EUVD-2019-8555

Malware in sbrugna...

Digi AnywhereUSB 14 XSS Injection Vulnerability

The AnywhereUSB product is a network-enabled USB hub that allows USB devices to be connected in any LAN. Digi AnywhereUSB 14 suffers from an XSS injection vulnerability, which could be exploited by an attacker to conduct an xss attack against the corresponding program to obtain other information ...

Digi AnywhereUSB 14 - Reflective Cross-Site Scripting

Digi AnywhereUSB 14 - Reflective Cross-Site Scripting Exploit Title: Digi AnywhereUSB 14 - Reflective Cross-Site Scripting Date: 2019-11-10 Exploit Author: Raspina Net Pars Group Vendor Homepage: https://www.digi.com/products/networking/usb-connectivity/usb-over-ip/awusb Version: 1.93.21.19 CVE :...

Digi AnywhereUSB 14 - Reflective Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Digi AnywhereUSB 14 - Reflective Cross-Site Scripting Exploit Author: Raspina Net Pars Group Vendor Homepage: https://www.digi.com/products/networking/usb-connectivity/usb-over-ip/awusb Version: 1.93.21.19 CVE : CVE-2019-18859 P...

Digi AnywhereUSB 14 - Reflective Cross-Site Scripting

Exploit Title: Digi AnywhereUSB 14 - Reflective Cross-Site Scripting Date: 2019-11-10 Exploit Author: Raspina Net Pars Group Vendor Homepage: https://www.digi.com/products/networking/usb-connectivity/usb-over-ip/awusb Version: 1.93.21.19 CVE : CVE-2019-18859 PoC GET...

Digi AnywhereUSB 14 Cross Site Scripting

Exploit Title: Digi AnywhereUSB 14 - Reflective Cross-Site Scripting Date: 2019-11-10 Exploit Author: Raspina Net Pars Group Vendor Homepage: https://www.digi.com/products/networking/usb-connectivity/usb-over-ip/awusb Version: 1.93.21.19 CVE : CVE-2019-18859 PoC GET...

CVE-2019-18859

Digi AnywhereUSB 14 allows XSS via a link for the Digi Page...

CVE-2019-18859

Digi AnywhereUSB 14 allows XSS via a link for the Digi Page...

Design/Logic Flaw

Digi AnywhereUSB 14 allows XSS via a link for the Digi Page...

CVE-2019-18859

Digi AnywhereUSB 14 is affected by a Cross-Site Scripting (XSS) vulnerability triggered via a crafted link to the Digi Page. Public details across multiple sources (CNVD-2020-02220, Packet Storm, Exploit-DB, PT-2020-9993) confirm this issue and describe the affected product as Digi AnywhereUSB 14...

PT-2020-9993 · Digi · Digi Anywhereusb

Name of the Vulnerable Software and Affected Versions: Digi AnywhereUSB version 14 Description: The issue allows for cross-site scripting XSS via a link for the Digi Page. Recommendations: For Digi AnywhereUSB version 14, update to a version that includes a fix for this issue, or as a temporary...