CVE-2022-35611

A Cross-Site Request Forgery CSRF in MQTTRoute v3.3 and below allows attackers to create and remove dashboards...

EUVD-2019-15808

Malware in sbrugna...

EUVD-2022-38494

Malicious code in bioql PyPI...

EUVD-2022-38493

Malicious code in bioql PyPI...

CVE-2022-35612

A cross-site scripting XSS vulnerability in MQTTRoute v3.3 and below allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the dashboard name text field...

CVE-2022-35612

A cross-site scripting XSS vulnerability in MQTTRoute v3.3 and below allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the dashboard name text field...

CVE-2022-35612

A cross-site scripting XSS vulnerability in MQTTRoute v3.3 and below allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the dashboard name text field...

CVE-2022-35611

A Cross-Site Request Forgery CSRF in MQTTRoute v3.3 and below allows attackers to create and remove dashboards...

Cross site scripting

A cross-site scripting XSS vulnerability in MQTTRoute v3.3 and below allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the dashboard name text field...

PT-2022-22924

Name of the Vulnerable Software and Affected Versions MQTTRoute versions prior to 3.3 Description A Cross-Site Request Forgery CSRF issue allows attackers to create and remove dashboards. Recommendations For versions prior to 3.3, update to a version that includes a fix for this issue. As a...

CVE-2022-35611

CVE-2022-35611 describes a CSRF vulnerability in MQTTRoute v3.3 and earlier, based on evidence from multiple sources (NVD/Red Hat/CNNVD) showing an ability for attackers to create and remove dashboards. The Red Hat entry confirms the issue affects MQTTRoute 3.3 and earlier; the CNNVD entry adds t...

CVE-2022-35611: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery CSRF in MQTTRoute v3.3 and below allows attackers to create and remove dashboards...

CVE-2022-35611

A Cross-Site Request Forgery CSRF in MQTTRoute v3.3 and below allows attackers to create and remove dashboards...

PT-2022-22925

Name of the Vulnerable Software and Affected Versions MQTTRoute versions 3.3 and below Description A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the dashboard name text field. Recommendations For versions 3.3 and...

CVE-2022-35611

A Cross-Site Request Forgery CSRF in MQTTRoute v3.3 and below allows attackers to create and remove dashboards...

CVE-2022-35612

A cross-site scripting XSS vulnerability in MQTTRoute v3.3 and below allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the dashboard name text field...

MQTT Cross-Site Scripting Vulnerability

MQTT Message Queuing Telemetry Transport is an ISO standard ISO/IEC PRF 20922 based on the Publish/Subscribe paradigm of messaging protocols, which works on the TCP/IP family of protocols, and is designed for remote devices with low hardware performance and poor network conditions. It works on th...

CVE-2022-35612

CVE-2022-35612 affects MQTTRoute (versions 3.3 and earlier). The vulnerability is a cross-site scripting (XSS) flaw in which an attacker can inject arbitrary web scripts or HTML through the dashboard name text field. The issue arises in dashboard-name handling and is limited to the client-side in...

CVE-2022-35612: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in MQTTRoute v3.3 and below allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the dashboard name text field...

CVE-2022-35612

A cross-site scripting XSS vulnerability in MQTTRoute v3.3 and below allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the dashboard name text field...