EUVD-2018-11594

Malware in sbrugna...

The vulnerability of the blocking page of the UserGate Next-Generation Firewall (NGFW) allows a hacker to execute arbitrary code.

The vulnerability of the UserGate Next-Generation Firewall’s blocking page is related to insufficient validation of input data. Exploiting this vulnerability allows a hacker to execute arbitrary code when navigating through a specially crafted link...

K12002065: BIG-IP ASM XSS vulnerability CVE-2020-5932

Security Advisory Description A cross-site scripting XSS vulnerability exists in the BIG-IP ASM Configuration utility response and blocking pages. An authenticated user with administrative privileges can specify a response page with any content, including JavaScript code that will be executed whe...

ASUS Asuswrt-Merlin Information Disclosure Vulnerability

ASUS Asuswrt-Merlin is a firmware from Asus ASUS of Taiwan, China that runs in its routers. An information disclosure vulnerability exists in ASUS Asuswrt-Merlin. An attacker could exploit this vulnerability by reading the customid variable on the blocking.asp page to obtain information about the...

CVE-2018-8878

Information disclosure in Asuswrt-Merlin firmware for ASUS devices older than 384.4 and ASUS firmware before 3.0.0.4.382.50470 for devices allows remote attackers to acquire information on internal network devices' hostnames and MAC addresses by reading the customid variable on the blocking.asp...

PT-2018-15166

Name of the Vulnerable Software and Affected Versions Actiontec C1000A router with firmware through CAC004-31.30L.95 Description The issue concerns a Persistent Cross-Site Scripting XSS flaw in the advancedsetup websiteblocking.html Website Blocking page. This allows a remote attacker to inject...

CVE-2018-19922: Improper Neutralization of Input During Web Page Generation

Persistent Cross-Site Scripting XSS in the advancedsetupwebsiteblocking.html Website Blocking page of the Actiontec C1000A router with firmware through CAC004-31.30L.95 allows a remote attacker to inject arbitrary HTML into the Website Blocking page by inserting arbitrary HTML into the 'TodUrlAdd...