[SECURITY] Fedora 31 Update: ipmitool-1.8.18-19.fc31

This package contains a utility for interfacing with devices that support the Intelligent Platform Management Interface specification. IPMI is an open standard for machine health, inventory, and remote power control. This utility can communicate with IPMI-enabled devices through either a kernel...

4 TOTOLINK Router Models - CSRF and XSS Vulnerabilities

4 TOTOLINK router models suffer from cross site request forgery and cross site scripting vulnerabilities. Advisory Information Title: 4 TOTOLINK router models vulnerable to CSRF and XSS attacks Advisory URL: https://pierrekim.github.io/advisories/2015-totolink-0x01.txt Blog URL:...

ZTE ZXV10 W300 v3.1.0c_DR0 - UI Session Delete Vulnerability

Exploit for hardware platform in category web applications Document Title: =============== ZTE ZXV10 W300 v3.1.0cDR0 - UI Session Delete Vulnerability Product & Service Introduction: =============================== ZTE zxv10 w300 ADSL wireless router cat family gateway accessories include a host,...

ZTE ZXV10 W300 v3.1.0c_DR0 - UI Session Vulnerability

Document Title: =============== ZTE ZXV10 W300 v3.1.0cDR0 - UI Session Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1523 Video View: https://www.youtube.com/watch?v=sdSzTguFjY0 Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1522 Release...

ZTE ZXV10 W300 v3.1.0c_DR0 - UI Session Vulnerability

Document Title: =============== ZTE ZXV10 W300 v3.1.0cDR0 - UI Session Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1522 Release Date: ============= 2015-06-16 Vulnerability Laboratory ID VL-ID: ==================================== 1522...

CVE-2015-1028

Multiple cross-site scripting XSS vulnerabilities in D-Link DSL-2730B router rev C1 with firmware GE1.01 allow remote authenticated users to inject arbitrary web script or HTML via the 1 domainname parameter to dnsProxy.cmd DNS Proxy Configuration Panel; the 2 brName parameter to lancfg2get.cgi L...

CVE-2015-1028

CVE-2015-1028 affects the D-Link DSL-2730B router (rev C1) with firmware GE_1.01, exposing multiple XSS vulnerabilities that allow remote authenticated users to inject arbitrary scripts via parameters in dnsProxy.cmd, lancfg2get.cgi, wlsecrefresh.wl, and wlsecurity.wl. Connected sources corrobora...

PT-2015-5024 · D Link · D-Link Dsl-2730B

Name of the Vulnerable Software and Affected Versions: D-Link DSL-2730B router rev C1 with firmware GE 1.01 Description: The issue allows remote authenticated users to inject arbitrary web script or HTML via several parameters, including the domainname parameter to "dnsProxy.cmd" DNS Proxy...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Xavi X7968 allow remote attackers to inject arbitrary web script or HTML via the 1 pvcName parameter to webconfig/wan/confirm.html/confirm or 2 hostnametxtbox parameter to webconfig/lan/lanconfig.html/locallanconfig...

CVE-2012-5322

Multiple cross-site scripting XSS vulnerabilities in Xavi X7968 allow remote attackers to inject arbitrary web script or HTML via the 1 pvcName parameter to webconfig/wan/confirm.html/confirm or 2 hostnametxtbox parameter to webconfig/lan/lanconfig.html/locallanconfig...

[SECURITY] Fedora 15 Update: ipmitool-1.8.11-7.fc15

This package contains a utility for interfacing with devices that support the Intelligent Platform Management Interface specification. IPMI is an open standard for machine health, inventory, and remote power control. This utility can communicate with IPMI-enabled devices through either a kernel...