7155 matches found
Boodskap IoT Platform 授权问题漏洞
Boodskap IoT Platform is an IoT platform from Boodskap. A security vulnerability exists in Boodskap IoT Platform version v4.4.9-02, which can be exploited by an attacker to elevate privileges via a crafted request sent to the...
CVE-2022-35134
The CVE-2022-35134 case concerns Boodskap IoT Platform v4.4.9-02, with a cross-site scripting (XSS) vulnerability in the web application. The connected documents identify the affected product/version and attribute the root cause to insufficient input validation and output cleanup across multiple ...
CVE-2022-41550
creationtimestamp| type| source ---|---|--- 2022-10-12 02:26:36+00:00| seen| https://t.me/cibsecurity/51241...
Slackware Linux 15.0 / current php Multiple Vulnerabilities (SSA:2022-273-02)
The version of php installed on the remote host is prior to 7.4.32. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-273-02 advisory. - In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the phar uncompressor code would recursively uncompress quines gzip files,...
CVE-2022-31628
creationtimestamp| type| source ---|---|--- 2022-09-29 02:34:29+00:00| seen| https://t.me/cibsecurity/50642 2022-12-10 16:46:34+00:00| seen| Telegram/jAUppa129BKxw9coRKCXeW1RMaFV8k5G7QJUY8ywJuse9so 2025-05-20 20:41:15+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17082 2026-01-27...
CVE-2022-39835
creationtimestamp| type| source ---|---|--- 2022-09-28 02:36:17+00:00| seen| https://t.me/cibsecurity/50536...
CVE-2022-40757
creationtimestamp| type| source ---|---|--- 2022-09-17 02:35:18+00:00| seen| https://t.me/cibsecurity/50002...
CVE-2022-25688
creationtimestamp| type| source ---|---|--- 2022-09-16 12:45:02+00:00| seen| https://t.me/cibsecurity/49892...
CVE-2022-38814
A stored cross-site scripting XSS vulnerability in the authsettings component of FiberHome AN5506-02-B vRP2521 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the sncfgloid text field...
CVE-2022-38814
A stored cross-site scripting XSS vulnerability in the authsettings component of FiberHome AN5506-02-B vRP2521 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the sncfgloid text field...
Cross site scripting
A stored cross-site scripting XSS vulnerability in the authsettings component of FiberHome AN5506-02-B vRP2521 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the sncfgloid text field...
CVE-2022-38814
FiberHome AN5506-02-B (model vRP2521) contains a stored XSS vulnerability in the auth_settings component. An attacker can inject HTML/script via the sncfg_loid text field to execute arbitrary scripts in the user’s browser. Documented across multiple feeds (NVD/Red Hat/CVE records and PT Security)...
CVE-2022-38814
A stored cross-site scripting XSS vulnerability in the authsettings component of FiberHome AN5506-02-B vRP2521 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the sncfgloid text field...
FiberHome AN5506-02-B 跨站脚本漏洞
The FiberHome AN5506-02-B is an FTTH GPON ONU from FiberHome, China. A security vulnerability exists in FiberHome AN5506-02-B vRP2521, which stems from a stored cross-site scripting XSS vulnerability in the authsettings component. An attacker could exploit this vulnerability to execute arbitrary...
PT-2022-24581 · Fiberhome · Fiberhome An5506-02-B
Name of the Vulnerable Software and Affected Versions: FiberHome AN5506-02-B version vRP2521 Description: A stored cross-site scripting XSS issue in the auth settings component allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the sncfg loid text field...
CVE-2022-40634
creationtimestamp| type| source ---|---|--- 2022-09-13 22:31:45+00:00| seen| https://t.me/cibsecurity/49703 2023-12-02 02:48:28+00:00| seen| https://t.me/arpsyndicate/883...
CVE-2022-40635
creationtimestamp| type| source ---|---|--- 2022-09-13 22:31:41+00:00| seen| https://t.me/cibsecurity/49699 2023-12-02 02:08:10+00:00| seen| https://t.me/arpsyndicate/878 2023-12-02 07:54:50+00:00| published-proof-of-concept| https://t.me/CNArsenal/1632 2024-03-20 05:07:42+00:00| seen|...
CVE-2022-34369
creationtimestamp| type| source ---|---|--- 2022-09-02 22:39:34+00:00| seen| https://t.me/cibsecurity/49260...