Lucene search
+L

576 matches found

CNVD
CNVD
added 2022/11/23 12:0 a.m.61 views

Unspecified Vulnerability in Intelbras SG 2404 MR

The Intelbras SG 2404 MR is a switch with network management features from Intelbras, Brazil. A security vulnerability exists in Intelbras SG 2404 MR version 20180928-rel64938. An authenticated attacker can exploit the vulnerability to create an administrator account via a specially crafted user...

7.8CVSS7.4AI score0.0028EPSS
SaveExploits1References1
NVD
NVD
added 2022/11/18 4:15 a.m.24 views

CVE-2022-43308

INTELBRAS SG 2404 MR 20180928-rel64938 allows authenticated attackers to arbitrarily create Administrator accounts via crafted user cookies...

7.8CVSS0.0028EPSS
SaveExploits1References2
Prion
Prion
added 2022/11/18 4:15 a.m.18 views

Code injection

INTELBRAS SG 2404 MR 20180928-rel64938 allows authenticated attackers to arbitrarily create Administrator accounts via crafted user cookies...

4.3CVSS7.4AI score0.0028EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/11/18 12:0 a.m.7 views

Intelbras SG 2404 MR 安全漏洞

The Intelbras SG 2404 MR is a switch with network management features from Intelbras, Brazil. A security vulnerability exists in Intelbras SG 2404 MR version 20180928-rel64938. An authenticated attacker can exploit the vulnerability to create an administrator account via a specially crafted user...

7.8CVSS6.6AI score0.0028EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2022/11/18 12:0 a.m.30 views

CVE-2022-43308

INTELBRAS SG 2404 MR 20180928-rel64938 allows authenticated attackers to arbitrarily create Administrator accounts via crafted user cookies...

7.7AI score0.0028EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2022/11/18 12:0 a.m.7 views

PT-2022-26841 · Intelbras · Intelbras Sg 2404 Mr

Name of the Vulnerable Software and Affected Versions: INTELBRAS SG 2404 MR version 20180928-rel64938 Description: The issue allows authenticated attackers to create Administrator accounts arbitrarily through crafted user cookies. Recommendations: For version 20180928-rel64938, consider restricti...

7.8CVSS7.4AI score0.0028EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2022/11/18 12:0 a.m.6 views

CVE-2022-43308

INTELBRAS SG 2404 MR 20180928-rel64938 allows authenticated attackers to arbitrarily create Administrator accounts via crafted user cookies...

6.7AI score0.0028EPSS
SaveExploits1References2
CVE
CVE
added 2022/11/18 12:0 a.m.63 views

CVE-2022-43308

Intelbras SG 2404 MR firmware 20180928-rel64938 is affected by CVE-2022-43308. An authenticated attacker can arbitrarily create Administrator accounts via crafted user cookies, enabling full admin access. CVSSv3.1 metrics in the provided records indicate a HIGH impact (C/H/I/A) with LOCAL attack ...

7.8CVSS7.4AI score0.0028EPSS
SaveExploits1References2Affected Software1
Packet Storm
Packet Storm
added 2022/10/14 12:0 a.m.138 views

Intelbras WiFiber 120AC inMesh 1.1-220216 Command Injection

CyberDanube Security Research 20221009-0 ------------------------------------------------------------------------------- title| Authenticated Command Injection product| Intelbras WiFiber 120AC inMesh vulnerable version| 1.1-220216 fixed version| 1-1-220826 CVE number| impact| High homepage|...

0.2AI score
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2022/08/15 7:15 p.m.6 views

CVE-2022-24654

Authenticated stored cross-site scripting XSS vulnerability in "Field Server Address" field in INTELBRAS ATA 200 Firmware 74.19.10.21 allows attackers to inject JavaScript code through a crafted payload...

5.4CVSS6AI score0.00917EPSS
SaveExploits2References4
OSV
OSV
added 2022/08/15 7:15 p.m.4 views

CVE-2022-24654

Authenticated stored cross-site scripting XSS vulnerability in "Field Server Address" field in INTELBRAS ATA 200 Firmware 74.19.10.21 allows attackers to inject JavaScript code through a crafted payload...

