The vulnerability of the NAT Rules Name Screen web interface in the LuCI configuration interface allows a hacker to perform cross-site scripting attacks.

The vulnerability of the NAT Rules Name Screen web interface of the LuCI configuration interface in the embedded OpenWrt operating system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a remote attacker to perform cross-site...

Schweitzer Engineering Laboratories, Inc. SEL-3620 and SEL-3622 Improper Access Control (CVE-2017-7928)

An Improper Access Control issue was discovered in Schweitzer Engineering Laboratories SEL SEL-3620 and SEL-3622 Security Gateway Versions R202 and, R203, R203-V1, R203-V2 and, R204, R204-V1. The device does not properly enforce access control while configured for NAT port forwarding, which may...

Rathole - A Lightweight, Stable And High-Performance Reverse Proxy For NAT Traversal, Written In Rust. An Alternative To Frp And Ngrok

A secure, stable and high-performance reverse proxy for NAT traversal, written in Rust rathole, like frp and ngrok, can help to expose the service on the device behind the NAT to the Internet, via a server with a public IP. Features High Performance Much higher throughput can be achieved than frp...

New DeadBolt Ransomware Targets NAT Devices

Theres a new ransomware that targets NAT devices made by QNAP: The attacks started today, January 25th, with QNAP devices suddenly finding their files encrypted and file names appended with a .deadbolt file extension. Instead of creating ransom notes in each folder on the device, the QNAP devices...

OpenWrt Cross-Site Scripting Vulnerability (CNVD-2022-00602)

OpenWrt, a Linux operating system for embedded devices, is vulnerable to a cross-site scripting vulnerability in OpenWrt version 21.02.1, which stems from the lack of effective filtering and escaping of user-submitted parameters in the NAT Rules Name screen. No detailed vulnerability details are...

CVE-2021-45906

OpenWrt 21.02.1 allows XSS via the NAT Rules Name screen...

CVE-2021-45906

OpenWrt 21.02.1 allows XSS via the NAT Rules Name screen...

Design/Logic Flaw

OpenWrt 21.02.1 allows XSS via the NAT Rules Name screen...

CVE-2021-45906

OpenWrt 21.02.1 allows XSS via the NAT Rules Name screen...

CVE-2021-45906

OpenWrt 21.02.1 is affected by a cross-site scripting (XSS) vulnerability in the NAT Rules Name screen of the LuCI web interface. The underlying issue is insufficient input filtering/escaping for user-supplied parameters in that screen. Exploitation could occur remotely via the web UI, with user ...

CVE-2021-45906

OpenWrt 21.02.1 allows XSS via the NAT Rules Name screen...

CVE-2021-45906: Improper Neutralization of Input During Web Page Generation

OpenWrt 21.02.1 allows XSS via the NAT Rules Name screen...

OpenWrt 跨站脚本漏洞

OpenWrt, a Linux operating system for embedded devices, is vulnerable to a cross-site scripting vulnerability in OpenWrt version 21.02.1, which stems from the lack of effective filtering and escaping of user-submitted parameters in the NAT Rules Name screen. No detailed vulnerability details are...

PT-2021-6033 · Luci +1 · Luci +1

Name of the Vulnerable Software and Affected Versions: OpenWrt version 21.02.1 Description: The issue is related to a lack of protection for the web page structure in the NAT Rules Name screen of the LuCI configuration web interface in OpenWrt. This can be exploited by a remote attacker to perfor...

PJSIP 数字错误漏洞

PJSIP is a free and open source multimedia communications library written in C that implements standards-based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. PJSIP suffers from a numeric error vulnerability that stems from the fact that an incoming STUN message containing the ERROR-CODE...

Design/Logic Flaw

The Onion module in toxcore before 0.2.2 doesn't restrict which packets can be onion-routed, which allows a remote attacker to discover a target user's IP address when knowing only their Tox Id by positioning themselves close to target's Tox Id in the DHT for the target to establish an onion...

CVE-2018-25022

The Onion module in toxcore before 0.2.2 doesn't restrict which packets can be onion-routed, which allows a remote attacker to discover a target user's IP address when knowing only their Tox Id by positioning themselves close to target's Tox Id in the DHT for the target to establish an onion...

CVE-2018-25022

The CVE-2018-25022 entry concerns the Onion module in toxcore before 0.2.2, where the Onion module does not restrict which packets can be onion-routed. This allows a remote attacker to discover a target user’s IP address (given only the Tox Id) by manipulating DHT proximity to cause an onion conn...

CVE-2018-25022

The Onion module in toxcore before 0.2.2 doesn't restrict which packets can be onion-routed, which allows a remote attacker to discover a target user's IP address when knowing only their Tox Id by positioning themselves close to target's Tox Id in the DHT for the target to establish an onion...

PT-2021-8850

Name of the Vulnerable Software and Affected Versions toxcore versions prior to 0.2.2 Description The issue allows a remote attacker to discover a target user's IP address by positioning themselves close to the target's Tox Id in the DHT, guessing the target's DHT public key, creating a DHT node...