yersinia

Spanning Tree 1: DOS attack sending conf BPDUs root@kitploit: Let's send some conf BPDUs claiming be root!!! By sending continously conf BPDU with root pathcost 0, randomly generated bridge id and therefore the same root id, and some default values for other fields, we try to annoy the switches...

EUVD-2013-6065

Malware in sbrugna...

EUVD-2014-5534

Malware in sbrugna...

EUVD-2023-43284

Malicious code in bioql PyPI...

Malicious code in isl-server (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6733 Malicious code in isl-server (npm)

The package communicates with a domain associated with malicious activity...

CVE-2023-39575

A reflected cross-site scripting XSS vulnerability in the urlstr URL parameter of ISL ARP Guard v4.0.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

ISLOnline ISL Light Client Installed (Windows)

Binary data islonlineisllightclientwininstalled.nbin...

CVE-2023-39575

A reflected cross-site scripting XSS vulnerability in the urlstr URL parameter of ISL ARP Guard v4.0.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2023-39575

A reflected cross-site scripting XSS vulnerability in the urlstr URL parameter of ISL ARP Guard v4.0.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

Cross site scripting

A reflected cross-site scripting XSS vulnerability in the urlstr URL parameter of ISL ARP Guard v4.0.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2023-39575

A reflected cross-site scripting XSS vulnerability in the urlstr URL parameter of ISL ARP Guard v4.0.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2023-39575

CVE-2023-39575 affects ISL ARP Guard v4.0.2. A reflected cross-site scripting (XSS) vulnerability exists in the url_str URL parameter, allowing an attacker to execute arbitrary web scripts or HTML in the victim’s browser via a crafted payload. Documented impact per NVD shows a Medium severity (CV...

PT-2023-27025 · Unknown · Isl Arp Guard

Name of the Vulnerable Software and Affected Versions: ISL ARP Guard version 4.0.2 Description: A reflected cross-site scripting XSS issue exists in the url str URL parameter, allowing attackers to execute arbitrary web scripts or HTML via a crafted payload. This enables the execution of maliciou...

CVE-2023-39575

A reflected cross-site scripting XSS vulnerability in the urlstr URL parameter of ISL ARP Guard v4.0.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

webmail.bon261.net Cross Site Scripting vulnerability OBB-1379547

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

CVE-2014-5647

The ISL Light Remote Desktop aka com.islonline.isllight.mobile.android application 2.1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The ISL Light Remote Desktop aka com.islonline.isllight.mobile.android application 2.1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5647

The CVE-2014-5647 entry concerns the ISL Light Remote Desktop Android app (com.islonline.isllight.mobile.android) version 2.1.0, which does not verify X.509 certificates from SSL servers. This lack of certificate validation enables man-in-the-middle attackers to spoof servers and access sensitive...

CVE-2014-5647

The ISL Light Remote Desktop aka com.islonline.isllight.mobile.android application 2.1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...