417 matches found
CVE-2016-3968
Multiple cross-site scripting XSS vulnerabilities in Sophos Cyberoam CR100iNG UTM appliance with firmware 10.6.3 MR-1 build 503, CR35iNG UTM appliance with firmware 10.6.2 MR-1 build 383, and CR35iNG UTM appliance with firmware 10.6.2 Build 378 allow remote attackers to inject arbitrary web scrip...
CVE-2016-3968
Multiple cross-site scripting XSS vulnerabilities in Sophos Cyberoam CR100iNG UTM appliance with firmware 10.6.3 MR-1 build 503, CR35iNG UTM appliance with firmware 10.6.2 MR-1 build 383, and CR35iNG UTM appliance with firmware 10.6.2 Build 378 allow remote attackers to inject arbitrary web scrip...
CVE-2016-3968
Multiple cross-site scripting XSS vulnerabilities in Sophos Cyberoam CR100iNG UTM appliance with firmware 10.6.3 MR-1 build 503, CR35iNG UTM appliance with firmware 10.6.2 MR-1 build 383, and CR35iNG UTM appliance with firmware 10.6.2 Build 378 allow remote attackers to inject arbitrary web scrip...
CVE-2016-3968
CVE-2016-3968 affects Sophos Cyberoam CR100iNG UTM (FW 10.6.3 MR-1 build 503) and CR35iNG UTM (FW 10.6.2 MR-1 build 383, and FW 10.6.2 build 378). The vulnerability is cross-site scripting (XSS) via web parameters in LiveConnections.jsp and LiveConnectionDetail.jsp (specifically ipFamily in LiveC...
Fireware XTM Web UI Open Redirect
================================================================ Fireware XTM Web UI - Open Redirect ================================================================ Information -------------------- Name: Fireware XTM Web UI - Open Redirect Affected Software : Fireware XTM Web UI Affected Version...
Sophos UTM URL Reflected XSS Vulnerability
Sophos UTM is prone to a reflected cross-site scripting XSS vulnerability. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...
Sophos UTM 525 Full Guard Cross Site Scripting
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Advisory ID: SYSS-2016-009 Product: Sophos UTM 525 Full Guard Vendor: Sophos Affected Versions: 9.352-6, 94988 Tested Versions: 9.352-6, 94988 Vulnerability Type: Cross-Site Scripting CWE-79 Risk Level: Medium Solution Status: Fixed Vendor...
app.utm.utoronto.ca XSS vulnerability
Vulnerable URL: https://app.utm.utoronto.ca/utmsubooking/popupCalendar.pl?field=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 16:49 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...
Sophos UTM 'lang' Parameter XSS Vulnerability
Sophos UTM is prone to a cross-site scripting XSS vulnerability. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...
CVE-2016-2046
Cross-site scripting XSS vulnerability in the UserPortal page in SOPHOS UTM before 9.353 allows remote attackers to inject arbitrary web script or HTML via the lang parameter...
CVE-2016-2046
Cross-site scripting XSS vulnerability in the UserPortal page in SOPHOS UTM before 9.353 allows remote attackers to inject arbitrary web script or HTML via the lang parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in the UserPortal page in SOPHOS UTM before 9.353 allows remote attackers to inject arbitrary web script or HTML via the lang parameter...
CVE-2016-2046
Cross-site scripting XSS vulnerability in the UserPortal page in SOPHOS UTM before 9.353 allows remote attackers to inject arbitrary web script or HTML via the lang parameter...
CVE-2016-2046
A concrete XSS vulnerability in Sophos UTM 9 UserPortal: the lang parameter is not properly sanitized, enabling remote injection of arbitrary script/HTML. Affected: Sophos UTM 9 prior to 9.353 (per CVE-2016-2046). Exploitation involves crafting a link the user visits (user interaction required pe...
Sophos UTM 9 Cross Site Scripting
----------- Vendor: ----------- Sophos https://www.sophos.com ----------------------------------------- Affected Products/Versions: ----------------------------------------- Product: Sophos UTM 9 Version: 9.350-12 with pattern version 92405 potentially lower ---------------- Description:...
Fortinet(FortiGate)suspected the presence of the SSH Backdoor influence 4. 0 to 5.0.7 version-bug warning-the black bar safety net
Overview 1 On 1 2 May, twitter user@esizkur published information that the Fortigate exist ssh back door, the impact of the version from 4. 0 to 5. 0. 7, and in the link given in the attached full attack using the code. According to the disclosure of information display, the attacker can use this...
FortiGate OS(飞塔系统) 4.0-5.0.7 SSH 后门
漏洞概述 FortiGate飞塔防火墙采用 ASIC 加速的 UTM 解决方案,可以有效地防御网 络层和内容层的攻击。FortiGate 解决方案能够发现和消除多层的攻击,比如病 毒、蠕虫、入侵、以及 Web 恶意内容等等实时的应用,而不会导致网络性能下降。 北京时间 2016 年 1 月 12 日凌晨四点钟,国外安全研究员在 twitter 上爆料 FortiGate 防火墙存在一个后门,攻击者可以通过这个后门直接获取防火墙控制 权限。...
Octogate UTM 3.0.12 - Admin Interface Directory Traversal
Exploit Title: Octogate UTM Admin Interface Directory Traversal Date: 26.08.2015 Software Link: http://www.octogate.com Exploit Author: Oliver Karow Contact: [email protected] Website: http://www.oliverkarow.de Category: Remote Exploit Affected Products/Versions -------------------------- Produ...
Octogate UTM 3.0.12 - Admin Interface Directory Traversal
Octogate UTM 3.0.12 - Admin Interface Directory Traversal Exploit Title: Octogate UTM Admin Interface Directory Traversal Date: 26.08.2015 Software Link: http://www.octogate.com Exploit Author: Oliver Karow Contact: [email protected] Website: http://www.oliverkarow.de Category: Remote Exploit...
Octogate UTM 3.0.12 - Admin Interface Directory Traversal Vulnerability
Exploit for php platform in category web applications Exploit Title: Octogate UTM Admin Interface Directory Traversal Date: 26.08.2015 Software Link: http://www.octogate.com Exploit Author: Oliver Karow Contact: email protected Website: http://www.oliverkarow.de Category: Remote Exploit Affected...