CVE-2021-46560

The firmware on Moxa TN-5900 devices through 3.1 allows command injection that could lead to device damage...

CVE-2021-46559

The firmware on Moxa TN-5900 devices through 3.1 has a weak algorithm that allows an attacker to defeat an inspection mechanism for integrity protection...

CVE-2021-46559

The firmware on Moxa TN-5900 devices through 3.1 has a weak algorithm that allows an attacker to defeat an inspection mechanism for integrity protection...

CVE-2021-46560

The firmware on Moxa TN-5900 devices through 3.1 allows command injection that could lead to device damage...

CVE-2021-46560

The firmware on Moxa TN-5900 devices through 3.1 allows command injection that could lead to device damage...

CVE-2021-46559

The firmware on Moxa TN-5900 devices through 3.1 has a weak algorithm that allows an attacker to defeat an inspection mechanism for integrity protection...

Command injection

The firmware on Moxa TN-5900 devices through 3.1 allows command injection that could lead to device damage...

Information disclosure

The firmware on Moxa TN-5900 devices through 3.1 has a weak algorithm that allows an attacker to defeat an inspection mechanism for integrity protection...

CVE-2021-46559

CVE-2021-46559 affects Moxa TN-5900 devices (firmware up to v3.1). The root cause is an insecure firmware update integrity check (weak checksum/validation) that can allow an attacker with management-interface access to upload arbitrary code by manipulating the firmware image header (CRC). Documen...

CVE-2021-46559

The firmware on Moxa TN-5900 devices through 3.1 has a weak algorithm that allows an attacker to defeat an inspection mechanism for integrity protection...

CVE-2021-46560

The firmware on Moxa TN-5900 devices through 3.1 allows command injection that could lead to device damage...

CVE-2021-46560

The CVE-2021-46560 entry concerns Moxa TN-5900 devices (firmware version 3.1 and earlier). A post-authentication command-injection vulnerability exists in the certificate management function web_CERMGMTUpload, allowing an authenticated user to inject OS commands through the cer_pw parameter, whic...

Moxa Tn-5900 命令注入漏洞

Moxa Tn-5900 is a series of En50155 wall-mounted routers from Moxa, China.A command injection vulnerability exists in Moxa TN-5900, which is caused when the network system or product fails to properly filter special characters, commands, etc. during the execution of commands entered by the user. ...

Moxa Tn-5900 数据伪造问题漏洞

MOXA Moxa Tn-5900 is a series of En50155 wall mount routers from China-based Moxa MOXA. The Moxa TN-5900 is vulnerable to a data forgery issue, which stems from a weak algorithm in the firmware on Moxa TN-5900 devices via 3.1. An attacker could exploit this vulnerability to corrupt the integrity...

PT-2021-6068 · Moxa · Moxa Tn-5900

Name of the Vulnerable Software and Affected Versions: Moxa TN-5900 devices through 3.1 Description: The issue is related to a weak algorithm used in the firmware of Moxa TN-5900 devices, which can be exploited by an attacker to defeat an inspection mechanism for integrity protection. This weakne...

mail.churchhilltn.gov Cross Site Scripting vulnerability OBB-2274537

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Compro Camera 安全漏洞

Compro Technology Camera is a video camera from Compro Technology China. A security vulnerability exists in Compro Camera that stems from mjpegStreamer.cgi that allows access to video screenshots. The following products and versions are affected: Compro IP70 2.087130218, IP570 2.087130520, IP60 a...

tn-signin.item24.com Cross Site Scripting vulnerability OBB-1292016

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

nces.ed.gov Cross Site Scripting vulnerability OBB-1065314

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

murfreesborovolkswagen.com XSS vulnerability

Open Bug Bounty ID: OBB-598965 Description| Value ---|--- Affected Website:| murfreesborovolkswagen.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...