100 matches found
CVE-2024-57725
CVE-2024-57725：某些Arcadyan路由器（由Orange和Jazztel分发）中的GPON链路操纵漏洞 本仓库记录了在西班牙Orange和Jazztel分发的LiveboxFibra Arcadyan路由器（PRV3399BBLT）中发现的一个无需认证的漏洞。问题在于能够通过/cgi/cgiauthpage.js和/firstconnection.cgi端点无需认证地提取和修改GPON链路值。 漏洞详情 受影响端点 1. /cgi/cgiauthpage.js 泄露slidvalue参数，该参数包含十六进制格式的GPON链路值。无需认证 即可访问，导致信息泄露。 2...
EUVD-2018-13130
Malware in sbrugna...
EUVD-2018-13131
Malware in sbrugna...
EUVD-2016-1237
Malware in sbrugna...
EUVD-2020-30239
Malware in sbrugna...
EUVD-2020-30240
Malware in sbrugna...
EUVD-2021-25141
Malware in sbrugna...
EUVD-2024-51995
Malicious code in bioql PyPI...
EUVD-2023-47893
Malicious code in bioql PyPI...
EUVD-2024-51994
Malicious code in bioql PyPI...
EUVD-2024-53723
Malicious code in bioql PyPI...
CVE-2024-53561
A remote code execution RCE vulnerability in Arcadyan Meteor 2 CPE FG360 Firmware ETV2.10 allows attackers to execute arbitrary code via a crafted request...
CVE-2024-53563
A stored cross-site scripting XSS vulnerability in Arcadyan Meteor 2 CPE FG360 Firmware ETV2.10 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload...
CVE-2021-38703
Wireless devices running certain Arcadyan-derived firmware such as KPN Experia WiFi 1.00.15 do not properly sanitise user input to the syslog configuration form. An authenticated remote attacker could leverage this to alter the device configuration and achieve remote code execution. This can be...
CVE-2020-9419
Multiple stored cross-site scripting XSS vulnerabilities in Arcadyan Wifi routers VRV9506JAC23 allow remote attackers to inject arbitrary web script or HTML via the hostName and domainname parameters present in the LAN configuration section of the administrative dashboard...
CVE-2020-9420
The login password of the web administrative dashboard in Arcadyan Wifi routers VRV9506JAC23 is sent in cleartext, allowing an attacker to sniff and intercept traffic to learn the administrative credentials to the router...
CVE-2024-57725
An issue in the Arcadyan Livebox Fibra PRV3399BBLT allows a remote or local attacker to modify the GPON link value without authentication, causing an internet service disruption via the /firstconnection.cgi endpoint...
CVE-2024-57725
An issue in the Arcadyan Livebox Fibra PRV3399BBLT allows a remote or local attacker to modify the GPON link value without authentication, causing an internet service disruption via the /firstconnection.cgi endpoint...
Arcadyan Livebox Fibra PRV3399B_B_LT 安全漏洞
Arcadyan Livebox Fibra PRV3399BBLT is a high-performance router for fiber optic broadband users from China Smartech Arcadyan. A security vulnerability exists in the Arcadyan Livebox Fibra PRV3399BBLT, which originated from a vulnerability that allows a remote or local attacker to modify the GPON...
CVE-2024-57725
An issue in the Arcadyan Livebox Fibra PRV3399BBLT allows a remote or local attacker to modify the GPON link value without authentication, causing an internet service disruption via the /firstconnection.cgi endpoint...