CVE-2023-2100

CVE-2023-2100 affects SourceCodester Vehicle Service Management System 1.0. The vulnerability resides in the /admin/report/index.php file where manipulating the date_end parameter triggers a cross-site scripting (XSS) condition. It is a remote exploit with the vulnerability publicly disclosed. Co...

The vulnerability of the lform/net_diagnose component of Delta Electronics’ DX-2100-L1-CN microprogramming system allows a hacker to execute arbitrary commands.

The vulnerability of the lform/netdiagnose component of Delta Electronics’ DX-2100-L1-CN router software exists due to the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

The vulnerability of the web configuration service of Delta Electronics DX-2100-L1-CN microprogrammed router software allows a hacker to execute arbitrary code.

The vulnerability of the web configuration service of Delta Electronics DX-2100-L1-CN microprogrammed router software exists due to the lack of measures taken to protect the web page structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

K52521791: vCMP Cavium Nitrox SSL hardware accelerator vulnerability CVE-2018-5507

Security Advisory Description vCMP guests running on VIPRION 2100, 4200 and 4300 series blades cannot correctly decrypt ciphertext from established SSL sessions with small MTU. CVE-2018-5507 Impact BIG-IP The affected SSL connections are terminated unexpectedly. ARX / BIG-IQ / Enterprise Manager ...

Delta Electronics DX-2100 Series 跨站脚本漏洞

The Delta Electronics DX-2100 Series is a router from Delta Electronics China. A security vulnerability exists in Delta Electronics DX-2100-L1-CN version 1.5.0.10, which is caused due to a security issue in the "net diagnosis" function in the Web Configuration Service, and can be exploited in the...

PT-2023-1546 · Delta Electronics · Dx-2100-L1-Cn

Name of the Vulnerable Software and Affected Versions: Delta Electronics DX-2100-L1-CN affected versions not specified Description: The web configuration service of the affected device contains an authenticated command injection vulnerability. It can be used to execute system commands on the...

CISA Releases Six Industrial Control Systems Advisories

CISA released six Industrial Control Systems ICS advisories on February 2, 2023. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. CISA encourages users and administrators to review the newly released ICS advisories for...

CVE-2022-42140

Delta Electronics DX-2100-L1-CN 2.42 is vulnerable to Command Injection via lform/netdiagnose...

CVE-2022-42141

Delta Electronics DX-2100-L1-CN 2.42 is vulnerable to Cross Site Scripting XSS via lform/urlfilter...

CVE-2022-42140

Delta Electronics DX-2100-L1-CN 2.42 is vulnerable to Command Injection via lform/netdiagnose...

CVE-2022-42141

Delta Electronics DX-2100-L1-CN 2.42 is vulnerable to Cross Site Scripting XSS via lform/urlfilter...

Cross site scripting

Delta Electronics DX-2100-L1-CN 2.42 is vulnerable to Cross Site Scripting XSS via lform/urlfilter...

Command injection

Delta Electronics DX-2100-L1-CN 2.42 is vulnerable to Command Injection via lform/netdiagnose...

PT-2022-26281 · Delta Electronics · Delta Electronics Dx-2100-L1-Cn

Name of the Vulnerable Software and Affected Versions: Delta Electronics DX-2100-L1-CN version 2.42 Description: The issue is related to Cross Site Scripting XSS via lform/urlfilter. This means that an attacker could potentially inject malicious scripts into the website, allowing them to steal us...

PT-2022-6344 · Delta Electronics · Dx-2100-L1-Cn

Name of the Vulnerable Software and Affected Versions: Delta Electronics DX-2100-L1-CN version 2.42 Description: The issue exists due to the lack of neutralization of special elements used in the operating system command by the lform/net diagnose component of the Delta Electronics DX-2100-L1-CN...

CVE-2022-42141

Delta Electronics DX-2100-L1-CN 2.42 is vulnerable to Cross Site Scripting XSS via lform/urlfilter...

CVE-2022-42140

Delta Electronics DX-2100-L1-CN (firmware 2.42) is affected by CVE-2022-42140 due to an OS command injection vulnerability in the lform/net_diagnose component. The Red Hat/CISA entries indicate an authenticated OS command injection via the web configuration service, potentially enabling root comp...

CVE-2022-42141

CVE-2022-42141 affects Delta Electronics DX-2100-L1-CN (v2.42); the issue is Cross Site Scripting (XSS) via the lform/urlfilter component. The available sources confirm XSS without details on a fixed version. The Red Hat and NVD records consistently describe a CXSS vulnerability with medium overa...

Delta Electronics DX-2100-L1-CN 1.5.0.10 Command Injection / XSS

CyberDanube Security Research 20221130-0 ------------------------------------------------------------------------------- title| Multiple Vulnerabilities product| Delta Electronics DX-2100-L1-CN vulnerable version| V1.5.0.10 fixed version| V1.5.0.12 CVE number| - impact| High homepage|...

Code injection

UC-8100A-ME-T System Image: Versions v1.0 to v1.6, UC-2100 System Image: Versions v1.0 to v1.12, UC-2100-W System Image: Versions v1.0 to v 1.12, UC-3100 System Image: Versions v1.0 to v1.6, UC-5100 System Image: Versions v1.0 to v1.4, UC-8100 System Image: Versions v3.0 to v3.5, UC-8100-ME-T...