8 matches found
CVE-2024-11981
Certain models of routers from Billion Electric has an Authentication Bypass vulnerability, allowing unautheticated attackers to retrive contents of arbitrary web pages...
CVE-2024-11981
CVE-2024-11981 affects Billion Electric routers (e.g., M100, M150, M120N, M500). The vulnerability is an authentication bypass that allows unauthenticated attackers to retrieve contents of arbitrary web pages. Public details in multiple sources confirm the issue and affected models. No explicit r...
CVE-2024-11981 Billion Electric router - Authentication Bypass
Certain models of routers from Billion Electric has an Authentication Bypass vulnerability, allowing unautheticated attackers to retrive contents of arbitrary web pages...
PT-2024-21290 · Element · Element Android
Name of the Vulnerable Software and Affected Versions: Element Android versions 1.4.3 through 1.6.10 Description: The issue allows a third-party malicious application to start any internal activity by passing some extra parameters, potentially making Element Android display an arbitrary web page,...
SAMSUNG Members 安全漏洞
Samsung Members is a community platform app from Samsung South Korea. An access control error vulnerability exists in Samsung Members. The vulnerability allows untrusted applications to load arbitrary web pages in a webview. No details of the vulnerability are provided at this time...
Design/Logic Flaw
tiki-featuredlink.php in TikiWiki CMS/Groupware 8.3 allows remote attackers to load arbitrary web site pages into frames and conduct phishing attacks via the url parameter, aka "frame injection."...
PT-2009-4180 · Apple · Ios +3
Name of the Vulnerable Software and Affected Versions: Apple Safari versions prior to 4.0 iPhone OS versions prior to 2.2.1 iPhone OS for iPod touch versions prior to 2.2.1 Description: The XSLT implementation in WebKit does not properly handle redirects, allowing remote attackers to read XML...
Code injection
Trend Micro ServerProtect for Linux SPLX 1.25, 1.3, and 2.5 before 20070216 allows remote attackers to access arbitrary web pages and reconfigure the product via HTTP requests with the splx2376info cookie to the web interface port 14942/tcp...