EUVD-2015-1251

Malware in sbrugna...

D-Link Central WiFi Manager (CWM-100) Cross-Site Scripting Vulnerability

D-Link Central WiFi Manager CWM-100 is a Web-based wireless access point management tool. A cross-site scripting vulnerability exists in the resource view in PayAction.class.php in D-Link Central WiFi Manager CWM-100 versions prior to 1.03R0100BETA6. A remote attacker can exploit this vulnerabili...

CVE-2019-13374

A cross-site scripting XSS vulnerability in resource view in PayAction.class.php in D-Link Central WiFi Manager CWM100 before v1.03R0100BETA6 allows remote attackers to inject arbitrary web script or HTML via the index.php/Pay/passcodeAuth passcode parameter...

CVE-2018-13435

An issue was discovered in the LINE jp.naver.line application 8.8.0 for iOS. The Passcode feature allows authentication bypass via runtime manipulation that forces a certain method to disable passcode authentication. NOTE: the vendor indicates that this is not an attack of interest within the...

CVE-2015-1108

The Lock Screen component in Apple iOS before 8.3 does not properly enforce the limit on incorrect passcode-authentication attempts, which makes it easier for physically proximate attackers to obtain access by making many passcode guesses...

CVE-2015-1107

The Lock Screen component in Apple iOS before 8.3 does not properly implement the erasure feature for incorrect passcode-authentication attempts, which makes it easier for physically proximate attackers to obtain access by making many passcode guesses...

Code injection

The Lock Screen component in Apple iOS before 8.3 does not properly implement the erasure feature for incorrect passcode-authentication attempts, which makes it easier for physically proximate attackers to obtain access by making many passcode guesses...

CVE-2015-1108

The Lock Screen component in Apple iOS before 8.3 does not properly enforce the limit on incorrect passcode-authentication attempts, which makes it easier for physically proximate attackers to obtain access by making many passcode guesses...

PT-2015-5092

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.3 Description The issue concerns the Lock Screen component, which fails to properly enforce the limit on incorrect passcode-authentication attempts. This makes it easier for attackers with physical access to obtai...