EUVD-2018-11594

Malware in sbrugna...

The vulnerability of the blocking page of the UserGate Next-Generation Firewall (NGFW) allows a hacker to execute arbitrary code.

The vulnerability of the UserGate Next-Generation Firewall’s blocking page is related to insufficient validation of input data. Exploiting this vulnerability allows a hacker to execute arbitrary code when navigating through a specially crafted link...

K12002065: BIG-IP ASM XSS vulnerability CVE-2020-5932

Security Advisory Description A cross-site scripting XSS vulnerability exists in the BIG-IP ASM Configuration utility response and blocking pages. An authenticated user with administrative privileges can specify a response page with any content, including JavaScript code that will be executed whe...

ASUS Asuswrt-Merlin Information Disclosure Vulnerability

ASUS Asuswrt-Merlin is a firmware from Asus ASUS of Taiwan, China that runs in its routers. An information disclosure vulnerability exists in ASUS Asuswrt-Merlin. An attacker could exploit this vulnerability by reading the customid variable on the blocking.asp page to obtain information about the...

CVE-2018-8878

Information disclosure in Asuswrt-Merlin firmware for ASUS devices older than 384.4 and ASUS firmware before 3.0.0.4.382.50470 for devices allows remote attackers to acquire information on internal network devices' hostnames and MAC addresses by reading the customid variable on the blocking.asp...