EUVD-2018-20521

Malware in sbrugna...

Synology Web Station Input Validation Error Vulnerability

Synology Web Station is an application that supports the creation of personal web sites by Synology Inc. of Taiwan, China. An input validation error vulnerability exists in Synology Web Station. An attacker could exploit this vulnerability to conduct a phishing attack with the help of a specially...

CVE-2018-8913

Missing custom error page vulnerability in Synology Web Station before 2.1.3-0139 allows remote attackers to conduct phishing attacks via a crafted URL...

Design/Logic Flaw

Missing custom error page vulnerability in Synology Web Station before 2.1.3-0139 allows remote attackers to conduct phishing attacks via a crafted URL...

CVE-2018-8913

Missing custom error page vulnerability in Synology Web Station before 2.1.3-0139 allows remote attackers to conduct phishing attacks via a crafted URL...

CVE-2018-8913

Missing custom error page vulnerability in Synology Web Station before 2.1.3-0139 allows remote attackers to conduct phishing attacks via a crafted URL...

CVE-2018-8913

The vulnerability CVE-2018-8913 affects Synology Web Station prior to version 2.1.3-0139, caused by a missing custom error page. This allows remote attackers to perform phishing attacks using a crafted URL. Impact is phishing capability with partial confidentiality/integrity exposure reported by ...

CVE-2018-8913

Missing custom error page vulnerability in Synology Web Station before 2.1.3-0139 allows remote attackers to conduct phishing attacks via a crafted URL...

PT-2019-11150

Name of the Vulnerable Software and Affected Versions: Synology Web Station versions prior to 2.1.3-0139 Description: The issue allows remote attackers to conduct phishing attacks via a crafted URL, due to a missing custom error page in Synology Web Station. Recommendations: For versions prior to...

CVE-2018-8913: Missing Custom Error Page

Missing custom error page vulnerability in Synology Web Station before 2.1.3-0139 allows remote attackers to conduct phishing attacks via a crafted URL...

xinkaa web station 1.0.3 - Directory Traversal vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/12606/info A vulnerability has been identified in the handling of certain types of requests by Xinkaa WEB Station. Because of this, it is possible for an attacker to gain access to potentially sensitive system files. Read...

xinkaa-adv.txt

Luigi Auriemma Application: Xinkaa WEB Station http://www.xinkaa.com Versions: = 1.0.3 Platforms: Windows Bug: directory traversal Exploitation: remote Date: 18 Feb 2005 Author: Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org 1 Introduction 2 Bug 3 The Code 4 Fix...

xinkaa Web station 1.0.3 - Directory Traversal

xinkaa Web station 1.0.3 - Directory Traversal source: https://www.securityfocus.com/bid/12606/info A vulnerability has been identified in the handling of certain types of requests by Xinkaa WEB Station. Because of this, it is possible for an attacker to gain access to potentially sensitive syste...

xinkaa Web station 1.0.3 - Directory Traversal

source: https://www.securityfocus.com/bid/12606/info A vulnerability has been identified in the handling of certain types of requests by Xinkaa WEB Station. Because of this, it is possible for an attacker to gain access to potentially sensitive system files. Read privileges granted to these files...