EUVD-2020-17268

Malware in sbrugna...

EUVD-2022-33561

Malicious code in bioql PyPI...

CVE-2022-29152

The Ericom PowerTerm WebConnect 6.0 login portal can unsafely write an XSS payload from the AppPortal cookie into the page...

Ericom PowerTerm WebConnect Cross-Site Scripting Vulnerability

Ericom PowerTerm WebConnect is a web browser. version 6.0 of Ericom PowerTerm WebConnect is vulnerable to a cross-site scripting vulnerability that originates when the login portal insecurely writes a cross-site scripting attack load to a page from an AppPortal cookie. An attacker could exploit...

CVE-2022-29152

The Ericom PowerTerm WebConnect 6.0 login portal can unsafely write an XSS payload from the AppPortal cookie into the page...

CVE-2022-29152

The Ericom PowerTerm WebConnect 6.0 login portal can unsafely write an XSS payload from the AppPortal cookie into the page...

CVE-2022-29152

The Ericom PowerTerm WebConnect 6.0 login portal can unsafely write an XSS payload from the AppPortal cookie into the page...

CVE-2022-29152

The Ericom PowerTerm WebConnect 6.0 login portal can unsafely write an XSS payload from the AppPortal cookie into the page...

CVE-2022-29152

The CVE-2022-29152 entry concerns Ericom PowerTerm WebConnect 6.0 Login Portal. Multiple sources (NVD, CNVD, Red Hat advisories, CVE list) describe a cross-site scripting vulnerability where an XSS payload from the AppPortal cookie can be written into the page, enabling client-side JavaScript exe...

CVE-2022-29152: Improper Neutralization of Input During Web Page Generation

The Ericom PowerTerm WebConnect 6.0 login portal can unsafely write an XSS payload from the AppPortal cookie into the page...

Ericom PowerTerm WebConnect cross-site scripting vulnerability

Ericom PowerTerm WebConnect is a web browser. version 6.0 of Ericom PowerTerm WebConnect is vulnerable to a cross-site scripting vulnerability that originates when the login portal insecurely writes a cross-site scripting attack load to a page from an AppPortal cookie. An attacker could exploit...

PT-2022-19417

Name of the Vulnerable Software and Affected Versions Ericom PowerTerm WebConnect version 6.0 Description The Ericom PowerTerm WebConnect login portal can unsafely write an XSS payload from the AppPortal cookie into the page. This issue allows for potential cross-site scripting attacks...

Ericom Access Server SSRF

The vulnerability of the Ericom Access Server is related to insufficient checking of incoming requests. Exploiting this vulnerability allows a malicious actor to perform an SSRF attack remotely...

CVE-2020-24548

Ericom Access Server 9.2.0 for AccessNow and Ericom Blaze allows SSRF to make outbound WebSocket connection requests on arbitrary TCP ports, and provides "Cannot connect to" error messages to inform the attacker about closed ports...

CVE-2020-24548

Ericom Access Server 9.2.0 for AccessNow and Ericom Blaze allows SSRF to make outbound WebSocket connection requests on arbitrary TCP ports, and provides "Cannot connect to" error messages to inform the attacker about closed ports...

CVE-2020-24548

Ericom Access Server 9.2.0 for AccessNow and Ericom Blaze allows SSRF to make outbound WebSocket connection requests on arbitrary TCP ports, and provides "Cannot connect to" error messages to inform the attacker about closed ports...

Server side request forgery (ssrf)

Ericom Access Server 9.2.0 for AccessNow and Ericom Blaze allows SSRF to make outbound WebSocket connection requests on arbitrary TCP ports, and provides "Cannot connect to" error messages to inform the attacker about closed ports...

CVE-2020-24548

Ericom Access Server 9.2.0 for AccessNow and Ericom Blaze allows SSRF to make outbound WebSocket connection requests on arbitrary TCP ports, and provides "Cannot connect to" error messages to inform the attacker about closed ports...

CVE-2020-24548

The CVE-2020-24548 entry concerns Ericom Access Server 9.2.0 (AccessNow and Ericom Blaze). A Server-Side Request Forgery (SSRF) vulnerability enables the server to initiate outbound WebSocket connections to arbitrary TCP ports. The issue is evidenced by the application providing a generic “Cannot...

CVE-2020-24548: Server-Side Request Forgery (SSRF)

Ericom Access Server 9.2.0 for AccessNow and Ericom Blaze allows SSRF to make outbound WebSocket connection requests on arbitrary TCP ports, and provides "Cannot connect to" error messages to inform the attacker about closed ports...