CVE-2021-27173

An issue was discovered on FiberHome HG6245D devices through RP2613. There is a telnet?enable=0&key=calculatedBR0MAC backdoor API, without authentication, provided by the HTTP server. This will remove firewall rules and allow an attacker to reach the telnet server used for the CLI...

CVE-2021-27170

An issue was discovered on FiberHome HG6245D devices through RP2613. By default, there are no firewall rules for IPv6 connectivity, exposing the internal management interfaces to the Internet...

CVE-2021-27170

Technical details about CVE-2021-27170 are not publicly provided in the connected documents. Monitor for updates.

CVE-2021-27170

An issue was discovered on FiberHome HG6245D devices through RP2613. By default, there are no firewall rules for IPv6 connectivity, exposing the internal management interfaces to the Internet...

CVE-2021-27173

An issue was discovered on FiberHome HG6245D devices through RP2613. There is a telnet?enable=0&key=calculatedBR0MAC backdoor API, without authentication, provided by the HTTP server. This will remove firewall rules and allow an attacker to reach the telnet server used for the CLI...

CVE-2020-29171

Cross-site scripting XSS vulnerability in admin/wp-security-blacklist-menu.php in the Tips and Tricks HQ All In One WP Security & Firewall all-in-one-wp-security-and-firewall plugin before 4.4.6 for WordPress...

CVE-2020-29171

Cross-site scripting XSS vulnerability in admin/wp-security-blacklist-menu.php in the Tips and Tricks HQ All In One WP Security & Firewall all-in-one-wp-security-and-firewall plugin before 4.4.6 for WordPress...

Cross site scripting

Cross-site scripting XSS vulnerability in admin/wp-security-blacklist-menu.php in the Tips and Tricks HQ All In One WP Security & Firewall all-in-one-wp-security-and-firewall plugin before 4.4.6 for WordPress...

CVE-2020-29171

CVE-2020-29171 is a Cross-site Scripting (XSS) vulnerability in the WordPress plugin Tips and Tricks HQ All In One WP Security & Firewall (all-in-one-wp-security-and-firewall) up to version 4.4.6. The flaw resides in admin/wp-security-blacklist-menu.php and stems from insufficient input validatio...

IPCDump – Guardicore’s New Open-Source Tool for Linux IPC Inspection

IPCdump allows software based firewall developers, researchers, and linux users to explore the Inter-process-communication IPC channels...

Weak password vulnerability in Haofeng firewall system (CNVD-2021-14503)

Shenzhen Haofeng Communication Technology Co., Ltd. business scope: computer software, hardware, network products, technology development and purchase and sale, other domestic business, material supply and marketing industry. There is a weak password vulnerability in Haofeng's firewall system,...

多款Huawei产品安全漏洞

Huawei NGFW Module and so on are products of Huawei China.NGFW Module is a next-generation firewall NGFW module.Huawei NIP6800 is a set of intrusion prevention system.Huawei NIP6300 is an intrusion prevention system mainly applicable to enterprises, schools, operators, and IDCs. A denial of servi...

多款华为产品 缓冲区错误漏洞

Huawei IPS Module and others are products of Huawei, China.Huawei IPS Module is an Intrusion Prevention System IPS module.NGFW Module is a Next-Generation Firewall NGFW module.Secospace USG6600 is a Next-Generation Firewall product. A memory leak vulnerability exists in multiple Huawei products...

Tufin SecureTrack Security Vulnerability

USA Tufin SecureTrack is a firewall policy management platform from Tufin America USA. A security vulnerability exists in all versions of Tufin SecureTrack that stems from allowing username enumeration...

Fortinet FortiWeb Cross-Site Scripting Vulnerability (CNVD-2021-12664)

Fortinet FortiWeb is a Web application layer firewall from the U.S. company Fita Fortinet, which can block threats such as cross-site scripting, SQL injection, cookie poisoning, schema poisoning and other attacks to ensure the security of Web applications and protect sensitive database content. A...

Weak Password Vulnerability in Bohua NetDragon Firewall of Zhongke Bohua Information Technology Co.

Ltd. is a high-tech enterprise integrating scientific research, product development, technical service and system integration. Zhongke Bohua Information Technology Co., LtdBohua NetDragon firewall has a weak password vulnerability, which can be exploited by attackers to obtain sensitive informati...

SAP BusinessObjects Business Intelligence Platform SSRF Vulnerability (direct check)

Binary data sapbusinessobjectsintelligenceplatformcve-2020-6308.nbin...

Huawei USG9500 Information Disclosure Vulnerability (CNVD-2021-24917)

Huawei USG9500 is a data center firewall product. An information disclosure vulnerability exists in the Huawei USG9500. The vulnerability stems from the program not properly handling information during user login. An attacker can exploit this vulnerability to perform certain operations to obtain...

Fortinet FortiWeb 跨站脚本漏洞

Fortinet FortiWeb is a Web application layer firewall from the U.S. company Fita Fortinet, which can block threats such as cross-site scripting, SQL injection, cookie poisoning, schema poisoning and other attacks to ensure the security of Web applications and protect sensitive database content. A...

Information Disclosure Vulnerability in Multiple Huawei Products (CNVD-2021-24919)

Huawei NIP6300 and so on are products of Huawei, China.Huawei NIP6300 is an intrusion prevention system mainly applicable to enterprises, schools, operators, IDC.Huawei NIP6600 is an intrusion prevention system mainly applicable to enterprises, schools, operators, IDC.Huawei Secospace USG6300 is ...