CVE-2019-6681

CVE-2019-6681 affects BIG-IP tmrouted with memory leak in the Multicast Forwarding Cache (MFC). Affected versions include BIG-IP 15.0.0–15.0.1.1, 14.1.0–14.1.2, 14.0.0–14.0.1, 13.1.0–13.1.3.1, and 12.1.0–12.1.5. The vulnerability can cause a memory leak in tmrouted, potentially exhausting system ...

MFC Insecure Library Loading Vulnerability

A remote code execution vulnerability exists in the way that certain applications built using Microsoft Foundation Classes MFC handle the loading of DLL files. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then insta...

Microsoft MFC Insecure Library Loading (CVE-2010-3190)

A remote code execution vulnerability has been reported in Microsoft MFC. The vulnerability is due to an error in the way Microsoft MFC restricts the path used for loading external libraries. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

August 30, 2018—KB4343893 (OS Build 16299.637)

None None...

July 24, 2018—KB4338817 (OS Build 16299.579)

None None...

CVE-2017-2244

Cross-site request forgery CSRF vulnerability in MFC-J960DWN firmware ver.D and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2017-2244

Cross-site request forgery CSRF vulnerability in MFC-J960DWN firmware ver.D and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in MFC-J960DWN firmware ver.D and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2017-2244

Cross-site request forgery CSRF vulnerability in MFC-J960DWN firmware ver.D and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2017-2244

CVE-2017-2244 concerns a cross-site request forgery (CSRF) in Brother MFC‑J960DWN printers. The vulnerability affects firmware version D and earlier of MFC‑J960DWN, enabling remote attackers to hijack the authentication of administrators via unspecified vectors. Connected documents consistently d...

MFC-J960DWN vulnerable to cross-site request forgery

Overview MFC-J960DWN provided by BROTHER INDUSTRIES, LTD. is a MultiFunction Printer. MFC-J960DWN contains a cross-site request forgery vulnerability CWE-352. Taiga Asano reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning...

JVN#95996423: MFC-J960DWN vulnerable to cross-site request forgery

MFC-J960DWN provided by BROTHER INDUSTRIES, LTD. is a MultiFunction Printer. MFC-J960DWN contains a cross-site request forgery vulnerability CWE-352. Impact If a user views a malicious page, unintended operations such as changing settings of the device may be performed. Solution Apply a Workaroun...

Brother MFC-J6520DW - Authentication Bypass / Password Change Exploit

Exploit for php platform in category web applications ASCII hex -- md5 e.g. AuthCookie=c243a9ee18a9327bfd419f31e75e71c7 for 'test' password This information can be used to crack current password from exported cookie. Fix: Minimize network access to Brother MFC device or disable HTTPS interface...

Brother MFC Administration Reflected Cross-Site Scripting

Class Cross-Site Scripting Remote Yes Disclosed 9th October 2014 Published 7th January 2015 Credit Dave Daly of Dionach [email protected] Confirmed Vulnerable Brother MFC-J4410DW with F/W Versions J and K The printer administration web application on Brother MFC-J4410DW model printers with firmwa...

Cross site scripting

Cross-site scripting XSS vulnerability in Brother MFC-J4410DW printer with firmware before L allows remote attackers to inject arbitrary web script or HTML via the url parameter to general/status.html and possibly other pages...

CVE-2015-1056

The CVE-2015-1056 entry describes a cross-site scripting (XSS) vulnerability in Brother MFC-J4410DW printers, exploitable through the web interface (e.g., general/status.html) via the url parameter. Affected firmware is before version L; the root cause is improper handling/validation of URL param...

Brother MFC-J4410DW XSS Vulnerability (Jan 2015) - Active Check

Brother MFC-J4410DW is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Multiple Cross-Site Scripting Vulnerabilities in Brother MFC-J4410DW Printer 'url' Parameter

Brother MFC-J4410DW is a color laser printer device that supports wireless network printing. Multiple cross-site scripting vulnerabilities exist in the Brother MFC-J4410DW printer 'url' parameter because it fails to properly filter user-supplied input. An attacker could use these vulnerabilities ...

Brother MFC-J4410DW Cross Site Scripting

Class Cross-Site Scripting Remote Yes Disclosed 9th October 2014 Published 7th January 2015 Credit Dave Daly of Dionach [email protected] Confirmed Vulnerable Brother MFC-J4410DW with F/W Versions J and K The printer administration web application on Brother MFC-J4410DW model printers with firmwa...

Webster HTTP Server GET Buffer Overflow

No description provided by source. $Id: websterhttp.rb 10887 2010-11-03 12:19:19Z patrickw $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...