Command injection

Command-injection vulnerability in Huawei E587 3G Mobile Hotspot 11.203.27 allows remote attackers to execute arbitrary shell commands with root privileges due to an error in the Web UI...

CVE-2013-2612

Command-injection vulnerability in Huawei E587 3G Mobile Hotspot 11.203.27 allows remote attackers to execute arbitrary shell commands with root privileges due to an error in the Web UI...

PT-2020-7399

Name of the Vulnerable Software and Affected Versions: Huawei E587 3G Mobile Hotspot version 11.203.27 Description: A command-injection issue exists due to an error in the Web UI, allowing remote attackers to execute arbitrary shell commands with root privileges. Recommendations: For version...

CVE-2013-2612: Improper Neutralization of Special Elements used in an OS Command

Command-injection vulnerability in Huawei E587 3G Mobile Hotspot 11.203.27 allows remote attackers to execute arbitrary shell commands with root privileges due to an error in the Web UI...

PT-2020-19838

Name of the Vulnerable Software and Affected Versions JetBrains TeamCity versions prior to 2019.1.5 Description The issue allows some server-stored passwords to be visible through the web UI. Recommendations For versions prior to 2019.1.5, update to version 2019.1.5 or later to resolve the issue...

CVE-2019-15712

An improper access control vulnerability in FortiMail admin webUI 6.2.0, 6.0.0 to 6.0.6, 5.4.10 and below may allow administrators to access web console they should not be authorized for...

Huawei EulerOS: Security Advisory for mailman (EulerOS-SA-2018-1086)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: IBM InfoSphere QualityStage is affected by a Reflected Cross-site scripting vulnerability

Summary A Reflected cross-site scripting vulnerability was addressed by IBM InfoSphere QualityStage. Vulnerability Details CVEID: CVE-2019-4756 DESCRIPTION: IBM InfoSphere Information Server is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code ...

Cisco IOS XE Software Web UI Cross-Site Request Forgery (cisco-sa-20200108-ios-csrf)

According to its self-reported version, Cisco IOS XE Software is affected by a cross-site request forgery CSRF vulnerability in the web UI due to insufficient CSRF protections. An unauthenticated, remote attacker can exploit this, by persuading a user of the interface to follow a malicious link, ...

Cisco IOS Web UI Cross-Site Request Forgery (cisco-sa-20200108-ios-csrf)

According to its self-reported version, Cisco IOS is affected by a cross-site request forgery CSRF vulnerability in the web UI due to insufficient CSRF protections. An unauthenticated, remote attacker can exploit this, by persuading a user of the interface to follow a malicious link, in order to...

IotShark - Monitoring And Analyzing IoT Traffic

IoTShark is a IOT monitoring service that allows users to monitor their IOT devices for trends in data sent/received. Ordinarily, setting up a man in the middle attack with proper configurations can take up quite a bit of time, and may seem dauntingly impossible for those with little to no...

Cisco Webex Bug Allows Remote Code Execution

Cisco Systems has fixed two high-severity vulnerabilities in its products, including one in its popular Webex video conferencing platform that could enable a remote attacker to execute commands. The high-severity Webex flaw exists in the web-based management interface of Cisco Webex Video Mesh, a...

Cisco IOS and Cisco IOS XE Software Web UI Cross-Site Request Forgery Vulnerability

A vulnerability in the web UI of Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack on an affected system. The vulnerability is due to insufficient CSRF protections for the web UI on an affected device. An attack...

PT-2020-1386

Name of the Vulnerable Software and Affected Versions Cisco IOS and Cisco IOS XE Software affected versions not specified Description The issue is related to insufficient CSRF protections for the web UI on affected devices, allowing an unauthenticated, remote attacker to conduct a cross-site...

Fortinet FortiAuthenticator WEB UI Cross-Site Scripting Vulnerability

Fortinet FortiAuthenticator WEB UI is a centralized user identity management solution of the U.S. Fiat Fortinet company's Web interface. A cross-site scripting vulnerability exists in the login page in Fortinet FortiAuthenticator WEB UI version 6.0.0. The vulnerability stems from the WEB...

CVE-2019-16154

An improper neutralization of input during web page generation in FortiAuthenticator WEB UI 6.0.0 may allow an unauthenticated user to perform a cross-site scripting attack XSS via a parameter of the logon page...

Cross site scripting

An improper neutralization of input during web page generation in FortiAuthenticator WEB UI 6.0.0 may allow an unauthenticated user to perform a cross-site scripting attack XSS via a parameter of the logon page...

CVE-2019-16154

An improper neutralization of input during web page generation in FortiAuthenticator WEB UI 6.0.0 may allow an unauthenticated user to perform a cross-site scripting attack XSS via a parameter of the logon page...

CVE-2019-16154

FortiAuthenticator WEB UI 6.0.0 is vulnerable to cross-site scripting due to improper neutralization of input during web page generation on the login page. An unauthenticated user could exploit a logon-page parameter to execute client-side code. This is documented across multiple sources (NVD, Re...

CVE-2019-16154: Improper Neutralization of Input During Web Page Generation

An improper neutralization of input during web page generation in FortiAuthenticator WEB UI 6.0.0 may allow an unauthenticated user to perform a cross-site scripting attack XSS via a parameter of the logon page...