Denial of Service Vulnerability in Multiple F5 Products (CNVD-2018-10114)

F5 BIG-IP LTM, etc. are products of F5 Corporation, U.S.A. F5 BIG-IP LTM is a local traffic manager; BIG-IP AAM is an application acceleration manager. A security vulnerability exists in several F5 products. When Large Receive Offload and SYN cookies are turned on, an attacker can exploit the...

Denial of Service Vulnerability in Multiple F5 Products (CNVD-2018-10113)

F5 BIG-IP LTM, etc. are products of F5 Corporation, U.S.A. F5 BIG-IP LTM is a local traffic manager; BIG-IP AAM is an application acceleration manager. A security vulnerability exists in several F5 products. When Large Receive Offload and SYN cookies are turned on, an attacker can exploit the...

Cross site scripting

A vulnerability was discovered in WUZHI CMS 4.1.0. There is persistent XSS that allows remote attackers to inject arbitrary web script or HTML via the tagpinyin parameter to the /index.php?m=tags&f=index&v=add URI...

CVE-2018-10311

A vulnerability was discovered in WUZHI CMS 4.1.0. There is persistent XSS that allows remote attackers to inject arbitrary web script or HTML via the tagpinyin parameter to the /index.php?m=tags&f=index&v=add URI...

CVE-2018-10313: Improper Neutralization of Input During Web Page Generation

WUZHI CMS 4.1.0 allows persistent XSS via the form%5Bqq10%5D parameter to the /index.php?m=member&f=index&v=profile&setiframe=1 URI...

PT-2019-13820

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.16.4 Description A double-locking error in the Linux kernel may potentially cause a deadlock. The issue is related to the f hid function in drivers/usb/dwc3/gadget.c. Recommendations For versions prior to 4.16....

CVE-2018-10248: Cross-Site Request Forgery (CSRF)

An issue was discovered in WUZHI CMS 4.1.0. There is a CSRF vulnerability that can delete any article via index.php?m=content&f=content&v=recycledelete...

CVE-2018-9926: Cross-Site Request Forgery (CSRF)

An issue was discovered in WUZHI CMS 4.1.0. There is a CSRF vulnerability that can add an admin account via index.php?m=core&f=power&v=add...

PT-2018-19095

Name of the Vulnerable Software and Affected Versions WUZHI CMS version 4.1.0 Description A CSRF issue was discovered, allowing an attacker to add a user account via the "index.php?m=member&f=index&v=add" endpoint. Recommendations For WUZHI CMS version 4.1.0, consider implementing proper CSRF...

PT-2018-19094

Name of the Vulnerable Software and Affected Versions WUZHI CMS version 4.1.0 Description A CSRF issue was found that allows adding an admin account via the "index.php?m=core&f=power&v=add" endpoint. Recommendations For WUZHI CMS version 4.1.0, update to a newer version that contains a fix for th...

CVE-2018-9927: Cross-Site Request Forgery (CSRF)

An issue was discovered in WUZHI CMS 4.1.0. There is a CSRF vulnerability that can add a user account via index.php?m=member&f=index&v=add...

f-facts.nl XSS vulnerability

Open Bug Bounty ID: OBB-597193 Description| Value ---|--- Affected Website:| f-facts.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

f-f.ir XSS vulnerability

Open Bug Bounty ID: OBB-594194 Description| Value ---|--- Affected Website:| f-f.ir Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

PT-2018-3589 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.16.4 Description: A double free vulnerability in the f midi set alt function of drivers/usb/gadget/function/f midi.c in the f midi driver may allow attackers to cause a denial of service or possibly have...

f-dr.com XSS vulnerability

Open Bug Bounty ID: OBB-573714 Description| Value ---|--- Affected Website:| f-dr.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

FTPShell client denial of service vulnerability

FTPShell client is a set of windows-based file transfer program. A security vulnerability exists in FTPShell Client version 6.7. A remote attacker can cause a denial of service crash and execute arbitrary code by sending 400 'F' characters and FTP 220 response code to exploit the vulnerability...

CVE-2018-7573

An issue was discovered in FTPShell Client 6.7. A remote FTP server can send 400 characters of 'F' in conjunction with the FTP 220 response code to crash the application; after this overflow, one can run arbitrary code on the victim machine. This is similar to CVE-2009-3364 and CVE-2017-6465...

CVE-2018-6189

F-Secure Radar on-premises before 2018-02-15 has XSS via vectors involving the Tags parameter in the JSON request body in an outbound request for the /api/latest/vulnerabilityscans/tags/batch resource, aka a "suggested metadata tags for assets" issue...

CVE-2018-6324

F-Secure Radar on-premises before 2018-02-15 has an Unvalidated Redirect via the ReturnUrl parameter that triggers upon a user login...

Design/Logic Flaw

F-Secure Radar on-premises before 2018-02-15 has XSS via vectors involving the Tags parameter in the JSON request body in an outbound request for the /api/latest/vulnerabilityscans/tags/batch resource, aka a "suggested metadata tags for assets" issue...