369 matches found
CVE-2020-13259
A vulnerability in the web-based management interface of RAD SecFlow-1v os-image SF02902.3.01.26 could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack on an affected system. The vulnerability is due to insufficient CSRF protections for the web UI on a...
CVE-2020-13259
A vulnerability in the web-based management interface of RAD SecFlow-1v os-image SF02902.3.01.26 could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack on an affected system. The vulnerability is due to insufficient CSRF protections for the web UI on a...
CVE-2020-13259
CVE-2020-13259 affects RAD SecFlow-1v os-image SF_0290_2.3.01.26: a CSRF weakness in the web UI allows an unauthenticated attacker to perform actions via a persuaded user, potentially with the user’s privileges. The CVSSv3.1 base score is 8.8 (HIGH); exploit scenario requires user interaction. Th...
CVE-2020-13259
A vulnerability in the web-based management interface of RAD SecFlow-1v os-image SF02902.3.01.26 could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack on an affected system. The vulnerability is due to insufficient CSRF protections for the web UI on a...
PT-2020-13400
Name of the Vulnerable Software and Affected Versions RAD SecFlow-1v os-image version SF 0290 2.3.01.26 Description The issue is related to insufficient CSRF protections for the web UI on an affected device, allowing an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF...
CVE-2020-13259: Cross-Site Request Forgery (CSRF)
A vulnerability in the web-based management interface of RAD SecFlow-1v os-image SF02902.3.01.26 could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack on an affected system. The vulnerability is due to insufficient CSRF protections for the web UI on a...
RAD SecFlow-1v SF_0290_2.3.01.26 Cross Site Scripting
Exploit Title: RAD SecFlow-1v SF02902.3.01.26 - Persistent Cross-Site Scripting Date: 2020-08-31 Exploit Author: Jonatan Schor and Uriel Yochpaz Vendor Homepage: https://www.rad.com/products/secflow-1v-IIoT-Gateway Version: SecFlow-1v os-image SF02902.3.01.26 Tested on: RAD SecFlow-1v CVE : N/A A...
RAD SecFlow-1v SF_0290_2.3.01.26 - Persistent Cross-Site Scripting
Exploit Title: RAD SecFlow-1v SF02902.3.01.26 - Persistent Cross-Site Scripting Date: 2020-08-31 Exploit Author: Jonatan Schor and Uriel Yochpaz Vendor Homepage: https://www.rad.com/products/secflow-1v-IIoT-Gateway Version: SecFlow-1v os-image SF02902.3.01.26 Tested on: RAD SecFlow-1v CVE : N/A A...
RAD SecFlow-1v SF_0290_2.3.01.26 - Cross-Site Request Forgery (Reboot)
Exploit Title: RAD SecFlow-1v SF02902.3.01.26 - Cross-Site Request Forgery Reboot Date: 2020-08-31 Exploit Author: Uriel Yochpaz and Jonatan Schor Vendor Homepage: https://www.rad.com/products/secflow-1v-IIoT-Gateway Version: SecFlow-1v os-image SF02902.3.01.26 Tested on: RAD SecFlow-1v CVE : N/A...
Exploit for Cross-Site Request Forgery (CSRF) in Rad Secflow-1V_Firmware
CVE-2020-13259 PoC of Full Account Takeover on RAD SecFlow-1v...
rad-reise-service.de Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1177367 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
Telerik UI RadAsyncUpload Arbitrary File Upload Code Execution
The vulnerability of the Telerik UI software for ASP.NET AJAX is related to the shortcomings of the RadAsyncUpload encryption mechanism. Exploiting this vulnerability allows a malicious actor to perform arbitrary file uploads or execute arbitrary code...
com.github.vzakharchenko:keycloak-plugins (>=0.1, <=1.0.1), com.github.vzakharchenko:mikrotik-radius-plugin (>=0.1, <=1.0.1) +94 more potentially affected by CVE-2020-1731 via org.keycloak:keycloak-core (>=8.0.0, <=8.0.1)
org.keycloak:keycloak-core MAVEN version =8.0.0, =0.1, =0.1, =0.1, =0.1, =1.8.0-beta.1, =1.8.0-beta.1, =1.8.0-beta.1, =1.8.0 and more Source cves: CVE-2020-1731 Source advisory: OSV:GHSA-6PMV-7PR9-CGRJ...
com.github.vzakharchenko:keycloak-plugins (>=0.1, <=1.0.1), com.github.vzakharchenko:mikrotik-radius-plugin (>=0.1, <=1.0.1) +93 more potentially affected by CVE-2020-1697 via org.keycloak:keycloak-core (8.0.1)
org.keycloak:keycloak-core MAVEN version 8.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.github.vzakharchenko:keycloak-plugins =0.1, =0.1, =0.1, =0.1, =1.8.0-beta.1, =1.8.0-beta.1,...
CVE-2020-11414
An issue was discovered in Progress Telerik UI for Silverlight before 2020.1.330. The RadUploadHandler class in RadUpload for Silverlight expects a web request that provides the file location of the uploading file along with a few other parameters. The uploading file location should be inside the...
Security Bulletin: Multiple vulnerabilities affecting the Cordova platform packaged with Rational Application Developer (CVE-2014-3500, CVE-2014-3501 and CVE-2014-3502)
Summary Multiple vulnerabilities have been discovered that affect the Cordova platform packaged with Rational Application Developer. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like this. Follow this link for more information requires...
Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Rational Application Developer for WebSphere Software
Summary OpenSSL vulnerabilities were disclosed by the OpenSSL project. OpenSSL is used by the Cordova tools in IBM Rational Application Developer for WebSphere Software. IBM Rational Application Developer for WebSphere Software has addressed the applicable CVEs. Vulnerability Details CVEID:...
WordPress WP Fastest Cache plugin <= 0.8.9.5 - Directory Traversal vulnerability
Directory Traversal vulnerability found by Imre Rad in WordPress WP Fastest Cache plugin versions = 0.8.9.5. Solution Update the WordPress WP Fastest Cache plugin to the latest available version at least 0.8.9.6...
PT-2022-16816
Name of the Vulnerable Software and Affected Versions FreeRADIUS affected versions not specified Description The issue is related to a memcpy buffer overflow in the rad packet recv function, located in radius/packet.c. This overflow occurs due to an overly-large recvfrom into a fixed buffer,...
