CVE-2021-45906

OpenWrt 21.02.1 allows XSS via the NAT Rules Name screen...

CVE-2021-45905

OpenWrt 21.02.1 allows XSS via the Traffic Rules Name screen...

Cross site scripting

OpenWrt 21.02.1 allows XSS via the Traffic Rules Name screen...

Design/Logic Flaw

OpenWrt 21.02.1 allows XSS via the NAT Rules Name screen...

CVE-2021-45905

OpenWrt 21.02.1 allows XSS via the Traffic Rules Name screen...

CVE-2021-45905

OpenWrt 21.02.1 allows XSS via the Traffic Rules Name screen...

CVE-2021-45905

Concretely, CVE-2021-45905 affects OpenWrt 21.02.1 and is an XSS in the Traffic Rules Name screen caused by insufficient input filtering/escaping. The vulnerability has a demonstrated impact on confidentiality/integrity via client-side script injection, with CVSS values (2.0: 3.5/LOW; 3.1: 5.4/ME...

CVE-2021-45906

OpenWrt 21.02.1 allows XSS via the NAT Rules Name screen...

CVE-2021-45906

OpenWrt 21.02.1 is affected by a cross-site scripting (XSS) vulnerability in the NAT Rules Name screen of the LuCI web interface. The underlying issue is insufficient input filtering/escaping for user-supplied parameters in that screen. Exploitation could occur remotely via the web UI, with user ...

CVE-2021-45906

OpenWrt 21.02.1 allows XSS via the NAT Rules Name screen...

CVE-2021-45906: Improper Neutralization of Input During Web Page Generation

OpenWrt 21.02.1 allows XSS via the NAT Rules Name screen...

CVE-2021-45905: Improper Neutralization of Input During Web Page Generation

OpenWrt 21.02.1 allows XSS via the Traffic Rules Name screen...

PT-2021-6849 · Openwrt · Openwrt

Name of the Vulnerable Software and Affected Versions: OpenWrt version 21.02.1 Description: The issue exists due to inadequate protection of the web page structure in the OpenWrt embedded operating system. This allows for a potential Cross-Site Scripting XSS attack via the Traffic Rules Name...

OpenWrt: Cross-site scripting vulnerabilities

OpenWrt, a Linux operating system for embedded devices, is vulnerable to a cross-site scripting vulnerability in OpenWrt version 21.02.1, which stems from the lack of effective filtering and escaping of user-submitted parameters in the NAT Rules Name screen. No detailed vulnerability details are...

OpenWrt: Cross-site scripting vulnerabilities

OpenWrt, a Linux operating system for embedded devices, is vulnerable to a cross-site scripting vulnerability in OpenWrt version 21.02.1, which stems from the lack of effective filtering and escaping of user-submitted parameters in the Traffic Rules Name screen. No detailed vulnerability details...

Cross-site Scripting (XSS) - Stored in pimcore/customer-data-framework

Description Stored cross site scripting vulnerability in pimcore app, name and description field field is vulnerable to xss in customer automation rules. Proof of Concept 1 .login to the account 2 .go to customers -- customer automation rules -- Add payload in name field. 3 .payload " Impact This...

PT-2021-6033 · Luci +1 · Luci +1

Name of the Vulnerable Software and Affected Versions: OpenWrt version 21.02.1 Description: The issue is related to a lack of protection for the web page structure in the NAT Rules Name screen of the LuCI configuration web interface in OpenWrt. This can be exploited by a remote attacker to perfor...

Exploit for Deserialization of Untrusted Data in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

Log4Shell（CVE-2021-44228）related attacks IOCs 源IP使用Apache Log4j RCE尝试攻击，其中包含很大部分Tor节点，详见Attack-IP.md 利用log4j漏洞传播的恶意程序、Botnet等IOC详见IOC-C2.md Snort检测规则详见Snort.md Suricata规则详见Suricata.md...

wolf-tools

wolf-tools Open source tools and scripts by Arctic Wolf:...

selinux-policy bug fix and enhancement update

The selinux-policy packages contain the rules that govern how confined processes run on the system. Bug Fixes and Enhancements: RHEL 8.4 Backport container-selinux policy to allow spct domains to set bpf rules on any domain BZ2015846 AVC prevents ping -I from running in UBI 8 container BZ2027691...