CVE-2026-44400: Authorization Bypass Through User-Controlled Key

MailEnable Enterprise Premium 10.55 and earlier contains an improper authorization vulnerability in the WebAdmin mobile portal that allows attackers to bypass authentication checks by reusing AuthenticationToken cookies generated for low-privileged users. Attackers can obtain a token from the...

CVE-2021-37913

The HGiga OAKlouds mobile portal does not filter special characters of the IPv6 Gateway parameter of the network interface card setting page. Remote attackers can use this vulnerability to perform command injection and execute arbitrary commands in the system without logging in...

Command injection

The HGiga OAKlouds mobile portal does not filter special characters of the Ethernet number parameter of the network interface card setting page. Remote attackers can use this vulnerability to perform command injection and execute arbitrary commands in the system without logging in...

CVE-2021-37913

CVE-2021-37913 affects the HGiga OAKlouds mobile portal. The vulnerability arises from not filtering special characters in the IPv6 Gateway parameter on the network interface card settings page, enabling remote command injection. Impact is remote execution of arbitrary commands without login, wit...

CVE-2021-37913

The HGiga OAKlouds mobile portal does not filter special characters of the IPv6 Gateway parameter of the network interface card setting page. Remote attackers can use this vulnerability to perform command injection and execute arbitrary commands in the system without logging in...

Hgiga Oaklouds 操作系统命令注入漏洞

Hgiga Oaklouds is an enterprise collaborative work portal network of China Henderson Technology Hgiga Company. It is used for just-in-time communication and resource reservation. An operating system command injection vulnerability exists in the HGiga OAKlouds mobile portal, which originates from...

Hgiga Oaklouds 操作系统命令注入漏洞

Hgiga Oaklouds is an enterprise collaborative work portal network of China Henderson Technology Hgiga Company. It is used for just-in-time communication and resource reservation. An operating system command injection vulnerability exists in the HGiga OAKlouds mobile portal, which is caused by the...

CVE-2021-37912: Improper Neutralization of Special Elements used in an OS Command

The HGiga OAKlouds mobile portal does not filter special characters of the Ethernet number parameter of the network interface card setting page. Remote attackers can use this vulnerability to perform command injection and execute arbitrary commands in the system without logging in...

CVE-2021-37913: Improper Neutralization of Special Elements used in an OS Command

The HGiga OAKlouds mobile portal does not filter special characters of the IPv6 Gateway parameter of the network interface card setting page. Remote attackers can use this vulnerability to perform command injection and execute arbitrary commands in the system without logging in...

PT-2021-21905

Name of the Vulnerable Software and Affected Versions: HGiga OAKlouds mobile portal affected versions not specified Description: The HGiga OAKlouds mobile portal does not filter special characters of the IPv6 Gateway parameter of the network interface card setting page. Remote attackers can use...

PT-2021-21904

Name of the Vulnerable Software and Affected Versions: HGiga OAKlouds mobile portal affected versions not specified Description: The HGiga OAKlouds mobile portal does not filter special characters of the Ethernet number parameter of the network interface card setting page. Remote attackers can us...

Finereason /mobile/member.php SQL注入漏洞

No description provided by source...

CVE-2010-2734

Cross-site scripting XSS vulnerability in the mobile portal in Microsoft Forefront Unified Access Gateway UAG 2010 Gold, 2010 Update 1, and 2010 Update 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "XSS Issue on UAG Mobile Portal Website in Forefron...

CVE-2010-2734: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the mobile portal in Microsoft Forefront Unified Access Gateway UAG 2010 Gold, 2010 Update 1, and 2010 Update 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "XSS Issue on UAG Mobile Portal Website in Forefron...

PT-2010-4253

Name of the Vulnerable Software and Affected Versions Microsoft Forefront Unified Access Gateway UAG versions 2010 Gold through 2010 Update 2 Description A cross-site scripting XSS issue exists in the mobile portal of Microsoft Forefront Unified Access Gateway UAG, allowing remote attackers to...