Cisco Firepower Threat Defense Access Control Error Vulnerability (CNVD-2020-27107)

Cisco Firepower Threat Defense FTD is a suite of unified software from the U.S. company Cisco Cisco that provides next-generation firewall services. An Access Control Error vulnerability exists in Cisco Firepower Threat Defense that stems from incorrect configuration. An attacker could exploit th...

BTFS: misconfigured CORS let to HPP and SOP bypass

Hello team, I found a bug on your website that let me bypass the SOP policy. Hope you fix it, everything is in the video https://www.youtube.com/watch?v=PYsU350S-s4 Impact The attacker my direct a victim to a phishing page of www.bitterrent.com/login and he/she will be convince to enter their ema...

Improper Access Control

github.com/gorilla/handlers is vulnerable to improper access control. The vulnerability exists because it does not perform sufficient origin header access checks due to the misconfiguration of CORS, allowing an attacker to send malicious AJAX requests or HTML Document through it bypassing the sam...

Dell EMC RSA Archer Information Disclosure Vulnerability (CNVD-2020-31252)

Dell EMC RSA Archer is an enterprise IT governance and compliance governance product from Dell USA. The product enables the development of eGRC programs for managing enterprise risk, automating business processes, and more. An information disclosure vulnerability exists in versions prior to Dell...

CVE-2017-18867

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D6100 before 1.0.0.55, D7800 before V1.0.1.24, R7100LG before V1.0.0.32, WNDR4300v1 before 1.0.2.90, and WNDR4500v3 before 1.0.0.48...

CVE-2017-18867

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D6100 before 1.0.0.55, D7800 before V1.0.1.24, R7100LG before V1.0.0.32, WNDR4300v1 before 1.0.2.90, and WNDR4500v3 before 1.0.0.48...

Unspecified Vulnerability in NETGEAR ReadyNAS OS

NETGEAR ReadyNAS OS is a set of operating systems for ReadyNAS network-attached storage devices from NETGEAR. A security vulnerability exists in NETGEAR ReadyNAS OS version 6 and later fixed in version 6.9.3 that stems from a misconfiguration of security settings. Detailed vulnerability details a...

CVE-2018-21159

CVE-2018-21159 affects NETGEAR ReadyNAS OS prior to 6.9.3, caused by a misconfiguration of security settings. The vulnerability is tied to ReadyNAS devices, with the fix available in version 6.9.3. Exploitation details are not provided in the sources; no publicly disclosed exploit information is ...

CVE-2018-21158

The CVE-2018-21158 issue affects NETGEAR R7800 routers. Affected firmware includes versions prior to 1.0.2.46, with the vulnerability stemming from incorrect configuration of security settings. The core impact is high if exploited, as confidentiality, integrity, and availability could be compromi...

Stripo Inc: CORS on my.stripo.email

Hey Team i don't know if it's valid or not i just want to let you know about this thanks. following the HTML File .. var req = new XMLHttpRequest; req.onload = reqListener; req.open'get','https://my.stripo.email/cabinet/stripo-ws/v1/stripo-websocket/info?t=1587908666898',true; req.withCredentials...

Unspecified Vulnerability in Multiple NETGEAR Products

The NETGEAR R7800, among others, is a wireless router from NETGEAR. A security vulnerability exists in several NETGEAR products that stems from a misconfiguration of security settings. No details of the vulnerability are available at this time...

Unspecified Vulnerability in Multiple NETGEAR Products (CNVD-2021-52943)

NETGEAR R6400 and others are products of NETGEAR, Inc.NETGEAR R6400 is a wireless router.NETGEAR R6700 is a wireless router.NETGEAR D7800 is a wireless modem.NETGEAR D7800 is a wireless modem.NETGEAR D7800 is a wireless modem.NETGEAR D7800 is a wireless modem.NETGEAR D7800 is a wireless...

CVE-2018-21229

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects R7500v2 before 1.0.3.20, R7800 before 1.0.2.38, WN3000RPv3 before 1.0.2.50, WNDR4300v2 before 1.0.0.50, and WNDR4500v3 before 1.0.0.50...

CVE-2018-21231

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D1500 before 1.0.0.27, D500 before 1.0.0.27, D6100 before 1.0.0.57, D6220 before 1.0.0.40, D6400 before 1.0.0.74, D7000 before 1.0.1.60, D7800 before 1.0.1.34, D8500 before 1.0.3.39, DGN2200v4 befor...

CVE-2017-18706

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects R6100 before 1.0.1.20, R7500 before 1.0.0.118, WNDR3700v4 before 1.0.2.88, WNDR4300 before 1.0.2.90, WNDR4300v2 before 1.0.0.48, WNDR4500v3 before 1.0.0.48, and WNR2000v5 before 1.0.0.62...

CVE-2017-18711

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D7800 before 1.0.1.28, R6400 before 1.01.32, R6400v2 before 1.0.2.44, R6700 before 1.0.1.36, R6900 before 1.0.1.34, R6900P before 1.3.0.8, R7000 before 1.0.9.14, R7000P before 1.3.0.8, R7500v2 befor...

CVE-2017-18709

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects R8300 before 1.0.2.94 and R8500 before 1.0.2.94...

CVE-2017-18705

CVE-2017-18705 affects multiple NETGEAR devices (D7800, R6100, R7500, R7500v2, R7800, R9000, WNDR3700v4, WNDR4300, WNDR4300v2, WNDR4500v3, WNR2000v5) where a misconfiguration of security settings is present. The advisory lists affected firmware versions (e.g., D7800 < 1.0.1.28; R6100 < 1.0....

CVE-2017-18706

CVE-2017-18706 affects several NETGEAR routers where security settings were incorrectly configured. Affected devices and firmware ranges include R6100 prior to 1.0.1.20, R7500 prior to 1.0.0.118, WNDR3700v4 prior to 1.0.2.88, WNDR4300 prior to 1.0.2.90, WNDR4300v2 prior to 1.0.0.48, WNDR4500v3 pr...

CVE-2017-18709

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects R8300 before 1.0.2.94 and R8500 before 1.0.2.94...