i4 assistant cross-site scripting vulnerability

i4 assistant is a specialized management tool for Apple mobile devices from China for Aipu Information Technology Company. A cross-site scripting vulnerability exists in i4 assistant version 7.85. The vulnerability can be exploited by remote attackers to inject arbitrary web script or HTML via th...

PT-2018-14981

Name of the Vulnerable Software and Affected Versions i4 assistant version 7.85 Description The issue allows for cross-site scripting XSS attacks through a crafted machine name field within iOS settings. Recommendations For i4 assistant version 7.85, update to a newer version that contains a fix...

CVE-2018-19527: Improper Neutralization of Input During Web Page Generation

i4 assistant 7.85 allows XSS via a crafted machine name field within iOS settings...

CVE-2018-3953

Devices in the Linksys ESeries line of routers Linksys E1200 Firmware Version 2.0.09 and Linksys E2500 Firmware Version 3.0.04 are susceptible to OS command injection vulnerabilities due to improper filtering of data passed to and retrieved from NVRAM. Data entered into the 'Router Name' input...