djc8.cn Cross Site Scripting vulnerability OBB-3116475

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

face520.cn Cross Site Scripting vulnerability OBB-3116471

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

xiaoting6.cn Cross Site Scripting vulnerability OBB-3108839

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-42140

Delta Electronics DX-2100-L1-CN 2.42 is vulnerable to Command Injection via lform/netdiagnose...

CVE-2022-42140

Delta Electronics DX-2100-L1-CN 2.42 is vulnerable to Command Injection via lform/netdiagnose...

CVE-2022-42141

Delta Electronics DX-2100-L1-CN 2.42 is vulnerable to Cross Site Scripting XSS via lform/urlfilter...

CVE-2022-42141

Delta Electronics DX-2100-L1-CN 2.42 is vulnerable to Cross Site Scripting XSS via lform/urlfilter...

Command injection

Delta Electronics DX-2100-L1-CN 2.42 is vulnerable to Command Injection via lform/netdiagnose...

Cross site scripting

Delta Electronics DX-2100-L1-CN 2.42 is vulnerable to Cross Site Scripting XSS via lform/urlfilter...

CVE-2022-42141

Delta Electronics DX-2100-L1-CN 2.42 is vulnerable to Cross Site Scripting XSS via lform/urlfilter...

PT-2022-26281 · Delta Electronics · Delta Electronics Dx-2100-L1-Cn

Name of the Vulnerable Software and Affected Versions: Delta Electronics DX-2100-L1-CN version 2.42 Description: The issue is related to Cross Site Scripting XSS via lform/urlfilter. This means that an attacker could potentially inject malicious scripts into the website, allowing them to steal us...

PT-2022-6344 · Delta Electronics · Dx-2100-L1-Cn

Name of the Vulnerable Software and Affected Versions: Delta Electronics DX-2100-L1-CN version 2.42 Description: The issue exists due to the lack of neutralization of special elements used in the operating system command by the lform/net diagnose component of the Delta Electronics DX-2100-L1-CN...

CVE-2022-42141

CVE-2022-42141 affects Delta Electronics DX-2100-L1-CN (v2.42); the issue is Cross Site Scripting (XSS) via the lform/urlfilter component. The available sources confirm XSS without details on a fixed version. The Red Hat and NVD records consistently describe a CXSS vulnerability with medium overa...

CVE-2022-42140

Delta Electronics DX-2100-L1-CN (firmware 2.42) is affected by CVE-2022-42140 due to an OS command injection vulnerability in the lform/net_diagnose component. The Red Hat/CISA entries indicate an authenticated OS command injection via the web configuration service, potentially enabling root comp...

Delta Electronics DX-2100-L1-CN 1.5.0.10 Command Injection / XSS

CyberDanube Security Research 20221130-0 ------------------------------------------------------------------------------- title| Multiple Vulnerabilities product| Delta Electronics DX-2100-L1-CN vulnerable version| V1.5.0.10 fixed version| V1.5.0.12 CVE number| - impact| High homepage|...

sdps365.cn Cross Site Scripting vulnerability OBB-2988784

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-0028 PAN-OS: Reflected Amplification Denial-of-Service (DoS) Vulnerability in URL Filtering

A PAN-OS URL filtering policy misconfiguration could allow a network-based attacker to conduct reflected and amplified TCP denial-of-service RDoS attacks. The DoS attack would appear to originate from a Palo Alto Networks PA-Series hardware, VM-Series virtual and CN-Series container firewall...

Command injection

An issue was discovered in Poly Studio before 3.7.0. Command Injection can occur via the CN field of a Create Certificate Signing Request CSR action...

j3n5.cn Cross Site Scripting vulnerability OBB-2650225

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

GHSA-QGFG-GVFF-523V python-glanceclient vulnerable to SSL server spoofing due to unverified X.509 certificate

The Python client library for Glance python-glanceclient before 0.10.0 does not properly check the preverifyok value, which prevents the server hostname from being verified with a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate and allows...