big Brother exists which would allow a user to remotely create CGI scripts which could be requested from the Web Server. These could be used to read files and possibly execute commands on the...

Sean MacGuire Big Brother 1.x Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1455/info Versions 1.4H and prior of BB4 Big Brother are susceptible to a directory traversal vulnerability which would allow a remote user to view the contents of any directory or file on the system. Executing a GET...

Xlrstats 2.0.1 - SQL Injection Vulnerability

No description provided by source. ---------------------------------------------------------------------------- Sql injection vulnerability ---------------------------------------------------------------------------- Exploit Title: Xlrstats Big Brother Bot Game SQL injection 2.0.1...

Brother HL-5370DW series auth bypass printer flooder

No description provided by source. Exploit Title: Brother HL-5370DW series auth bypass printer flooder Google Dork: CopyrightC 2000-2009 Brother Industries, Ltd. All Rights Reserved. Brother HL-5370DW series Date: 31/05/2011 Author: chrisB Contact : chrisb @ gmx.fr Version: Brother HL-5370DW seri...

CVE-2013-2671

Multiple cross-site scripting XSS vulnerabilities in the Brother MFC-9970CDW printer with firmware L 1.10 allow remote attackers to inject arbitrary web script or HTML via the 1 id or 2 val parameter to admin/adminmain.html; 3 id, 4 val, or 5 arbitrary parameter name QUERYSTRING to...

CVE-2013-2507

Multiple cross-site scripting XSS vulnerabilities in the Brother MFC-9970CDW printer with firmware G 1.03 allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to admin/logtonet.html or 2 kind parameter to fax/copysettings.html, a different vulnerability than...

CVE-2013-2670

Cross-site scripting XSS vulnerability in the Brother MFC-9970CDW printer with firmware G 1.03 and L 1.10 allows remote attackers to inject arbitrary web script or HTML via an arbitrary parameter name QUERYSTRING to admin/adminmain.html, a different vulnerability than CVE-2013-2507 and...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Brother MFC-9970CDW printer with firmware G 1.03 allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to admin/logtonet.html or 2 kind parameter to fax/copysettings.html, a different vulnerability than...