18 matches found
CVE-2026-4772
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in TR7 Cyber Defense Inc. WAF-ASP allows Stored XSS. This issue affects WAF-ASP: from v1.0.324.900 before v1.4.0.117...
EUVD-2026-41370
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in TR7 Cyber Defense Inc. WAF-ASP allows Stored XSS. This issue affects WAF-ASP: from v1.0.324.900 before v1.4.0.117...
CVE-2026-4772 Stored XSS in TR7's WAF-ASP
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in TR7 Cyber Defense Inc. WAF-ASP allows Stored XSS. This issue affects WAF-ASP: from v1.0.324.900 before v1.4.0.117...
CVE-2026-4772
CVE-2026-4772 describes a stored cross-site scripting vulnerability in TR7 Cyber Defense Inc. WAF-ASP. Affected versions range from v1.0.324.900 up to, but not including, v1.4.0.117. The issue arises from improper neutralization of input during web page generation. The CVE is confirmed by multipl...
EUVD-2026-41369
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in TR7 Cyber Defense Inc. Web Application Firewall allows DOM-Based XSS. This issue affects Web Application Firewall: from v1.0.42.239 before v1.4.0.117...
CVE-2026-4770 DOM-Based XSS in TR7's WAF-ASP
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in TR7 Cyber Defense Inc. Web Application Firewall allows DOM-Based XSS. This issue affects Web Application Firewall: from v1.0.42.239 before v1.4.0.117...
CVE-2026-4770
The CVE-2026-4770 entry concerns TR7 Cyber Defense Inc. Web Application Firewall (WAF). The affected component is the Web Application Firewall, with versions from 1.0.42.239 up to, but not including, 1.4.0.117. The vulnerability is a DOM-Based Cross-Site Scripting (XSS) issue arising from imprope...
CVE-2025-2418
URL Redirection to Untrusted Site 'Open Redirect' vulnerability in TR7 Cyber Defense Inc. Web Application Firewall allows Phishing. This issue affects Web Application Firewall: from 4.30 before v1.4.0.117...
CVE-2025-2418 Open Redirect in TR7's Web Application Firewall
URL Redirection to Untrusted Site 'Open Redirect' vulnerability in TR7 Cyber Defense Inc. Web Application Firewall allows Phishing. This issue affects Web Application Firewall: from 4.30 before v1.4.0.117...
CVE-2025-2418
The CVE-2025-2418 entry concerns TR7 Cyber Defense Inc. Web Application Firewall and describes an Open Redirect vulnerability (URL redirection to untrusted site) that can enable phishing. Affected versions are Web Application Firewall 4.30 through 16022026. The reported impact is limited to URL r...
EUVD-2024-49413
Malicious code in bioql PyPI...
CVE-2024-8781
Execution with Unnecessary Privileges, : Improper Protection of Alternate Path vulnerability in TR7 Application Security Platform ASP allows Privilege Escalation, -Privilege Abuse. This issue affects Application Security Platform ASP: v1.4.25.188...
CVE-2024-8781
Execution with Unnecessary Privileges, : Improper Protection of Alternate Path vulnerability in TR7 Application Security Platform ASP allows Privilege Escalation, -Privilege Abuse. This issue affects Application Security Platform ASP: v1.4.25.188...
CVE-2024-8781
Execution with Unnecessary Privileges, : Improper Protection of Alternate Path vulnerability in TR7 Application Security Platform ASP allows Privilege Escalation, -Privilege Abuse. This issue affects Application Security Platform ASP: v1.4.25.188...
CVE-2024-8781 Container Escape Vulnerability in TR7's Application Security Platform (ASP)
Execution with Unnecessary Privileges, : Improper Protection of Alternate Path vulnerability in TR7 Application Security Platform ASP allows Privilege Escalation, -Privilege Abuse. This issue affects Application Security Platform ASP: v1.4.25.188...
CVE-2024-8781 Container Escape Vulnerability in TR7's Application Security Platform (ASP)
Execution with Unnecessary Privileges, : Improper Protection of Alternate Path vulnerability in TR7 Application Security Platform ASP allows Privilege Escalation, -Privilege Abuse. This issue affects Application Security Platform ASP: v1.4.25.188...
CVE-2024-8781
TR7 Application Security Platform (ASP) v1.4.25.188 contains an Improper Protection of Alternate Path vulnerability that enables Privilege Escalation and Execution with Unnecessary Privileges. Root cause: improper protection of an alternate path. Exploitation details are not provided in the docum...
TR7 Application Security Platform 安全漏洞
TR7 Application Security Platform is an application from TR7, Inc. A security vulnerability exists in TR7 Application Security Platform version 1.4.25.188 that stems from improper protection of an alternate path vulnerability that allows elevation of privilege and privilege abuse...