14211 matches found
Multiple Huawei Firewall USG Series Products Cross-Site Request Forgery Vulnerabilities
Huawei USG9500 and others are firewall products from Huawei China. A cross-site request forgery vulnerability exists in multiple Huawei Firewall USG Series products. A remote attacker can exploit this vulnerability to perform unauthorized operations...
WordPress Firewall 2 1.3 Plugin - Cross-Site Request Forgery / Cross-Site Scripting Vulnerabilities
Exploit for php platform in category web applications alert1" !-- In a real attack, forms can be submitted automatically and spear-phishing attacks can be convincing. Mitigations ================ Disable the plugin until a new version is released that fixes this bug. Disclosure policy...
WordPress Firewall 2 plugin 1.3 - Cross-Site Request Forgery & Cross-Site Scripting vulnerability
WordPress Firewall 2 plugin version 1.3 is prone to Cross-Site Request Forgery & Cross-Site Scripting attacks. Solution We were unable to find patched version of this WordPress plugin, and it's not available anymore on WordPress.org plugin directory. Please deactivate the plugin and contact the...
WordPress Plugin Firewall 2 1.3 - Cross-Site Request Forgery / Cross-Site Scripting
alert1" !-- In a real attack, forms can be submitted automatically and spear-phishing attacks can be convincing. Mitigations ================ Disable the plugin until a new version is released that fixes this bug. Disclosure policy ================ dxw believes in responsible disclosure. Your...
WordPress Plugin Firewall 2 1.3 - Cross-Site Request Forgery Cross-Site Scripting
WordPress Plugin Firewall 2 1.3 - Cross-Site Request Forgery Cross-Site Scripting alert1" !-- In a real attack, forms can be submitted automatically and spear-phishing attacks can be convincing. Mitigations ================ Disable the plugin until a new version is released that fixes this bug...
Wordpress Plugin Firewall 2 CSRF/stored XSS vulnerability
Description CSRF/stored XSS in WordPress Firewall 2 allows unauthenticated attackers to do almost anything an admin can Vulnerability HTML is not escaped and there is no CSRF prevention, meaning attackers can put arbitrary HTML content onto the settings page. Proof of concept Visit the following...
WordPress Firewall 2 1.3 Cross Site Request Forgery / Cross Site Scripting
Details ================ Software: WordPress Firewall 2 Version: 1.3 Homepage: https://wordpress.org/plugins/wordpress-firewall-2/ Advisory report: https://security.dxw.com/advisories/csrfstored-xss-in-wordpress-firewall-2-allows-unauthenticated-attackers-to-do-almost-anything-an-admin-can/ CVE:...
SonicWall Firewall Detection
Binary data 700050.prm...
Download WordPress Firewall 2 - Authenticated Stored XSS/CSRF
The wordpress-firewall-2 WordPress plugin was affected by an Authenticated Stored XSS/CSRF security vulnerability...
Network Firewall Detection
Binary data 7266.pasl...
Using WebSocket as your Real Time Protocol? Wallam got you covered.
In the beginning there was http 1 or 2, web pages were static and did not do much beyond displaying static text and images. Life has changed since… Web applications discovered that bi-directional communication between the browser and the web server is essential. Of course, http protocol, with it’...
ZyXEL Firewall Detection
Binary data 700042.prm...
Marel Food Processing Systems (Update B)
CVSS v3 9.8 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Marel Equipment: Food Processing Systems Vulnerabilities: Hard-Coded Passwords, Unrestricted Upload, Improper Access Control UPDATE INFORMATION This updated advisory is a follow-up to the updated advisory titled...
WatchGuard Firewall Detection
Binary data 700037.prm...
Juniper Firewall Detection
Binary data 700041.prm...
LANCOM Systems Firewall Detection
Binary data 700039.prm...
ZyXEL Firewall Detection
Binary data 700043.prm...
Remote Command Execution Vulnerability in Next-Generation Firewall System of SinoCom-ArtM
The InforCube Next-Generation Firewall NFW is a comprehensive security gateway security solution. A remote command execution vulnerability exists in the InforCube Next Generation Firewall system. The vulnerability allows an attacker to write php code into a file by modifying the install.php post...