32 matches found
CVE-2021-45906
OpenWrt 21.02.1 allows XSS via the NAT Rules Name screen...
CVE-2021-45906
OpenWrt 21.02.1 is affected by a cross-site scripting (XSS) vulnerability in the NAT Rules Name screen of the LuCI web interface. The underlying issue is insufficient input filtering/escaping for user-supplied parameters in that screen. Exploitation could occur remotely via the web UI, with user ...
OpenWrt 跨站脚本漏洞
OpenWrt, a Linux operating system for embedded devices, is vulnerable to a cross-site scripting vulnerability in OpenWrt version 21.02.1, which stems from the lack of effective filtering and escaping of user-submitted parameters in the NAT Rules Name screen. No detailed vulnerability details are...
PT-2021-6033 · Luci +1 · Luci +1
Name of the Vulnerable Software and Affected Versions: OpenWrt version 21.02.1 Description: The issue is related to a lack of protection for the web page structure in the NAT Rules Name screen of the LuCI configuration web interface in OpenWrt. This can be exploited by a remote attacker to perfor...
CVE-2020-19201
A Stored Cross-Site Scripting XSS vulnerability was found in statusfilterreload.php, a page in the pfSense software WebGUI, on Netgate pfSense version 2.4.4-p2 and earlier. The page did not encode output from the filter reload process, and a stored XSS was possible via the descr description...
Cross site scripting
A Stored Cross-Site Scripting XSS vulnerability was found in statusfilterreload.php, a page in the pfSense software WebGUI, on Netgate pfSense version 2.4.4-p2 and earlier. The page did not encode output from the filter reload process, and a stored XSS was possible via the descr description...
CVE-2020-19201
CVE-2020-19201 describes a stored XSS in pfSense WebGUI’s status_filter_reload.php affecting Netgate pfSense 2.4.4-p2 and earlier. The vulnerability arises because output from the filter reload process isn’t encoded, enabling an attacker to inject script via the descr parameter on NAT rules. Conn...
openSUSE Security Update : virtualbox (openSUSE-2016-1366)
This update for virtualbox fixes the following issues : - Fixes CVE-2016-5501,CVE-2016-5538,CVE-2016-5605,CVE-2016-5608, CVE-2016-5610,CVE-2016-5611,CVE-2016-5613 bsc1005621 - Add patch to limit number of simultaneous make jobs. - Version bump to 5.1.8 released 2016-10-18 by Oracle This is a...
Infernal-Twin - This Is Evil Twin Attack Automated (Wireless Hacking)
This tool is created to aid the penetration testers in assessing wireless security. Author is not responsible for misuse. Please read instructions thoroughly. Usage sudo python InfernalWireless.py How to install $ sudo apt-get install apache2 $ sudo apt-get install mysql-server...
Vulnerability warning: the D-Link friends of the perbadanan Router the presence of a remote command injection vulnerability-vulnerability warning-the black bar safety net
Recently security researcher at D-Link friends of the perbadanan on the router discovered a serious security vulnerability, an attacker can remotely obtain device The maximum access to the Root, and hijacking DNS settings or on the device to execute arbitrary commands. As early as last 1 1 month,...
Code injection
The IPv6 implementation in Cisco Adaptive Security Appliance ASA Software 9.1.3 and earlier, when NAT64 or NAT66 is enabled, does not properly process NAT rules, which allows remote attackers to cause a denial of service device reload via crafted packets, aka Bug ID CSCue34342...
