Mahara Input Validation Vulnerability

Mahara is the full-featured web application for building your own ePortfolio. Mahara has an input validation vulnerability. The vulnerability arises because Mahara relies solely on code stripping from TinyMCE. An attacker could exploit this vulnerability to bypass TinyMCE and attack the server by...

CVE-2018-6182: Improper Neutralization of Input During Web Page Generation

Mahara 16.10 before 16.10.9 and 17.04 before 17.04.7 and 17.10 before 17.10.4 are vulnerable to bad input when TinyMCE is bypassed by POST packages. Therefore, Mahara should not rely on TinyMCE's code stripping alone but also clean input on the server / PHP side as one can create own packets of...

D-Link DIR-632 Router Has Design Flaw Vulnerability

The D-Link DIR-632 is a wireless router manufactured by AUO. The product has a design flaw vulnerability where an attacker can send specific POST packets to obtain sensitive information, including model number, mac, essid, and other sensitive information...