Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Securifi Almond devices with firmware before AL1-R201EXP10-L304-W34 and Almond-2015 devices with firmware before AL2-R088M unintentionally omit the X-Frame-Options HTTP header, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site that contains a (1) FRAME, (2) IFRAME, or (3) OBJECT element.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Securifi Almond 输入验证漏洞
Vulnerability Description
Securifi Almond是Securifi公司的一款无线路由器产品。 使用al1-r201exp10-l304-w33及之前版本固件的Securifi Almond设备和使用al2-r088及之前版本固件的Almond-2015设备中存在安全漏洞，该漏洞源于程序忽略了X-Frame-Options HTTP头。远程攻击者可借助包含FRAME、IFRAME或OBJECT元素的特制的Web站点利用该漏洞实施点击劫持攻击。
CVSS Information
N/A
Vulnerability Type
N/A