MagicFlow - Local File Inclusion Detection

MagicFlow is susceptible to local file inclusion vulnerabilities because it allows remote unauthenticated users to access locally stored files on the server and return their content via the '/msa/main.xp' endpoint and the 'Fun' parameter. !/usr/bin/env python3 -- coding: utf-8 -- """MagicFlow is...

Logon Bypass Vulnerability in MagicFlow Next-Generation Gateway

MagicFlow Next Generation Gateways are integrated hardware appliances with basic software blades installed to form a comprehensive, ready-to-use security gateway solution. A login bypass vulnerability exists in the MagicFlow Next-Generation Gateway, which arises from a program that does not...