fiber-copper.de Cross Site Scripting vulnerability OBB-3257229

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

ProLink PRS1841 PLDT Home fiber - Default Password

Exploit Title: Router backdoor - ProLink PRS1841 PLDT Home fiber Date: 12/8/2022 Exploit Author: Lawrence Amer @zux0x3a Vendor Homepage: https://prolink2u.com/product/prs1841/ Firmware : PRS1841 U V2 research:...

CVE-2023-23119

The use of the cyclic redundancy check CRC algorithm for integrity check during firmware update makes Ubiquiti airFiber AF2X Radio firmware version 3.2.2 and earlier vulnerable to firmware modification attacks. An attacker can conduct a man-in-the-middle MITM attack to modify the new firmware ima...

CVE-2022-40005

Intelbras WiFiber 120AC inMesh before 1-1-220826 allows command injection by authenticated users, as demonstrated by the /boaform/formPing6 and /boaform/formTracert URIs for ping and traceroute...

CVE-2022-3786 and CVE-2022-3602: X.509 Email Address Buffer Overflows

Security Advisory ID : BSA-2022-2115 Component : OpenSSL Revision : 1.0 On November 1st, 2022 the OpenSSL Project disclosed CVE-2022-3602 and CVE-2022-3786 present in OpenSSL 3.0.x... The vulnerabilities were initially rated as critical severity vulnerabilities but are now disclosed as high. More...

Fedora: Security Advisory for rust-wasmtime-fiber (FEDORA-2021-1805eacb48)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security Bulletin: The PowerVM hypervisor can assign duplicate WWPN's to virtual fiber channel adapters in peer VMs

Summary In some cases the PowerVM hypervisor can assign duplicate WWPN's to virtual fiber channel adapters in peer VMs after a specific series of service actions are performed Vulnerability Details CVEID: CVE-2021-38923 DESCRIPTION: IBM PowerVM Hypervisor could allow a privileged user to gain...

[SECURITY] Fedora 34 Update: rust-wasmtime-fiber-0.30.0-1.fc34

Fiber support for Wasmtime...

Fedora: Security Advisory for rust-wasmtime-fiber (FEDORA-2021-68713440cb)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 35 Update: rust-wasmtime-fiber-0.30.0-1.fc35

Fiber support for Wasmtime...

GO-2021-0108 CRLF vulnerability in Fiber in github.com/gofiber/fiber

Due to improper input sanitization, a maliciously constructed filename could cause a file download to use an attacker controlled filename, as well as injecting additional headers into an HTTP response...

CRLF vulnerability in Fiber

Impact The filename that is given in c.Attachment is not escaped, and therefore vulnerable for a CRLF injection attack. I.e. an attacker could upload a custom filename and then give the link to the victim. With this filename, the attacker can change the name of the downloaded file, redirect to...

GHSA-9CX9-X2GP-9QVH CRLF vulnerability in Fiber

Impact The filename that is given in c.Attachment is not escaped, and therefore vulnerable for a CRLF injection attack. I.e. an attacker could upload a custom filename and then give the link to the victim. With this filename, the attacker can change the name of the downloaded file, redirect to...

Command Execution Vulnerability in HG6145D at Wuhan Fiberhome Information Integration Technology Co.

HG6145D is a Gigabit Passive Fiber Optic Access User Unit GPON ONU of Fiberhome Communication Technology Co. A command execution vulnerability exists in the HG6145D of Wuhan Fiberhome Information Integration Technology Co. that can be exploited by an attacker to gain control of the server...

Arbitrary File Download Vulnerability in Secure Router of Riseconda Technology Development Co.

Focusing on the field of fiber optic broadband access, Riseconda Technology Development Co., Ltd. is committed to the convergence of fiber optic technology, Ethernet technology and broadband access technology. An arbitrary file download vulnerability exists in the security router of Riseconda...

Askey Fiber Optic Router Unauthorized RCE Vulnerability

Askey is the world's first professional manufacturer of international network communication equipments, the main products are ADSL, Cable, Modem, ADSL Router, Cable Router and so on. The main products are ADSL, Cable Modem, ADSL Router, Cable Router and so on. The Askey Fiber Optic Router...

CVE-2020-28695

Askey Fiber Router RTF3505VW-N1 BRSVg000R3505VWN1001s327 devices allow Remote Code Execution and retrieval of admin credentials to log into the Dashboard or login via SSH, leading to code execution as root...

CVE-2020-28695

Askey Fiber Router RTF3505VW-N1 BRSVg000R3505VWN1001s327 devices allow Remote Code Execution and retrieval of admin credentials to log into the Dashboard or login via SSH, leading to code execution as root...

CVE-2020-28695

CVE-2020-28695 affects Askey Fiber Router RTF3505VW-N1, and related models, enabling remote code execution and extraction of admin credentials to log into the Dashboard or SSH as root. The CVE entry describes an unauthenticated path resulting in full device compromise (CVE-2020-28695). Connected ...

PT-2024-11137 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a null pointer dereference in the lpfc prep els iocb function. This can occur when lpfc issue els plogi is called with a did for which no matching ndlp is found...