8 matches found
CVE-2025-62320: Improper Neutralization of Input During Web Page Generation
HTML Injection can be carried out in Product when a web application does not properly check or clean user input before showing it on a webpage. Because of this, an attacker may insert unwanted HTML code into the page. When the browser loads the page, it may automatically interact with external...
EUVD-2020-23777
Malware in sbrugna...
CVE-2021-40330
CVE-2021-40330 affects the Git project: in git_connect_git (connect.c) of Git before 2.30.1, a repository path can contain a newline character, which may trigger unexpected cross-protocol requests as demonstrated by a crafted git://localhost:1234/%0d%0a%0d%0aGET%20/%20HTTP/1.1 sequence. The vulne...
CVE-2019-3410: Cross-Site Request Forgery (CSRF)
All versions up to UKBBWF820+1.0.0B06 of ZTE WF820+ LTE Outdoor CPE product are impacted by Cross-Site Request Forgery vulnerability,which stems from the fact that WEB applications do not adequately verify whether requests come from trusted users. An attacker can exploit this vulnerability to sen...
PT-2019-16562
Name of the Vulnerable Software and Affected Versions ZTE WF820+ LTE Outdoor CPE product versions prior to UKBB WF820+ 1.0.0B06 Description The issue stems from the fact that web applications do not adequately verify whether requests come from trusted users, allowing an attacker to exploit this a...
Packeteer PacketShaper 7.x - Web Interface Remote Denial of Service
source: https://www.securityfocus.com/bid/24388/info Packeteer PacketShaper is prone to a remote denial-of-service vulnerability because the application's web interface fails to properly handle unexpected requests. Successfully exploiting this issue allows remote, authenticated attackers to reboo...
CVE-2006-3214: Undefined Security Weakness
Unspecified vulnerability in Hitachi Groupmax Address Server 7 and earlier, and Groupmax Mail Server 7 and earlier allows remote attackers to cause a denial of service product "stop" via unspecified vectors involving "unexpected requests"...
