TileServer GL 跨站脚本漏洞

TileServer GL is an open source map server for vector blocks from the Maptiler team. A cross-site scripting vulnerability exists in TileServer GL version 2.3.1, which stems from a parameter key of the component URL Handler can lead to cross-site scripting attacks...

Tenda FH1206 安全漏洞

Tenda FH1206 is a dual-band wireless router from Tenda, designed for large homes with fiber optics. The Tenda FH1206 suffers from a command execution vulnerability that originates from an arbitrary command execution vulnerability contained in the handler parameter of the /goform/telnet file, whic...

Bodymen Access Control Error Vulnerability

bodymen is a body parser middleware for MongoDB, Express and Nodejs MEN. A security vulnerability exists in bodymen versions prior to 1.1.1. An attacker can exploit the vulnerability to add or modify Object.prototype properties with the help of the 'handler' parameter...

F5 Big-IP 10.2.4 Build 595.0 Hotfix HF3 文件读取漏洞

Exploit Title: F5 BigIP File Path Traversal Vulnerability Discovered by: Karn Ganeshen Reported on: April 27, 2015 New version released on: September 01, 2015 Vendor Homepage: www.f5.com Version Reported: F5 BIG-IP 10.2.4 Build 595.0 Hotfix HF3 CVE-2015-4040 https://vulners.com/cve/CVE-2015-4040...

CVE-2013-3929: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in admin/editevent.php in CMS Made Simple CMSMS 1.11.9 allows remote authenticated users with the "Modify Events" permission to inject arbitrary web script or HTML via the handler parameter...

CVE-2007-6310: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Falt4Extreme RC4 10.9.2007 allow remote attackers to inject arbitrary web script or HTML via the handler parameter to 1 index.php and possibly 2 admin/index.php, and 3 the topic parameter to modules/feed/feed.php aka modules/feed.php...