JVN#97325754: F-RevoCRM vulnerable to cross-site scripting

F-RevoCRM provided by ThinkingReed inc. contains a cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the user's web browser. Solution Apply the Patch Apply the patch according to the information provided by the developer. Apply Workaround Applying the...

sagemcom-fast-3890-exploit

Sagemcom Fast 3890 exploit This exploit uses the Cable Haunt...

CVE-2019-9556

FiberHome an5506-04-f RP2669 devices have XSS...

CVE-2019-9556

FiberHome an5506-04-f RP2669 devices have XSS...

Cross site scripting

FiberHome an5506-04-f RP2669 devices have XSS...

CVE-2019-9556

FiberHome an5506-04-f RP2669 devices have XSS...

CVE-2019-9556

CVE-2019-9556 affects FiberHome AN5506-04-F RP2669 devices. The vulnerability is a Cross-Site Scripting (XSS) issue in the web management interface, arising from insufficient input filtering in the application (stored XSS). Exploitation is discussed in public advisories and exploits (e.g., Exploi...

PT-2019-19707

Name of the Vulnerable Software and Affected Versions FiberHome an5506-04-f RP2669 devices Description The issue is related to a Cross-Site Scripting XSS problem. Recommendations For FiberHome an5506-04-f RP2669 devices, at the moment, there is no information about a newer version that contains a...

CVE-2019-9556: Improper Neutralization of Input During Web Page Generation

FiberHome an5506-04-f RP2669 devices have XSS...

f-inde.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1039150 Security Researcher g0bl1nsec Helped patch 3768 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting f-inde.com website and it...

i-a-f-t.net Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1037931 Security Researcher geeknik Helped patch 8815 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting i-a-f-t.net website and it...

PT-2019-15908

Name of the Vulnerable Software and Affected Versions nopCommerce version 4.2.0 Description The issue concerns a path traversal vulnerability via ../ in the d or f parameters to "Admin/RoxyFileman/ProcessRequest" due to a flaw in "Libraries/Nop.Services/Media/RoxyFileman/FileRoxyFilemanService.cs...

SuperMicro X8STi-F Operating System Command Injection Vulnerability

The SuperMicro X8STi-F is a computer motherboard from SuperMicro USA. An operating system command injection vulnerability exists in the Virtual Media feature in the SuperMicro X8STi-F with IPMI firmware version 2.06 and BIOS version 02.68. An attacker can exploit this vulnerability to obtain a...

CVE-2019-19642

On SuperMicro X8STi-F motherboards with IPMI firmware 2.06 and BIOS 02.68, the Virtual Media feature allows OS Command Injection by authenticated attackers who can send HTTP requests to the IPMI IP address. This requires a POST to /rpc/setvmdrive.asp with shell metacharacters in ShareHost or...

Command injection

On SuperMicro X8STi-F motherboards with IPMI firmware 2.06 and BIOS 02.68, the Virtual Media feature allows OS Command Injection by authenticated attackers who can send HTTP requests to the IPMI IP address. This requires a POST to /rpc/setvmdrive.asp with shell metacharacters in ShareHost or...

CVE-2019-19642

On SuperMicro X8STi-F motherboards with IPMI firmware 2.06 and BIOS 02.68, the Virtual Media feature allows OS Command Injection by authenticated attackers who can send HTTP requests to the IPMI IP address. This requires a POST to /rpc/setvmdrive.asp with shell metacharacters in ShareHost or...

CVE-2019-19642

CVE-2019-19642 affects SuperMicro X8STi-F motherboards with IPMI firmware 2.06 and BIOS 02.68. The vulnerability in the Virtual Media feature allows OS command injection by authenticated attackers who can send HTTP POST requests to the IPMI interface at /rpc/setvmdrive.asp, including shell metach...

PT-2019-15898

Name of the Vulnerable Software and Affected Versions SuperMicro X8STi-F motherboards with IPMI firmware 2.06 and BIOS 02.68 Description The issue allows OS Command Injection by authenticated attackers who can send HTTP requests to the IPMI IP address. This is achieved by sending a POST request t...

CVE-2019-19642: Improper Neutralization of Special Elements used in an OS Command

On SuperMicro X8STi-F motherboards with IPMI firmware 2.06 and BIOS 02.68, the Virtual Media feature allows OS Command Injection by authenticated attackers who can send HTTP requests to the IPMI IP address. This requires a POST to /rpc/setvmdrive.asp with shell metacharacters in ShareHost or...

Omron PLC 1.0.0 Denial Of Service

Exploit Title: Omron PLC 1.0.0 - Denial of Service PoC Google Dork: n/a Date: 2019-12-06 Exploit Author: n0b0dy Vendor Homepage: https://automation.omron.com, ia.omron.com Software Link: n/a Version: 1.0.0 Tested on: PLC f/w rev.: CJ2M v2.01 CWE-412 : Unrestricted Externally Accessible Lock CVE :...