PT-2020-11191

Name of the Vulnerable Software and Affected Versions F-RevoCRM versions 6.0 through 6.5 patch6 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For versions 6.0 through 6.5 patch6, update to a version...

Siemens TIA Portal (Update F)

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low skill level to exploit Vendor: Siemens Equipment: TIA Portal Vulnerability: Path Traversal 2. UPDATE INFORMATION This updated advisory is a follow-up to the advisory update titled ICSA-20-014-05 Siemens TIA Portal Update E that was published June...

Sagemcom F@ST 3890 (50_10_19-T1) Cable Modem - 'Cable Haunt' Remote Code Execution

// EDB Note: Download https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/47936.zip function buf2hexbuffer // buffer is an ArrayBuffer return Array.prototype.map.callnew Uint8Arraybuffer, x = '00' + x.toString16.slice-2.join''; function insertAtarr, index, toInsert...

CVE-2019-19494

Broadcom based cable modems across multiple vendors are vulnerable to a buffer overflow, which allows a remote attacker to execute arbitrary code at the kernel level via JavaScript run in a victim's browser. Examples of affected products include Sagemcom F@st 3890 prior to 50.10.21T4, Sagemcom F@...

CVE-2019-19494

Broadcom based cable modems across multiple vendors are vulnerable to a buffer overflow, which allows a remote attacker to execute arbitrary code at the kernel level via JavaScript run in a victim's browser. Examples of affected products include Sagemcom F@st 3890 prior to 50.10.21T4, Sagemcom F@...

CVE-2019-19494: Buffer Copy without Checking Size of Input

Broadcom based cable modems across multiple vendors are vulnerable to a buffer overflow, which allows a remote attacker to execute arbitrary code at the kernel level via JavaScript run in a victim's browser. Examples of affected products include Sagemcom F@st 3890 prior to 50.10.21T4, Sagemcom F@...

F-RevoCRM vulnerable to cross-site scripting

Overview F-RevoCRM provided by ThinkingReed inc. contains a cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the user's web browser. Solution Apply the Patch Apply the patch according to the information provided by the developer. Apply Workaround Applying t...

JVN#97325754: F-RevoCRM vulnerable to cross-site scripting

F-RevoCRM provided by ThinkingReed inc. contains a cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the user's web browser. Solution Apply the Patch Apply the patch according to the information provided by the developer. Apply Workaround Applying the...

ThinkReed F-RevoCRM Cross-Site Scripting Vulnerability

ThinkReed F-RevoCRM is an open source customer relationship management software from ThinkReed Japan. A cross-site scripting vulnerability exists in ThinkReed F-RevoCRM versions 6.0 through 6.5 patch6, which stems from the lack of proper validation of client-side data in the WEB application and c...

sagemcom-fast-3890-exploit

Sagemcom Fast 3890 exploit This exploit uses the Cable Haunt...

CVE-2019-9556

FiberHome an5506-04-f RP2669 devices have XSS...

CVE-2019-9556

FiberHome an5506-04-f RP2669 devices have XSS...

Cross site scripting

FiberHome an5506-04-f RP2669 devices have XSS...

CVE-2019-9556

FiberHome an5506-04-f RP2669 devices have XSS...

CVE-2019-9556

CVE-2019-9556 affects FiberHome AN5506-04-F RP2669 devices. The vulnerability is a Cross-Site Scripting (XSS) issue in the web management interface, arising from insufficient input filtering in the application (stored XSS). Exploitation is discussed in public advisories and exploits (e.g., Exploi...

CVE-2019-9556: Improper Neutralization of Input During Web Page Generation

FiberHome an5506-04-f RP2669 devices have XSS...

PT-2019-19707

Name of the Vulnerable Software and Affected Versions FiberHome an5506-04-f RP2669 devices Description The issue is related to a Cross-Site Scripting XSS problem. Recommendations For FiberHome an5506-04-f RP2669 devices, at the moment, there is no information about a newer version that contains a...

f-inde.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1039150 Security Researcher g0bl1nsec Helped patch 3768 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting f-inde.com website and it...

i-a-f-t.net Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1037931 Security Researcher geeknik Helped patch 8815 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting i-a-f-t.net website and it...

SuperMicro X8STi-F Operating System Command Injection Vulnerability

The SuperMicro X8STi-F is a computer motherboard from SuperMicro USA. An operating system command injection vulnerability exists in the Virtual Media feature in the SuperMicro X8STi-F with IPMI firmware version 2.06 and BIOS version 02.68. An attacker can exploit this vulnerability to obtain a...