EUVD-2019-16073

Malware in sbrugna...

EUVD-2019-16075

Malware in sbrugna...

CVE-2019-6516

An issue was discovered in WSO2 Dashboard Server 2.0.0. It is possible to force the application to perform requests to the internal workstation port-scanning and to perform requests to adjacent workstations network-scanning, aka SSRF...

CVE-2019-6514

An issue was discovered in WSO2 Dashboard Server 2.0.0. It is possible to inject a JavaScript payload that will be stored in the database and then displayed and executed on the same page, aka XSS...

CVE-2019-6514

An issue was discovered in WSO2 Dashboard Server 2.0.0. It is possible to inject a JavaScript payload that will be stored in the database and then displayed and executed on the same page, aka XSS...

Server side request forgery (ssrf)

An issue was discovered in WSO2 Dashboard Server 2.0.0. It is possible to force the application to perform requests to the internal workstation port-scanning and to perform requests to adjacent workstations network-scanning, aka SSRF...

CVE-2019-6516

An issue was discovered in WSO2 Dashboard Server 2.0.0. It is possible to force the application to perform requests to the internal workstation port-scanning and to perform requests to adjacent workstations network-scanning, aka SSRF...

CVE-2019-6516

CVE-2019-6516 affects WSO2 Dashboard Server 2.0.0. It enables an SSRF flaw where an attacker can coerce the application to make requests to internal workstations (port-scanning) and to adjacent systems (network-scanning). Root cause described as server-side request forgery in the affected compone...

PT-2019-18132

Name of the Vulnerable Software and Affected Versions WSO2 Dashboard Server version 2.0.0 Description An issue was discovered that allows injection of a JavaScript payload, which will be stored in the database and then displayed and executed on the same page. Recommendations For WSO2 Dashboard...

PT-2019-18134

Name of the Vulnerable Software and Affected Versions WSO2 Dashboard Server version 2.0.0 Description An issue allows the application to be forced into performing requests to the internal workstation, effectively allowing port-scanning, and to adjacent workstations, enabling network-scanning...

CVE-2019-6514: Improper Neutralization of Input During Web Page Generation

An issue was discovered in WSO2 Dashboard Server 2.0.0. It is possible to inject a JavaScript payload that will be stored in the database and then displayed and executed on the same page, aka XSS...

CVE-2019-6516: Server-Side Request Forgery (SSRF)

An issue was discovered in WSO2 Dashboard Server 2.0.0. It is possible to force the application to perform requests to the internal workstation port-scanning and to perform requests to adjacent workstations network-scanning, aka SSRF...