PT-2026-56174

Name of the Vulnerable Software and Affected Versions PcVue versions prior to 17.0.0 Description The encryption algorithm used to protect the configuration of user accounts within the built-in user directory of projects is insufficient. This weakness allows a local attacker to modify the existing...

EUVD-2019-10629

Malware in sbrugna...

EUVD-2019-9343

Malware in sbrugna...

CVE-2019-19742

On D-Link DIR-615 devices, the User Account Configuration page is vulnerable to blind XSS via the name field...

CVE-2019-20073

On Netis DL4323 devices, XSS exists via the form2userconfig.cgi username parameter User Account Configuration...

CVE-2019-20073

On Netis DL4323 devices, XSS exists via the form2userconfig.cgi username parameter User Account Configuration...

Design/Logic Flaw

On Netis DL4323 devices, XSS exists via the form2userconfig.cgi username parameter User Account Configuration...

CVE-2019-20073

On Netis DL4323 devices, XSS exists via the form2userconfig.cgi username parameter User Account Configuration...

CVE-2019-20073

CVE-2019-20073 affects Netis DL4323 devices and is described as a Cross-Site Scripting (XSS) vulnerability via the form2userconfig.cgi username parameter in User Account Configuration. The root cause cited is lack of proper validation of client data by the WEB application. The connected records c...

PT-2019-16078

Name of the Vulnerable Software and Affected Versions Netis DL4323 affected versions not specified Description A security issue exists due to the presence of a cross-site scripting XSS flaw. This issue is triggered via the username parameter in the "form2userconfig.cgi" endpoint, specifically...

CVE-2019-19742

On D-Link DIR-615 devices, the User Account Configuration page is vulnerable to blind XSS via the name field...

CVE-2019-19742

On D-Link DIR-615 devices, the User Account Configuration page is vulnerable to blind XSS via the name field...

Cross site scripting

On D-Link DIR-615 devices, the User Account Configuration page is vulnerable to blind XSS via the name field...

CVE-2019-19742

On D-Link DIR-615 devices, the User Account Configuration page is vulnerable to blind XSS via the name field...

PT-2019-15941

Name of the Vulnerable Software and Affected Versions D-Link DIR-615 affected versions not specified Description The issue concerns a blind XSS vulnerability in the User Account Configuration page, specifically via the name field. Recommendations At the moment, there is no information about a new...

CVE-2019-19742: Improper Neutralization of Input During Web Page Generation

On D-Link DIR-615 devices, the User Account Configuration page is vulnerable to blind XSS via the name field...

CVE-2018-9111

Cross Site Scripting XSS exists on the Foxconn FEMTO AP-FC4064-T APGTB385.8.3lb15-W47 LTE Build 15 via the configuration of a user account. An attacker can execute arbitrary script on an unsuspecting user's browser...

CVE-2018-9111

Cross Site Scripting XSS exists on the Foxconn FEMTO AP-FC4064-T APGTB385.8.3lb15-W47 LTE Build 15 via the configuration of a user account. An attacker can execute arbitrary script on an unsuspecting user's browser...

PT-2018-18860

Name of the Vulnerable Software and Affected Versions Foxconn FEMTO AP-FC4064-T AP GT B38 5.8.3lb15-W47 LTE Build 15 Description A Cross Site Scripting XSS issue exists, allowing an attacker to execute arbitrary script on an unsuspecting user's browser via the configuration of a user account...