5.4CVSS5.8AI score0.00917EPSS
SaveExploits2References3
Prion
Prion
added 2022/08/15 7:15 p.m.15 views

Cross site scripting

Authenticated stored cross-site scripting XSS vulnerability in "Field Server Address" field in INTELBRAS ATA 200 Firmware 74.19.10.21 allows attackers to inject JavaScript code through a crafted payload...

4.9CVSS5.2AI score0.00917EPSS
SaveExploits2References3Affected Software1
CVE
CVE
added 2022/08/15 6:44 p.m.63 views

CVE-2022-24654

Intelbras ATA 200 firmware 74.19.10.21 is affected by an authenticated stored XSS vulnerability in the Field Server Address field. The issue allows injection of JavaScript via a crafted payload after login (PoC exists in the linked materials). Exploitation requires authentication, and the vulnera...

5.4CVSS5.1AI score0.00917EPSS
SaveExploits2References2Affected Software1
Cvelist
Cvelist
added 2022/08/15 6:44 p.m.33 views

CVE-2022-24654

Authenticated stored cross-site scripting XSS vulnerability in "Field Server Address" field in INTELBRAS ATA 200 Firmware 74.19.10.21 allows attackers to inject JavaScript code through a crafted payload...

5.4AI score0.00917EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
added 2022/08/15 12:0 a.m.7 views

PT-2022-16776 · Intelbras · Intelbras Ata 200

Name of the Vulnerable Software and Affected Versions: INTELBRAS ATA 200 Firmware version 74.19.10.21 Description: The issue is an authenticated stored cross-site scripting XSS vulnerability in the "Field Server Address" field. This allows attackers to inject JavaScript code through a crafted...

5.4CVSS5.3AI score0.00917EPSS
SaveExploits2References6
CNNVD
CNNVD
added 2022/08/15 12:0 a.m.9 views

IIntelbras ATA 200 跨站脚本漏洞

Intelbras ATA 200 is a VOIP line adapter for analog telephones from Intelbras, Brazil. It is intended to be integrated between telephone systems. A security vulnerability exists in Intelbras ATA 200 version 74.19.10.21, which originates from the storage of cross-site scripting in the "Field Serve...

5.4CVSS5.5AI score0.00917EPSS
SaveExploits2References4
GithubExploit
GithubExploit
added 2022/08/11 3:6 p.m.7 views

Exploit for Cross-site Scripting in Intelbras Ata_200_Firmware

CVE-2022-24654 PoC of CVE-2022-24654 - INTELBRAS ATA 200 Firm...

5.4CVSS6.5AI score0.00917EPSS
SaveExploits2
Packet Storm
Packet Storm
added 2022/08/11 12:0 a.m.340 views

Intelbras ATA 200 Cross Site Scripting

Exploit Title: Intelbras ATA 200 Authenticated Stored XSS Date: 17/01/2022 Exploit Author: Leonardo Goncalves Vendor Homepage: https://www.intelbras.com/pt-br/adaptador-ip-para-telefones-analogicos-ata-200 Version: Firmware 74.19.10.21 1 Log in the equipment via your web browser 2 Go to Managemen...

7.4AI score
SaveExploits0
Check Point Advisories
Check Point Advisories
added 2021/09/12 12:0 a.m.27 views

Intelbras IWR 3000N Denial of Service (CVE-2019-19996)

A denial-of-service vulnerability exists in Intelbras IWR 3000N. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

7.8CVSS5.1AI score0.01498EPSS
SaveExploits0
Packet Storm
Packet Storm
added 2021/06/09 12:0 a.m.309 views

Intelbras Router RF 301K Cross Site Request Forgery

Exploit Title: Intelbras Router RF 301K - 'DNS Hijacking' Cross-Site Request Forgery CSRF Date: 01/05/2021 Exploit Author: Rodolfo Mariano Version: Firmware 1.1.2-1.1.5 CVE: 2021-32403 Exploit Code: document.forms0.submit;...

6.8CVSS0.4AI score0.02467EPSS
SaveExploits4
Rows per page
Query Builder