CVE-2017-16843: Improper Neutralization of Input During Web Page Generation

Vonage VDV-23 115 3.2.11-0.9.40 devices have stored XSS via the NewKeyword or NewDomain field to /goform/RgParentalBasic...

Multiple Jensen of Scandinavia AS Air:Link Router Stack Buffer Overflow Vulnerabilities

Jensen of Scandinavia AS Air:Link 3G and others are routers from Jensen of Scandinavia AS in Norway. A stack buffer overflow vulnerability exists in multiple Jensen of Scandinavia AS Air:Link routers. A remote attacker could exploit this vulnerability by leveraging multiple parameters in the...

CVE-2017-14267

EE 4GEE WiFi MBB before EE600005.0031 devices have CSRF, related to goform/AddNewProfile, goform/setWanDisconnect, goform/setSMSAutoRedirectSetting, goform/setReset, and goform/uploadBackupSettings...

Cross site request forgery (csrf)

EE 4GEE WiFi MBB before EE600005.0031 devices have CSRF, related to goform/AddNewProfile, goform/setWanDisconnect, goform/setSMSAutoRedirectSetting, goform/setReset, and goform/uploadBackupSettings...

CVE-2017-14267: Cross-Site Request Forgery (CSRF)

EE 4GEE WiFi MBB before EE600005.0031 devices have CSRF, related to goform/AddNewProfile, goform/setWanDisconnect, goform/setSMSAutoRedirectSetting, goform/setReset, and goform/uploadBackupSettings...

CVE-2017-11648

Techroutes TR 1803-3G Wireless Cellular Router/Modem 2.4.25 devices do not possess any protection against a CSRF vulnerability, as demonstrated by a goform/BasicSettings request to disable port filtering...

CVE-2017-11648: Cross-Site Request Forgery (CSRF)

Techroutes TR 1803-3G Wireless Cellular Router/Modem 2.4.25 devices do not possess any protection against a CSRF vulnerability, as demonstrated by a goform/BasicSettings request to disable port filtering...

Multiple Jensen of Scandinavia Air:Link Cross-Site Request Forgery Vulnerabilities

Air:Link 3G, Air:Link 5000AC, Air:Link 59300 are routers from Jensen of Scandinavia, Norway. A cross-site request forgery in vulnerability exists in multiple Jensen of Scandinavia Air:Link products/goform/ pages. This allows remote attackers to construct malicious URIs and trick users into...

Multiple Jensen of Scandinavia Air:Link Open Redirect Vulnerabilities

Air:Link 3G, Air:Link 5000AC, Air:Link 59300 are routers from Jensen of Scandinavia, Norway. An open redirect vulnerability exists in the handling of the 'submit-url' parameter on the /goform/ page of multiple Jensen of Scandinavia Air:Link products. An attacker can construct a malicious URI, tri...

Multiple Jensen of Scandinavia Air:Link Command Execution Vulnerabilities

Air:Link 3G, Air:Link 5000AC, Air:Link 59300 are routers from Jensen of Scandinavia, Norway. A command execution vulnerability exists in the /goform/ page of multiple Jensen of Scandinavia Air:Link products. A remote attacker could use this vulnerability to submit special shell metacharacters to...

Multiple Jensen of Scandinavia Air:Link 'return-url' parameter open redirect vulnerability

Air:Link 3G, Air:Link 5000AC, Air:Link 59300 are routers from Jensen of Scandinavia, Norway. An open redirect vulnerability exists in the handling of the 'return-url' parameter on the /goform/formLogout page of multiple Jensen of Scandinavia Air:Link products. An attacker can construct a maliciou...

CVE-2016-10312

Jensen of Scandinavia AS Air:Link 3G AL3G version 2.23m Rev. 3, Air:Link 5000AC AL5000AC version 1.13, and Air:Link 59300 AL59300 version 1.04 Rev. 4 devices allow remote attackers to execute arbitrary commands via shell metacharacters to certain /goform/ pages...

Code injection

Jensen of Scandinavia AS Air:Link 3G AL3G version 2.23m Rev. 3, Air:Link 5000AC AL5000AC version 1.13, and Air:Link 59300 AL59300 version 1.04 Rev. 4 devices allow remote attackers to execute arbitrary commands via shell metacharacters to certain /goform/ pages...

CVE-2016-10313

Jensen of Scandinavia AS Air:Link 3G AL3G version 2.23m Rev. 3, Air:Link 5000AC AL5000AC version 1.13, and Air:Link 59300 AL59300 version 1.04 Rev. 4 devices allow remote attackers to conduct CSRF attacks via certain /goform/ pages...

Cross site request forgery (csrf)

Jensen of Scandinavia AS Air:Link 3G AL3G version 2.23m Rev. 3, Air:Link 5000AC AL5000AC version 1.13, and Air:Link 59300 AL59300 version 1.04 Rev. 4 devices allow remote attackers to conduct CSRF attacks via certain /goform/ pages...

CVE-2016-10316

Jensen of Scandinavia AS Air:Link 3G AL3G version 2.23m Rev. 3, Air:Link 5000AC AL5000AC version 1.13, and Air:Link 59300 AL59300 version 1.04 Rev. 4 devices allow remote attackers to conduct Open Redirect attacks via the return-url parameter to /goform/formLogout...

CVE-2016-10312

Jensen of Scandinavia AS Air:Link 3G AL3G version 2.23m Rev. 3, Air:Link 5000AC AL5000AC version 1.13, and Air:Link 59300 AL59300 version 1.04 Rev. 4 devices allow remote attackers to execute arbitrary commands via shell metacharacters to certain /goform/ pages...

CVE-2016-10313: Cross-Site Request Forgery (CSRF)

Jensen of Scandinavia AS Air:Link 3G AL3G version 2.23m Rev. 3, Air:Link 5000AC AL5000AC version 1.13, and Air:Link 59300 AL59300 version 1.04 Rev. 4 devices allow remote attackers to conduct CSRF attacks via certain /goform/ pages...

CVE-2016-10312: Improper Neutralization of Special Elements used in a Command

Jensen of Scandinavia AS Air:Link 3G AL3G version 2.23m Rev. 3, Air:Link 5000AC AL5000AC version 1.13, and Air:Link 59300 AL59300 version 1.04 Rev. 4 devices allow remote attackers to execute arbitrary commands via shell metacharacters to certain /goform/ pages...

Cross site request forgery (csrf)

Keekoon KK002 devices 1.8.12 HD have a Cross Site Request Forgery Vulnerability affecting goform/formChnUserPwd and goform/formUserMng and the entire set of other pages...