ca: token authentication bypass vulnerability

A flaw was found in dogtag-pki and pki-core. The token authentication scheme can be bypassed with a LDAP injection. By passing the query string parameter sessionID=, an attacker can authenticate with an existing session saved in the LDAP directory server, which may lead to escalation of privilege...

CVE-2024-5673

Vulnerability in Dulldusk's PHP File Manager affecting version 1.7.8. This vulnerability consists of an XSS through the fmcurrentdir parameter of index.php. An attacker could send a specially crafted JavaScript payload to an authenticated user and partially hijack their browser session...

CVE-2024-5673 Cross-Site Scripting in PHP File Manager by Dulldusk

Vulnerability in Dulldusk's PHP File Manager affecting version 1.7.8. This vulnerability consists of an XSS through the fmcurrentdir parameter of index.php. An attacker could send a specially crafted JavaScript payload to an authenticated user and partially hijack their browser session...

CVE-2024-5673 Cross-Site Scripting in PHP File Manager by Dulldusk

Vulnerability in Dulldusk's PHP File Manager affecting version 1.7.8. This vulnerability consists of an XSS through the fmcurrentdir parameter of index.php. An attacker could send a specially crafted JavaScript payload to an authenticated user and partially hijack their browser session...

CVE-2023-30312

An issue discovered in OpenWrt 18.06, 19.07, 21.02, 22.03, and beyond allows off-path attackers to hijack TCP sessions, which could lead to a denial of service, impersonating the client to the server e.g., for access to files over FTP, and impersonating the server to the client e.g., to deliver...

CVE-2023-30310

An issue discovered in Comfast Comfast CF-616AC routers allows attackers to hijack TCP sessions which could lead to a denial of service...

CVE-2023-30305

An issue discovered in Linksys E5600 routers allows attackers to hijack TCP sessions which could lead to a denial of service...

多款Ruijie产品 安全漏洞

Ruijie Networks EG210G-P is a Gigabit PoE router from Ruijie Networks China. A security vulnerability exists in multiple Ruijie products, which stems from a vulnerability that allows an attacker to hijack a TCP session, potentially resulting in a denial of service attack. The following products a...

OpenWrt 安全漏洞

OpenWrt is a Linux operating system for embedded devices. A security vulnerability exists in OpenWrt that stems from a vulnerability that allows an attacker to hijack a TCP session, potentially leading to a denial of service attack...

Wavlink QUANTUM D2G 安全漏洞

Wavlink QUANTUM D2G is a dual-band, full-gigabit WiFi router from China-based Wavlink. A security vulnerability exists in the Wavlink QUANTUM D2G that originates from the router allowing an attacker to hijack a TCP session, which could result in a denial of service...

Mercury YR1800XG 安全漏洞

Mercury YR1800XG is a router from Mercury, China. A security vulnerability exists in the Mercury YR1800XG, Mercury X30G, which stems from a vulnerability that allows an attacker to hijack a TCP session, potentially resulting in a denial of service attack...

Linksys E5600 安全漏洞

Linksys E5600 is a powerful, compact and reliable WiFi 5 router from Linksys, Inc. A security vulnerability exists in the Linksys E5600 that stems from a vulnerability that allows an attacker to hijack a TCP session, potentially leading to a denial of service attack...

H3C Magic R100 安全漏洞

H3C Magic R100 is a router from China's Xinhua San H3C. A security vulnerability exists in the H3C Magic R100, H3C Magic R365, which stems from a vulnerability that allows an attacker to hijack a TCP session, which could lead to a denial of service attack...

PT-2024-12233 · 360 · 360 T6M +3

Name of the Vulnerable Software and Affected Versions: 360 V6G affected versions not specified 360 T5G affected versions not specified 360 T6M affected versions not specified 360 P1 affected versions not specified Description: An issue in the routers allows attackers to hijack TCP sessions, which...

360 Safe Router P1 安全漏洞

360 Safe Router P1 is a wireless router from Qihoo Technology Limited 360, a company based in Beijing, China. A security vulnerability exists in 360 Safe Router P1, 360 V6G, 360 T5G, 360 T6M that originates from the router allowing an attacker to hijack a TCP session, which could result in a deni...

VulnCheck KEV: CVE-2014-100005

D-Link DIR-600 routers contain a cross-site request forgery CSRF vulnerability that allows an attacker to change router configurations by hijacking an existing administrator session...

KYKMS 安全漏洞

KYKMS is a knowledge base management system. KYKMS suffers from a cross-site scripting vulnerability that can be exploited by remote attackers to inject malicious script or HTML code, which can be used to obtain sensitive information or hijack user sessions when malicious data is viewed...

CVE-2024-34687

SAP NetWeaver Application Server for ABAP and ABAP Platform do not sufficiently encode user controlled inputs, resulting in Cross-Site Scripting XSS vulnerability. An attacker can control code that is executed within a user’s browser, which could result in modification, deletion of data, includin...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS through the order tracking URL. An attacker can manipulate the web page content or hijack user sessions by injecting malicious scripts. Details Cross-site scripting or XSS is a code vulnerability that occurs whe...

CVE-2024-4823 Cross-site Scripting in School ERP Pro+Responsive by AROX SOLUTION

Vulnerability in School ERP Pro+Responsive 1.0 that allows XSS via the index '/schoolerp/officeadmin/' in the parameters esbankacc, esbankname, esbankpin, escheckno, estellernumber, dc1 and dc2. An attacker could send a specially crafted JavaScript payload to an authenticated user and partially...