WebPort-v1.19.1-Reflected-XSS

WebPort-v1.19.1-反射型XSS WebPort-v1.19.1 中的反射型XSS影响打开恶意构造链接或第三方网页的用户。 CVE-2019-12460 https://vulners.com/cve/CVE-2019-12460 PoC-1 要利用此漏洞，攻击者可以使用 'http://server:8090/access/setup?type=" 请求，影响打开恶意构造链接或第三方网页的用户。 GET /access/setup?type=%22%3C/script%3E%3Cscript%3Ealert%27xss%27;%3C/script%3E%3Cscript%3...

SUSE CVE-2026-64168

In the Linux kernel, the following vulnerability has been resolved: spi: sprd: fix error pointer deref after DMA setup failure The driver falls back to PIO mode if DMA setup fails during probe. Make sure to check the dma.enabled flag before trying to release the DMA channels also on late probe...

Linux kernel 安全漏洞

The Linux kernel is the kernel used by the Linux operating system developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the failure of the DAMON sysfs scheme directory setup, resulting in the uncleaned retention of the...

EUVD-2019-4068

Malware in sbrugna...

CVE-2025-50124

A CWE-269: Improper Privilege Management vulnerability exists that could cause privilege escalation when the server is accessed by a privileged account via a console and through exploitation of a setup script...

CVE-2021-21276

Polr is an open source URL shortener. in Polr before version 2.3.0, a vulnerability in the setup process allows attackers to gain admin access to site instances, even if they do not possess an existing account. This vulnerability exists regardless of users' settings. If an attacker crafts a reque...

Design/Logic Flaw

Web Port 1.19.1 allows XSS via the /access/setup type parameter...

CVE-2019-12460

Web Port 1.19.1 allows XSS via the /access/setup type parameter...

CVE-2019-12460

CVE-2019-12460 affects Web Port 1.19.1 with a reflected XSS flaw exploitable via the /access/setup?type parameter. The issue stems from unsanitized input in the setup endpoint, enabling an attacker to inject and execute script in a victim’s browser. Public evidence includes PoC payloads and explo...