D-Link DIR-878 安全漏洞

D-Link DIR-878 is a wireless router from D-Link China.The D-Link DIR-878 firmware version 1.02B05 contains an access control error vulnerability, which stems from the existence of incorrect access control. An attacker could use this vulnerability to log in with a blank password...

http request is blocked by http callout policy with blank web page

If the customer bind responder policy that refered http callout policy to ADC appliance global bind point. User's access to LB Virtual server will show blank page...

Gateway logon page show blank page with 480 VPN LICENSE error

Unable to access Gateway logon page, browser will show blank page, in the developer tools or fiddler, you we see "480 VPN LICENSE error"...

HTML5 app launch doesn't work via Netscaler after upgrading the CVAD setup

Upgrade Xendesktop from 7.15 Cu8 to 1912 CU5 or above Could connect externally through ADC Netscaler using HTML5 when on 7.15 but not with the latest codes Connecting to the machines using HTML5 via direct storefront works fine App launch via workspace app works fine though ADC as well Only while...

PT-2023-1226 · Vim +9 · Vim +9

Name of the Vulnerable Software and Affected Versions: Vim versions 8.1.2269 through 9.0.0339 Description: A null pointer dereference issue was discovered in the gui x11 create blank mouse function in gui x11.c, allowing attackers to cause denial of service or other unspecified impacts. This issu...

The vulnerability of Mozilla Firefox, Mozilla Firefox ESR, and the email client Thunderbird arises from the improper use of privileged APIs, allowing an attacker to install extensions.

The vulnerability in Mozilla Firefox, Mozilla Firefox ESR, and the email client Thunderbird is related to the improper use of privileged APIs. Exploiting this vulnerability allows a malicious actor to install extensions by capturing the link to the eval function from the about:blank window, there...

Bypassing application logic to set a blank password

Description As you many observe that rdiffweb strictly has a password policy where it prompts out that the password should be between 8 and 128 characters . But the application does not filter blank spaces used in a password Proof of Concept 1 Go to https://rdiffweb-demo.ikus-soft.com/prefs/gener...

CVE-2022-37857

bilde2910 Hauk v1.6.1 requires a hardcoded password which by default is blank. This hardcoded password is hashed but stored within the config.php file server-side as well as in clear-text on the android client device by default...

Hardcoded credentials

bilde2910 Hauk v1.6.1 requires a hardcoded password which by default is blank. This hardcoded password is hashed but stored within the config.php file server-side as well as in clear-text on the android client device by default...

Tabnabbing via window.opener [bookwyrm.social]

Description: 1. Hello @bookwyrm-social I found a tabnabbing vulnerability. attack is possible due to taget=blank or Tab nabbing via window.opener. VISIT:- https://bookwyrm.social/ SUMMARY: 1. I was browsing the site and found a tabnabbing vulnerability . As per the observation I found that attack...

Default credentials

An issue was discovered in Infiray IRAY-A8Z3 1.0.957. There is a blank root password for TELNET by default...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Thunderbird vulnerabilities (USN-5512-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5512-1 advisory. Multiple security issues were discovered in Thunderbird. If a user were tricked into opening a specially crafted website in a...

Oracle Linux 9 : thunderbird (ELSA-2022-4892)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2022-4892 advisory. 91.10.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Reference oracle-indexhtml within Requires...

Malicious code in blank-ts-repo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 808866413cc5af4336d9dbe301c13f13d341cc85ae096a529d10375b0245accc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1607 Malicious code in blank-ts-repo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 808866413cc5af4336d9dbe301c13f13d341cc85ae096a529d10375b0245accc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in blank-ts-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dbbaa2da3818f952bc73b9783271c529948837dd554453a3a8ccf3eecba72706 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1606 Malicious code in blank-ts-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dbbaa2da3818f952bc73b9783271c529948837dd554453a3a8ccf3eecba72706 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Debian DLA-3041-1 : thunderbird - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3041 advisory. Multiple security issues have been found in Thunderbird, which could potentially result in the execution of arbitrary code, information disclosure or spoofing. For...

Mozilla: Braille space character caused incorrect sender email to be shown for a digitally signed email

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue of when displaying the sender of an email, and the sender name contained the Braille Pattern Blank space character multiple times, Thunderbird displays all spaces. This flaw allows an attacker to send an ema...

CVE-2022-1834

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue of when displaying the sender of an email, and the sender name contained the Braille Pattern Blank space character multiple times, Thunderbird displays all spaces. This flaw allows an attacker to send an ema...