GO-2022-0370 Man-in-the-middle attack due to improper validation of certificate in mellium.im/xmpp

Websocket client connections are vulnerable to man-in-the-middle attacks via DNS spoofing. When looking up a WSS endpoint using a DNS TXT record, the server TLS certificate is incorrectly validated using the name of the server returned by the TXT record request, not the name of the the server bei...

CVE-2021-43461

Cross Site Scripting XSS vulnerability exists in Rumble Mail Server 0.51.3135 via the servername parameter...

Cross site scripting

Cross Site Scripting XSS vulnerability exists in Rumble Mail Server 0.51.3135 via the servername parameter...

PT-2022-11848

Name of the Vulnerable Software and Affected Versions Rumble Mail Server version 0.51.3135 Description A Cross Site Scripting XSS issue exists, allowing exploitation via the servername parameter. Recommendations For Rumble Mail Server version 0.51.3135, avoid using the servername parameter until ...

Rumble Mail Server 跨站脚本漏洞

Rumble Mail Server is a mail server suite for SMTP ESMTPSA, HTTP, POP3, and IMAP4v1 from Daniel Gruno's personal developer.Rumble Mail Server version 0.51.3135 is vulnerable to a cross-site scripting vulnerability that stems from the servername parameter lacks a data validation filter for...

CVE-2021-43461: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability exists in Rumble Mail Server 0.51.3135 via the servername parameter...

CVE-2022-25548

Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function fromSetSysTime. This vulnerability allows attackers to cause a Denial of Service DoS via the serverName parameter...

CVE-2022-25548

Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function fromSetSysTime. This vulnerability allows attackers to cause a Denial of Service DoS via the serverName parameter...

CVE-2022-25548

Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function fromSetSysTime. This vulnerability allows attackers to cause a Denial of Service DoS via the serverName parameter...

Stack overflow

Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function fromSetSysTime. This vulnerability allows attackers to cause a Denial of Service DoS via the serverName parameter...

CVE-2022-25548

CVE-2022-25548 affects Tenda AX1806 v1.0.0.1. The issue is a stack overflow in the function fromSetSysTime, which can allow remote attackers to trigger a Denial of Service via the serverName parameter. Multiple connected sources corroborate the same root cause and impact. The available documents ...

PT-2022-17355

Name of the Vulnerable Software and Affected Versions Tenda AX1806 version 1.0.0.1 Description A stack overflow was discovered in the fromSetSysTime function, allowing attackers to cause a Denial of Service DoS via the serverName parameter. Recommendations For Tenda AX1806 version 1.0.0.1, consid...

CVE-2022-25548: Out-of-bounds Write

Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function fromSetSysTime. This vulnerability allows attackers to cause a Denial of Service DoS via the serverName parameter...

VulnCheck KEV: CVE-2013-2578

cgi-bin/admin/servetest in TP-Link IP Cameras TL-SC3130, TL-SC3130G, TL-SC3171, TL-SC3171G, and possibly other models before beta firmware LM.1.6.18P12sign6 allows remote attackers to execute arbitrary commands via shell metacharacters in 1 the ServerName parameter and 2 other unspecified...

CVE-2019-17607

HongCMS 3.0.0 has XSS via the install/index.php servername parameter...

Design/Logic Flaw

HongCMS 3.0.0 has XSS via the install/index.php servername parameter...

CVE-2019-17607

HongCMS 3.0.0 has XSS via the install/index.php servername parameter...

CVE-2019-17607

CVE-2019-17607 affects HongCMS 3.0.0 with a cross-site scripting (XSS) vulnerability exploitable via the install/index.php servername parameter. Reported impact in CNVD/NVD notes client-side code execution; the CNVD entry explicitly describes XSS, while the NVD entry summarizes the risk. The avai...

CVE-2019-17607: Improper Neutralization of Input During Web Page Generation

HongCMS 3.0.0 has XSS via the install/index.php servername parameter...

PT-2019-15227

Name of the Vulnerable Software and Affected Versions HongCMS version 3.0.0 Description The issue is related to a security problem where an attacker can execute malicious scripts on the website. This is achieved by exploiting the servername parameter in the install/index.php endpoint...