299 matches found
Internet Control Server Firewall Code Execution
The vulnerability of the Internet Control Server’s network firewall is related to the failure to implement data cleaning at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2019-25418
Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the FWADDRESSES parameter. Attackers can send POST requests to the /korugan/fwgroups endpoint with script payloads to execute arbitra...
PT-2026-20807
Comodo Dome Firewall 2.7.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting crafted input through admin management parameters. Attackers can inject script payloads in the admin name, name, and surname parameters via...
CVE-2025-55018
An inconsistent interpretation of http requests 'http request smuggling' vulnerability in Fortinet FortiOS 7.6.0, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4.3 through 6.4.16 may allow an unauthenticated attacker to smuggle an unlogged http request...
CVE-2025-67186
TOTOLINK A950RG V4.1.2cu.5204B20210112 contains a buffer overflow vulnerability in the setUrlFilterRules interface of /lib/cstemodules/firewall.so. The vulnerability occurs because the url parameter is not properly validated for length, allowing remote attackers to trigger a buffer overflow,...
CVE-2008-7229
GreenSQL Firewall greensql-fw before 0.9.2 allows remote attackers to bypass SQL injection protection via a crafted string, possibly involving an encoded space character %20...
CVE-2024-39347
Incorrect default permissions vulnerability in firewall functionality in Synology Router Manager SRM before 1.2.5-8227-11 and 1.3.1-9346-8 allows man-in-the-middle attackers to access highly sensitive intranet resources via unspecified vectors...
CVE-1999-0588
A filter in a router or firewall allows unusual fragmented packets...
CVE-1999-0510
A router or firewall allows source routed packets from arbitrary hosts...
CVE-1999-0529
A router or firewall forwards packets that claim to come from IANA reserved or private addresses, e.g. 10.x.x.x, 127.x.x.x, 217.x.x.x, etc...
CVE-2025-15387
CVE-2025-15387 concerns QNO Technology’s VPN Firewall, where an Insufficient Entropy vulnerability allows unauthenticated remote attackers to obtain a logged-in user session via brute-forcing session identifiers and then log in. Root cause: insufficient entropy in session identifiers. Documented ...
PT NGFW Firewall Authentication Bypass
The vulnerability of the PT NGFW firewall is related to the absence of authentication. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...
CVE-2025-13548
A vulnerability has been found in D-Link DIR-822K and DWR-M920 1.0020250513164613/1.1.50. This vulnerability affects unknown code of the file /boafrm/formFirewallAdv. Such manipulation of the argument submit-url leads to buffer overflow. The attack may be launched remotely. The exploit has been...
CVE-2021-4470 TG8 Firewall Unauthenticated RCE via runphpcmd.php
TG8 Firewall contains a pre-authentication remote code execution vulnerability in the runphpcmd.php endpoint. The syscmd POST parameter is passed directly to a system command without validation and executed with root privileges. A remote, unauthenticated attacker can supply crafted values to...
CVE-2021-4470 TG8 Firewall Unauthenticated RCE via runphpcmd.php
TG8 Firewall contains a pre-authentication remote code execution vulnerability in the runphpcmd.php endpoint. The syscmd POST parameter is passed directly to a system command without validation and executed with root privileges. A remote, unauthenticated attacker can supply crafted values to...
TG8 Firewall 安全漏洞
TG8 Firewall is a firewall from TG8 Inc. A security vulnerability exists in TG8 Firewall that originates from the runphpcmd.php endpoint that does not validate the syscmd parameter, which could lead to remote code execution...
EUVD-2008-0274
Malware in sbrugna...
EUVD-2015-6748
Malware in sbrugna...