WordPress Plugin Firewall 2 1.3 - Cross-Site Request Forgery / Cross-Site Scripting

alert1" !-- In a real attack, forms can be submitted automatically and spear-phishing attacks can be convincing. Mitigations ================ Disable the plugin until a new version is released that fixes this bug. Disclosure policy ================ dxw believes in responsible disclosure. Your...

WordPress Plugin Firewall 2 1.3 - Cross-Site Request Forgery Cross-Site Scripting

WordPress Plugin Firewall 2 1.3 - Cross-Site Request Forgery Cross-Site Scripting alert1" !-- In a real attack, forms can be submitted automatically and spear-phishing attacks can be convincing. Mitigations ================ Disable the plugin until a new version is released that fixes this bug...

Wordpress Plugin Firewall 2 CSRF/stored XSS vulnerability

Description CSRF/stored XSS in WordPress Firewall 2 allows unauthenticated attackers to do almost anything an admin can Vulnerability HTML is not escaped and there is no CSRF prevention, meaning attackers can put arbitrary HTML content onto the settings page. Proof of concept Visit the following...

WordPress Firewall 2 1.3 Cross Site Request Forgery / Cross Site Scripting

Details ================ Software: WordPress Firewall 2 Version: 1.3 Homepage: https://wordpress.org/plugins/wordpress-firewall-2/ Advisory report: https://security.dxw.com/advisories/csrfstored-xss-in-wordpress-firewall-2-allows-unauthenticated-attackers-to-do-almost-anything-an-admin-can/ CVE:...

SonicWall Firewall Detection

Binary data 700050.prm...

Download WordPress Firewall 2 - Authenticated Stored XSS/CSRF

The wordpress-firewall-2 WordPress plugin was affected by an Authenticated Stored XSS/CSRF security vulnerability...

Network Firewall Detection

Binary data 7266.pasl...

Using WebSocket as your Real Time Protocol? Wallam got you covered.

In the beginning there was http 1 or 2, web pages were static and did not do much beyond displaying static text and images. Life has changed since… Web applications discovered that bi-directional communication between the browser and the web server is essential. Of course, http protocol, with it’...

ZyXEL Firewall Detection

Binary data 700042.prm...

Marel Food Processing Systems (Update B)

CVSS v3 9.8 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Marel Equipment: Food Processing Systems Vulnerabilities: Hard-Coded Passwords, Unrestricted Upload, Improper Access Control UPDATE INFORMATION This updated advisory is a follow-up to the updated advisory titled...

Juniper Firewall Detection

Binary data 700041.prm...

Cyberoam Firewall Detection

Binary data 700040.prm...

WatchGuard Firewall Detection

Binary data 700037.prm...

Remote Command Execution Vulnerability in Next-Generation Firewall System of SinoCom-ArtM

The InforCube Next-Generation Firewall NFW is a comprehensive security gateway security solution. A remote command execution vulnerability exists in the InforCube Next Generation Firewall system. The vulnerability allows an attacker to write php code into a file by modifying the install.php post...

LANCOM Systems Firewall Detection

Binary data 700039.prm...

ZyXEL Firewall Detection

Binary data 700043.prm...

Sophos Firewall Detection

Binary data 700036.prm...

Hardware Firewall Detection via TLS/SSL

Binary data 7265.pasl...

Dell SonicWall Firewall Detection

Binary data 700038.prm...

SECCN User Behavior Management Firewall Has Information Disclosure Vulnerability

SECCN User Behavior Management Firewall is an application gateway firewall based on a security protocol stack. The SECCN User Behavior Management Firewall suffers from an information leakage vulnerability. An attacker can exploit this vulnerability to obtain sensitive server files, posing an...