Malicious Package

Overview lznfjbhurpjsqmr is a malicious package. A copy-paste of the legitimate package global-npm, used by the malicious package gxm-reference-web-auth-server and maintained by the same malicious actor. See gxm-reference-web-auth-server advisory for more information:...

CVE-2020-6823

A malicious extension could have called browser.identity.launchWebAuthFlow, controlling the redirecturi, and through the Promise returned, obtain the Auth code and gain access to the user's account at the service provider. This vulnerability affects Firefox 75...

CVE-2020-6823

A malicious extension could have called browser.identity.launchWebAuthFlow, controlling the redirecturi, and through the Promise returned, obtain the Auth code and gain access to the user's account at the service provider. This vulnerability affects Firefox 75...

KLA10104 CI vulnerability in Cisco NAC Appliance

XSS vulnerabilities were found in the Cisco NAC Appliance. By exploiting this vulnerability malicious users can inject arbitrary web scripts. This vulnerability can be exploited from the network at a point related to web-auth. Original advisories Cisco bulletin Exploitation Related products...

CVE-2012-5991

CVE-2012-5991 affects Cisco Wireless LAN Controller 7.2.110.0. The issue arises from insufficient validation of user-supplied input to the WLC web interface (web_auth_custom.html), enabling remote authenticated users to cause a denial of service (device reload) via a crafted buttonClicked value i...

PT-2012-6220

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller WLC devices version 7.2.110.0 Description A cross-site scripting XSS issue exists, allowing remote authenticated users to inject arbitrary web script or HTML via the headline parameter in the screens/base/web auth...

PT-2012-6219

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller WLC versions 7.2.110.0 Description The issue is related to cross-site request forgery CSRF vulnerabilities. An unauthenticated, remote attacker could exploit this by convincing a targeted user to follow a maliciou...