Filtered by vendor Xunfeng Project
Subscriptions
Filtered by product Xunfeng
Subscriptions
Total
2 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2018-16951 | 1 Xunfeng Project | 1 Xunfeng | 2024-11-21 | N/A |
| xunfeng 0.2.0 allows command execution via CSRF because masscan.py mishandles backquote characters, a related issue to CVE-2018-16832. | ||||
| CVE-2018-16832 | 1 Xunfeng Project | 1 Xunfeng | 2024-11-21 | N/A |
| CSRF in the anti-csrf decorator in xunfeng 0.2.0 allows an attacker to modify the configuration via a Flash file because views/lib/AntiCSRF.py can overwrite the request.host value with the content of the X-Forwarded-Host HTTP header. | ||||
Page 1 of 1.