Alt-n/MDaemon Security Gateway <=8.5.0 - XML Injection Detection

Alt-n/MDaemon Security Gateway through 8.5.0 is susceptible to XML injection via SecurityGateway.dll?view=login. An attacker can inject an arbitrary XML argument by adding a new parameter in the HTTP request URL. As a result, the XML parser fails the validation process and discloses information...

CVE-2025-2613: Improper Neutralization of Input During Web Page Generation

The Login Manager – Design Login Page, View Login Activity, Limit Login Attempts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Custom logo and background URLs in all versions up to, and including, 2.0.5 due to insufficient input sanitization and output escaping. This makes...

CVE-2022-25356: XML Injection (aka Blind XPath Injection)

Alt-N MDaemon Security Gateway through 8.5.0 allows SecurityGateway.dll?view=login XML Injection...

PT-2022-17235

Name of the Vulnerable Software and Affected Versions Alt-N MDaemon Security Gateway versions prior to 8.5.1 Description The issue allows for XML Injection through the SecurityGateway.dll, specifically when accessing the "view=login" API endpoint. Recommendations For versions prior to 8.5.1, upda...