CVE-2022-24654

CVE-2022-24654 CVE-2022-24654 的 PoC —— INTELBRAS ATA 200 固件 74.19.10.21 认证后存储型跨站脚本（XSS） 复现步骤： 1. 通过 Web 浏览器登录设备 2. 进入 Management Syslog 3. 在“Field Server Address”字段中注入载荷 "-prompt"XSS"-" 4. 点击保存 5. 利用成功！...

EUVD-2022-29529

Malicious code in bioql PyPI...

CVE-2022-24654

Authenticated stored cross-site scripting XSS vulnerability in "Field Server Address" field in INTELBRAS ATA 200 Firmware 74.19.10.21 allows attackers to inject JavaScript code through a crafted payload...

CVE-2022-24654

Authenticated stored cross-site scripting XSS vulnerability in "Field Server Address" field in INTELBRAS ATA 200 Firmware 74.19.10.21 allows attackers to inject JavaScript code through a crafted payload...

CVE-2022-24654

Authenticated stored cross-site scripting XSS vulnerability in "Field Server Address" field in INTELBRAS ATA 200 Firmware 74.19.10.21 allows attackers to inject JavaScript code through a crafted payload...

Cross site scripting

Authenticated stored cross-site scripting XSS vulnerability in "Field Server Address" field in INTELBRAS ATA 200 Firmware 74.19.10.21 allows attackers to inject JavaScript code through a crafted payload...

CVE-2022-24654

Intelbras ATA 200 firmware 74.19.10.21 is affected by an authenticated stored XSS vulnerability in the Field Server Address field. The issue allows injection of JavaScript via a crafted payload after login (PoC exists in the linked materials). Exploitation requires authentication, and the vulnera...

CVE-2022-24654

Authenticated stored cross-site scripting XSS vulnerability in "Field Server Address" field in INTELBRAS ATA 200 Firmware 74.19.10.21 allows attackers to inject JavaScript code through a crafted payload...

IIntelbras ATA 200 跨站脚本漏洞

Intelbras ATA 200 is a VOIP line adapter for analog telephones from Intelbras, Brazil. It is intended to be integrated between telephone systems. A security vulnerability exists in Intelbras ATA 200 version 74.19.10.21, which originates from the storage of cross-site scripting in the "Field Serve...

PT-2022-16776 · Intelbras · Intelbras Ata 200

Name of the Vulnerable Software and Affected Versions: INTELBRAS ATA 200 Firmware version 74.19.10.21 Description: The issue is an authenticated stored cross-site scripting XSS vulnerability in the "Field Server Address" field. This allows attackers to inject JavaScript code through a crafted...

Exploit for Cross-site Scripting in Intelbras Ata_200_Firmware

CVE-2022-24654 PoC of CVE-2022-24654 - INTELBRAS ATA 200 Firm...

Intelbras ATA 200 Cross Site Scripting

Exploit Title: Intelbras ATA 200 Authenticated Stored XSS Date: 17/01/2022 Exploit Author: Leonardo Goncalves Vendor Homepage: https://www.intelbras.com/pt-br/adaptador-ip-para-telefones-analogicos-ata-200 Version: Firmware 74.19.10.21 1 Log in the equipment via your web browser 2 Go to Managemen...