CVE-2018-6333

The hhvm-attach deep link handler in Nuclide did not properly sanitize the provided hostname parameter when rendering. As a result, a malicious URL could be used to render HTML and other content inside of the editor's context, which could potentially be chained to lead to code execution. This iss...

CVE-2018-6333

The hhvm-attach deep link handler in Nuclide did not properly sanitize the provided hostname parameter when rendering. As a result, a malicious URL could be used to render HTML and other content inside of the editor's context, which could potentially be chained to lead to code execution. This iss...

PT-2018-17483

Name of the Vulnerable Software and Affected Versions Nuclide versions prior to 0.290.0 Description The issue concerns the hhvm-attach deep link handler in Nuclide, which did not properly sanitize the provided hostname parameter when rendering. This could allow a malicious URL to render HTML and...

Node.js Multiple Vulnerabilities (November 2018 Security Releases)

The version of Node.js installed on the remote host is 6.x prior to 6.15.0, 8.x prior to 8.14.0 or 10.x prior to 10.14.0 or 11.x prior to 11.3.0. It is, therefore, affected by multiple vulnerabilities. - OpenSSL Timing vulnerability in DSA signature generation CVE-2018-0734. - OpenSSL Timing...

Security Bulletin: Potential MITM attack in Apache CXF used by WebSphere Application Server affects IBM Operations Analytics - Log Analysis (CVE-2018-8039)

Summary There is a potential man-in-the-middle attack in Apache CXF used by WebSphere Application Server CVE-2018-8039 Vulnerability Details CVEID: CVE-2018-8039 DESCRIPTION: Apache CXF could allow a remote attacker to conduct a man-in-the-middle attack. The TLS hostname verification does not wor...

TP-Link TD-W8961ND Cross-Site Scripting Vulnerability

The TP-Link TD-W8961ND is a wireless router from China P&L TP-LINK. A cross-site scripting vulnerability exists in the TP-Link TD-W8961ND, which can be exploited by a remote attacker to inject malicious code into the current list of the DHCP client with the help of the hostname of the DHCP client...

CVE-2018-20372

TP-Link TD-W8961ND devices allow XSS via the hostname of a DHCP client...

Cross site scripting

Tenda ADSL modem routers 1.0.1 allow XSS via the hostname of a DHCP client...

CVE-2018-20372

TP-Link TD-W8961ND devices allow XSS via the hostname of a DHCP client...

Design/Logic Flaw

TP-Link TD-W8961ND devices allow XSS via the hostname of a DHCP client...

CVE-2018-20372

TP-Link TD-W8961ND devices allow XSS via the hostname of a DHCP client...

CVE-2018-20373

The CVE-2018-20373 entry affects Tenda ADSL modem routers (version 1.0.1) and is caused by a cross-site scripting (XSS) vulnerability triggered via the hostname of a DHCP client. The connected records corroborate: Cross-site scripting vulnerability in Tenda ADSL modem routers 1.0.1; exploitation ...

CVE-2018-20372: Improper Neutralization of Input During Web Page Generation

TP-Link TD-W8961ND devices allow XSS via the hostname of a DHCP client...

CVE-2018-20373: Improper Neutralization of Input During Web Page Generation

Tenda ADSL modem routers 1.0.1 allow XSS via the hostname of a DHCP client...

PT-2018-15328 · Tp Link · Tp-Link Td-W8961Nd

Name of the Vulnerable Software and Affected Versions: TP-Link TD-W8961ND affected versions not specified Description: The issue allows for cross-site scripting XSS attacks via the hostname of a DHCP client. This can be exploited by changing a device's hostname to an XSS payload, which will then ...

192.168.2.10

A remote administration tool a RAT is a piece of software that allows a remote "operator" to control a system as if he has physical access to that system. While desktop sharing and remote administration have many legal uses, "RAT" software is usually associated with criminal or malicious activity...

ntp: Stack-based buffer overflow in ntpq and ntpdc allows denial of service or code execution

The ntpq and ntpdc command-line utilities that are part of ntp package are vulnerable to stack-based buffer overflow via crafted hostname. Applications using these vulnerable utilities with an untrusted input may be potentially exploited, resulting in a crash or arbitrary code execution under...

ntp: Stack-based buffer overflow in ntpq and ntpdc allows denial of service or code execution

The ntpq and ntpdc command-line utilities that are part of ntp package are vulnerable to stack-based buffer overflow via crafted hostname. Applications using these vulnerable utilities with an untrusted input may be potentially exploited, resulting in a crash or arbitrary code execution under...

192.168.3.174

A remote administration tool a RAT is a piece of software that allows a remote "operator" to control a system as if he has physical access to that system. While desktop sharing and remote administration have many legal uses, "RAT" software is usually associated with criminal or malicious activity...

apache-cxf: TLS hostname verification does not work correctly with com.sun.net.ssl.*

It was discovered that when Apache CXF is configured to use the system property com.sun.net.ssl.internal.www.protocol ,it uses reflection to make the HostnameVerifier work with old com.sun.net.ssl.HostnameVerifier interface. Although the CXF implementation throws an exception, which is caught in...