TD Bank: Reflected XSS on Admin Login Page

When you try to access private pages on the domain https://td.intelliresponse.com/a6 you are redirected to a login page, which has reflected values in the DOM from the URL on the parameter 'win'. Once there is no proper handle for the data reflected, it turns out into a vulnerable path on the...

VulnCheck KEV: CVE-2016-10972

The newspaper theme before 6.7.2 for WordPress has a lack of options access control via tdajaxupdatepanel...

td-safety.ru Cross Site Scripting vulnerability OBB-3101478

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

td-sd.ru Cross Site Scripting vulnerability OBB-2937465

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

td-grafik.de Cross Site Scripting vulnerability OBB-2799473

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

tdsparkmanphotography.com Cross Site Scripting vulnerability OBB-2776003

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

T&D Data Server 路径遍历漏洞

T&D Data Server is a free Windows program from T&D that can be installed and run on a PC to act as a server to receive recorded data. Even in environments where cloud services are not available, you can use functions such as saving received logged data, monitoring and graphical display via a web...

td-barselona.ru Cross Site Scripting vulnerability OBB-2365175

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

td-favorit.ru Cross Site Scripting vulnerability OBB-2359797

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2021-40007

There is an information leak vulnerability in eCNS280TD V100R005C10SPC650. The vulnerability is caused by improper log output management. An attacker with the ability to access the log file of device may lead to information disclosure...

CVE-2021-40007

There is an information leak vulnerability in eCNS280TD V100R005C10SPC650. The vulnerability is caused by improper log output management. An attacker with the ability to access the log file of device may lead to information disclosure...

PT-2021-22787

Name of the Vulnerable Software and Affected Versions eCNS280 TD version V100R005C10SPC650 Description The issue is caused by improper log output management, allowing an attacker with access to the device's log file to potentially disclose information. This could lead to information leakage if th...

CVE-2021-39995

Some Huawei products use the OpenHpi software for hardware management. A function that parses data returned by OpenHpi contains an out-of-bounds read vulnerability that could lead to a denial of service. Affected product versions include: eCNS280TD V100R005C10; eSE620X vESS V100R001C10SPC200,...

PT-2021-22784

Name of the Vulnerable Software and Affected Versions Huawei eCNS280 TD version V100R005C10 Huawei eSE620X vESS versions V100R001C10SPC200, V100R001C20SPC200, V200R001C00SPC300 Description The issue is related to an out-of-bounds read vulnerability in a function that parses data returned by...

sso.test.td.com Cross Site Scripting vulnerability OBB-2131933

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

td-is.cz Cross Site Scripting vulnerability OBB-2131339

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

PT-2021-21466

Name of the Vulnerable Software and Affected Versions FusionCompute version 6.5.1 eCNS280 TD versions V100R005C00 through V100R005C10 Description The issue is related to improper storage of specific information in log files. When a user logs in to the device, an attacker can obtain this...

WordPress 跨站脚本漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports personal blog sites on servers running PHP and MySQL. A cross-site scripting vulnerability exists in WordPress theme Newsmag, which stems from not cleaning up the...

PT-2021-15841

Name of the Vulnerable Software and Affected Versions Newsmag WordPress theme versions prior to 5.0 Description The issue is related to an unauthenticated Reflected Cross-site Scripting XSS vulnerability. This occurs because the td block id parameter in the td ajax block AJAX action is not proper...

Debian DSA-4949-1 : jetty9 - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-4949 advisory. - In Eclipse Jetty version 9.2.26 and older, 9.3.25 and older, and 9.4.15 and older, the server is vulnerable to XSS conditions if a remote client USES a speciall...