Intelligence View
⚡ tsecurity.de Intelligence
Peplink NGxxx/LCxxx VPN-Firewall Open Redirect
Input passed via the '_redirect' GET parameter via 'service.cgi' script on various Peplink VPN-Firewall devices is not properly verified before being used to redirect users. This can be exploited to redirect a user to an arbitrary website…
Reagiere als Erste:r — dein Feedback zählt!
Input passed via the '_redirect' GET parameter via 'service.cgi' script on various Peplink VPN-Firewall devices is not properly verified before being used to redirect users. This can be exploited to redirect a user to an arbitrary website e.g. when a user clicks a specially crafted link to the affected script hosted on a trusted domain.
SOCIAL SHARE CARD GENERATOR