18 matches found
EUVD-2014-9226
Malware in sbrugna...
EUVD-2014-9204
Malware in sbrugna...
EUVD-2020-17109
Malware in sbrugna...
CVE-2020-24377
A DNS rebinding vulnerability in the Freebox OS web interface in Freebox Server before 4.2.3...
CVE-2014-9382
Freebox OS Web interface 3.0.2 has CSRF which can allow VPN user account creation...
CVE-2020-24377
A DNS rebinding vulnerability in the Freebox OS web interface in Freebox Server before 4.2.3...
CVE-2020-24377
A DNS rebinding vulnerability in the Freebox OS web interface in Freebox Server before 4.2.3...
Design/Logic Flaw
A DNS rebinding vulnerability in the Freebox OS web interface in Freebox Server before 4.2.3...
CVE-2020-24377
A DNS rebinding vulnerability in the Freebox OS web interface in Freebox Server before 4.2.3...
CVE-2014-9382
Freebox OS Web interface 3.0.2 has CSRF which can allow VPN user account creation...
Cross site request forgery (csrf)
Freebox OS Web interface 3.0.2 has CSRF which can allow VPN user account creation...
CVE-2014-9382
Freebox OS Web interface 3.0.2 has CSRF which can allow VPN user account creation...
CVE-2014-9382
CVE-2014-9382 affects Freebox OS Web interface 3.0.2. A cross-site request forgery (CSRF) vulnerability allows creating a VPN user without proper authorization. The issue is demonstrated in vendor advisories and security summaries, including a POC that shows a VPN user creation request being trig...
CVE-2014-9405
A Cross-Site Scripting XSS vulnerability exists in the description field of an Download RSS item or Contacts in Freebox OS Web interface 3.0.2, which allows malicious users to execute arbitrary code...
Cross site scripting
A Cross-Site Scripting XSS vulnerability exists in the description field of an Download RSS item or Contacts in Freebox OS Web interface 3.0.2, which allows malicious users to execute arbitrary code...
CVE-2014-9405
A Cross-Site Scripting XSS vulnerability exists in the description field of an Download RSS item or Contacts in Freebox OS Web interface 3.0.2, which allows malicious users to execute arbitrary code...
CVE-2014-9405
CVE-2014-9405 is an XSS in Freebox OS Web interface 3.0.2. The vulnerability is in the description field of a Download RSS item or Contacts, allowing injected script when a user views the feed or imported VCARD content. Root cause: insufficient input filtering in the web interface; impact describ...
Freebox OS Web interface cross-site scripting vulnerability
The Freebox OS Web interface is a web interface for the ADSL modem Freebox operating system. A cross-site scripting vulnerability exists in version 3.0.2 of the Freebox OS Web interface, which stems from the program not adequately filtering user-submitted input. When a user browses the affected...