EUVD-2018-7678

Malware in sbrugna...

CDN Meets GDN: Akamai Partners with Macrometa

The web needs a CDN; the cloud needs a GDN. What does that mean and why is it important for developers?...

CVE-2018-15820

EasyIO EasyIO-30P devices before 2.0.5.27 allow XSS via the dev.htm GDN parameter...

CVE-2018-15820

EasyIO EasyIO-30P devices before 2.0.5.27 allow XSS via the dev.htm GDN parameter...

Design/Logic Flaw

EasyIO EasyIO-30P devices before 2.0.5.27 allow XSS via the dev.htm GDN parameter...

CVE-2018-15820

EasyIO EasyIO-30P devices before 2.0.5.27 allow XSS via the dev.htm GDN parameter...

CVE-2018-15820: Improper Neutralization of Input During Web Page Generation

EasyIO EasyIO-30P devices before 2.0.5.27 allow XSS via the dev.htm GDN parameter...

PT-2018-14976

Name of the Vulnerable Software and Affected Versions Vanilla versions prior to 2.5.5 Vanilla versions 2.6.x prior to 2.6.2 Description The issue allows for Remote Code Execution. This is because authenticated administrators have access to a reachable call to unserialize in the Gdn Format class...

Vanilla: Vanilla Forums Gdn_Format unserialize() Remote Code Execution Vulnerability

Summary: An authenticated admin user can trigger a call to unserialize which can allow an attacker to gain remote code execution. Description: Please bare with me on this one, it's heavy. Ok, so after setting a Garden.TouchIcon setting it can be several settings, this is just an example of one we...

Design/Logic Flaw

The WPS implementation on I-O DATA DEVICE WN-GDN/R3, WN-GDN/R3-C, WN-GDN/R3-S, and WN-GDN/R3-U devices does not limit PIN guesses, which allows remote attackers to obtain network access via a brute-force attack...

CVE-2016-1206: Exposure of Sensitive Information to an Unauthorized Actor

The WPS implementation on I-O DATA DEVICE WN-GDN/R3, WN-GDN/R3-C, WN-GDN/R3-S, and WN-GDN/R3-U devices does not limit PIN guesses, which allows remote attackers to obtain network access via a brute-force attack...