84 matches found
CVE-2026-7026: Improper Neutralization of Input During Web Page Generation
A vulnerability was determined in D-Link DGS-3420 1.50.018. This issue affects some unknown processing of the component System Information Settings Page. This manipulation of the argument System Name causes cross site scripting. Remote exploitation of the attack is possible. The exploit has been...
EUVD-2017-7328
Malware in sbrugna...
EUVD-2016-1316
Malware in sbrugna...
com.powsybl:powsybl-distribution-core (>=6.0.0-rc1, <=6.7.1), com.powsybl:powsybl-starter (>=2023.3.0, <=2025.0.0) +1 more potentially affected by CVE-2025-48058 via com.powsybl:powsybl-powerfactory-dgs (>=6.0.0-rc1, <=6.7.1)
com.powsybl:powsybl-powerfactory-dgs MAVEN version =6.0.0-rc1, =6.0.0-rc1, =2023.3.0, =1.1.0, =1.11.1 Source cves: CVE-2025-48058 Source advisory: SNYK:JAVA-COMPOWSYBL-10442144...
CVE-2024-10150
The Bamazoo – Button Generator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's dgs shortcode in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticate...
PT-2024-16065 · WordPress · Bamazoo – Button Generator
Name of the Vulnerable Software and Affected Versions: Bamazoo – Button Generator plugin for WordPress versions up to, and including, 1.0 Description: The issue arises from insufficient input sanitization and output escaping on user-supplied attributes in the plugin's dgs shortcode. This allows...
WordPress plugin Bamazoo – Button Generator: Cross-site scripting vulnerabilities
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
CVE-2024-10150: Improper Neutralization of Input During Web Page Generation
The Bamazoo – Button Generator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's dgs shortcode in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticate...
This Week in Spring - June 11th, 2024
This Week in Spring - June 10th, 2024 Hi, Spring fans! Welcome to another installment of This Week in Spring! I'm in Paris, France, to talk to organizations using and working with Spring. Then, next week, it's off to Krakow, Poland, for the amazing Devoxx PL event! I can't wait. If you're around,...
This Week in Spring - June 4th, 2024
Hi, Spring fans, from London! I'm in this fabulous country doing my level-headed best to refrain from dooing Mr. Bean bits, because, honestly, if I - an avid and prolific fan of Spring and its many beans - can't be "Mr. Bean," then I'm glad Rowan Atkinson is! I'm here for a SpringOne Tour event,...
PT-2025-13301
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.19.0-0.rc8.20220727git39c3c396f813.60.fc37.aarch64 Description The issue arises from the vmci dispatch dgs tasklet function calling vmci read data, which uses wait event and results in an invalid sleep in an...
D-Link DGS-1510 XSS
The vulnerability of the D-Link DGS-1510 network device’s microprogramming software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to perform a cross-site scripting attack remotely...
dgs-ws.de Cross Site Scripting vulnerability OBB-1394629
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
D-Link DGS-1210-28 Denial of Service Vulnerability
The D-Link DGS-1210-28 is a switch. A denial of service vulnerability exists in the D-Link DGS-1210-28, which arises from a network system or product that does not properly validate incoming data, and can be exploited by an attacker to cause a denial of service condition that denies service to a...
D-Link DGS-1210-28 Denial Of Service Exploit
Exploit Title: D-Link DGS-1210-28 Denial of Service Exploit Author: Saeed Reza Zamanian Product : D-Link DGS-1210-28 Vendor Homepage: https://www.dlink.com/ Product Link: https://www.dlink.com/en/products/dgs-1210-28-28-port-gigabit-smart-managed-switch Version : DGS-1210-28 Description : Device...
D-Link DGS-1210-28 Denial Of Service
Exploit Title: D-Link DGS-1210-28 Denial of Service Date: 18 Sep 2020 Exploit Author: Saeed Reza Zamanian Product : D-Link DGS-1210-28 Vendor Homepage: https://www.dlink.com/ Product Link: https://www.dlink.com/en/products/dgs-1210-28-28-port-gigabit-smart-managed-switch Version : DGS-1210-28...
D-Link DGS-1250 Header Injection Vulnerability
D-Link Dgs-1250 series is a new generation of intelligent 10g port Gigabit network switch. A command injection vulnerability exists in the D-Link DGS-1250 product. An attacker can exploit this vulnerability to execute arbitrary commands...
D-Link DGS-1250 Header Injection Vulnerability
Exploit for hardware platform in category web applications D-Link DGS-1250 header injection vulnerability ============================================== The latest version of this advisory is available at: https://sintonen.fi/advisories/d-link-dgs-1250-header-injection.txt Overview -------- D-Lin...
D-Link DGS-1250 Header Injection
D-Link DGS-1250 header injection vulnerability ============================================== The latest version of this advisory is available at: https://sintonen.fi/advisories/d-link-dgs-1250-header-injection.txt Overview -------- D-Link DGS-1250 switch is susceptible to a header injection...
D-Link DGS-1510 Command Injection Vulnerability
The D-Link DGS-1510 is a DGS-1510 series switch from AUO D-Link of Taiwan, China. A security vulnerability exists in the D-Link DGS-1510 using firmware versions 1.20.011, 1.30.007, and 1.31.B003 and earlier. A remote attacker can exploit the vulnerability to inject malicious scripts and execute...