PT-2017-9762 · Moxa · Moxa Awk-3131A Wireless Access Point

Name of the Vulnerable Software and Affected Versions: Moxa AWK-3131A Wireless Access Point version 1.1 Description: An exploitable HTTP Header Injection issue exists in the Web Application functionality. A specially crafted HTTP request can inject a payload in the bkpath parameter, which will be...

PT-2017-9764 · Moxa · Awk-3131A Series

Name of the Vulnerable Software and Affected Versions: Moxa AWK-3131A Series Industrial IEEE 802.11a/b/g/n wireless AP/bridge/client affected versions not specified Description: An Information Disclosure issue exists in the Web Application functionality, allowing an attacker to retrieve sensitive...

CVE-2016-8718

An exploitable Cross-Site Request Forgery vulnerability exists in the Web Application functionality of Moxa AWK-3131A Wireless Access Point running firmware 1.1. A specially crafted form can trick a client into making an unintentional request to the web server which will be treated as an authenti...

CVE-2016-8719

An exploitable reflected Cross-Site Scripting vulnerability exists in the Web Application functionality of Moxa AWK-3131A Wireless Access Point running firmware 1.1. Specially crafted input, in multiple parameters, can cause a malicious scripts to be executed by a victim...

Cross site request forgery (csrf)

An exploitable Cross-Site Request Forgery vulnerability exists in the Web Application functionality of Moxa AWK-3131A Wireless Access Point running firmware 1.1. A specially crafted form can trick a client into making an unintentional request to the web server which will be treated as an authenti...

CVE-2016-8719

An exploitable reflected Cross-Site Scripting vulnerability exists in the Web Application functionality of Moxa AWK-3131A Wireless Access Point running firmware 1.1. Specially crafted input, in multiple parameters, can cause a malicious scripts to be executed by a victim...

Cross site scripting

An exploitable reflected Cross-Site Scripting vulnerability exists in the Web Application functionality of Moxa AWK-3131A Wireless Access Point running firmware 1.1. Specially crafted input, in multiple parameters, can cause a malicious scripts to be executed by a victim...

CVE-2016-8718

An exploitable Cross-Site Request Forgery vulnerability exists in the Web Application functionality of Moxa AWK-3131A Wireless Access Point running firmware 1.1. A specially crafted form can trick a client into making an unintentional request to the web server which will be treated as an authenti...

CVE-2016-8716

An exploitable Cleartext Transmission of Password vulnerability exists in the Web Application functionality of Moxa AWK-3131A Wireless Access Point running firmware 1.1. The Change Password functionality of the Web Application transmits the password in cleartext. An attacker capable of intercepti...

CVE-2016-8716

An exploitable Cleartext Transmission of Password vulnerability exists in the Web Application functionality of Moxa AWK-3131A Wireless Access Point running firmware 1.1. The Change Password functionality of the Web Application transmits the password in cleartext. An attacker capable of intercepti...

CVE-2016-8718

An exploitable Cross-Site Request Forgery vulnerability exists in the Web Application functionality of Moxa AWK-3131A Wireless Access Point running firmware 1.1. A specially crafted form can trick a client into making an unintentional request to the web server which will be treated as an authenti...

CVE-2016-8719

An exploitable reflected Cross-Site Scripting vulnerability exists in the Web Application functionality of Moxa AWK-3131A Wireless Access Point running firmware 1.1. Specially crafted input, in multiple parameters, can cause a malicious scripts to be executed by a victim...

CVE-2016-8719

The CVE-2016-8719 entry concerns a reflected Cross‑Site Scripting (XSS) vulnerability in the Web Application of the Moxa AWK-3131A Wireless Access Point (firmware 1.1). Multiple input parameters in the web UI can be injected with malicious scripts, which can be executed in a victim’s browser. Rep...

CVE-2016-8718

CVE-2016-8718 affects the Moxa AWK-3131A Wireless Access Point (firmware 1.1). The vulnerability is a Cross-Site Request Forgery (CSRF) in the device’s Web Application, where a specially crafted form can trigger an action on behalf of an authenticated user without their awareness. Exploitation ca...

Moderate: Red Hat Security Advisory: cfme, cfme-appliance, and cfme-gemset security, bug fix, and enhancement update

An update for cfme, cfme-appliance, and cfme-gemset is now available for CloudForms Management Engine 5.7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

llewellyn.com XSS vulnerability

Vulnerable URL: http://www.llewellyn.com/searchresults.php?searchtopic=%22%3E%3Cscript%3Eeval%27a%27%2B%27lert%27OPENBUGBOUNTY%3B%3C%2Fscript%3E%3Cinput+%22type=in+Productscategory=products=1go.x=0go.y=0 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017...

PT-2017-9761 · Moxa · Moxa Awk-3131A Wireless Access Point

Name of the Vulnerable Software and Affected Versions: Moxa AWK-3131A Wireless Access Point version 1.1 Description: A reflected Cross-Site Scripting issue exists in the Web Application functionality. Specially crafted input in multiple parameters can cause malicious scripts to be executed by a...

PT-2017-9760 · Moxa · Moxa Awk-3131A Wireless Access Point

Name of the Vulnerable Software and Affected Versions: Moxa AWK-3131A Wireless Access Point version 1.1 Description: A Cross-Site Request Forgery issue exists in the Web Application functionality. It allows a specially crafted form to trick a client into making an unintentional request to the web...

PT-2017-9759 · Moxa · Moxa Awk-3131A Wireless Access Point

Name of the Vulnerable Software and Affected Versions: Moxa AWK-3131A Wireless Access Point version 1.1 Description: A Cleartext Transmission of Password issue exists in the Web Application functionality. The Change Password functionality transmits the password in cleartext, allowing an attacker...

Skyliner: Password reset Token not expiring

Hello Team, Here in this scenario, I've found that the there's a kind of server side side invalidation of Password Reset tokens. Like if I've requested for password reset token token1 and I don't use it, after I will make another request for password reset token token2. This time I'll use the...