Lucene search
+L

11 matches found

Kitploit
Kitploit
added 2026/09/15 5:07 a.m.13 views

MeshCore

MeshCore 소개 MeshCore는 LoRa 및 기타 패킷 무선기를 사용하는 임베디드 프로젝트를 위한 경량의 이식 가능한 C++ 라이브러리입니다. 인터넷 없이도 작동하는 탄력적이고 분산된 통신 네트워크를 만들고자 하는 개발자를 위해 설계되었습니다. 🔍 MeshCore란 무엇인가요? MeshCore는 이제 다양한 LoRa 장치를 지원하여, 수동으로 펌웨어를 컴파일할 필요 없이 쉽게 플래싱할 수 있습니다. 사용자는 Adafruit ESPTool과 같은 도구를 사용하여 사전 빌드된 바이너리를 플래싱하고, 직렬 콘솔을 통해 네트워...

5.9AI score
SaveExploits0References11
RedhatCVE
RedhatCVE
added 2026/05/29 8:13 p.m.23 views

CVE-2026-45323

MeshCore Card provides MeshCore Lovelace card for Home Assistant. Prior to 0.3.3, Meshcore node names are rendered without HTML escaping in meshcore-card, allowing any node within direct or indirect repeated radio range to execute arbitrary javascript in the Home Assistant frontend of anyone...

9.6CVSS6.1AI score0.00317EPSS
SaveExploits1References1
NVD
NVD
added 2026/05/28 6:16 p.m.22 views

CVE-2026-45323

MeshCore Card provides MeshCore Lovelace card for Home Assistant. Prior to 0.3.3, Meshcore node names are rendered without HTML escaping in meshcore-card, allowing any node within direct or indirect repeated radio range to execute arbitrary javascript in the Home Assistant frontend of anyone...

9.6CVSS0.00317EPSS
SaveExploits1References1
EUVD
EUVD
added 2026/05/28 4:54 p.m.21 views

EUVD-2026-32972

MeshCore Card provides MeshCore Lovelace card for Home Assistant. Prior to 0.3.3, Meshcore node names are rendered without HTML escaping in meshcore-card, allowing any node within direct or indirect repeated radio range to execute arbitrary javascript in the Home Assistant frontend of anyone...

9.6CVSS6.1AI score0.00317EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2026/05/28 4:54 p.m.45 views

CVE-2026-45323 MeshCore Card: XSS vulnerability through meshcore node name

MeshCore Card provides MeshCore Lovelace card for Home Assistant. Prior to 0.3.3, Meshcore node names are rendered without HTML escaping in meshcore-card, allowing any node within direct or indirect repeated radio range to execute arbitrary javascript in the Home Assistant frontend of anyone...

9.6CVSS0.00317EPSS
SaveExploits1References1
CVE
CVE
added 2026/05/28 4:54 p.m.142 views

CVE-2026-45323

Summary: CVE-2026-45323 affects MeshCore Card for Home Assistant. Before version 0.3.3, node names in the meshcore-card were rendered without HTML escaping, enabling an attacker within direct or indirect (repeated) radio range to inject arbitrary JavaScript in the Home Assistant frontend of any v...

9.6CVSS6.1AI score0.00317EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2026/05/28 4:54 p.m.11 views

CVE-2026-45323 MeshCore Card: XSS vulnerability through meshcore node name

MeshCore Card provides MeshCore Lovelace card for Home Assistant. Prior to 0.3.3, Meshcore node names are rendered without HTML escaping in meshcore-card, allowing any node within direct or indirect repeated radio range to execute arbitrary javascript in the Home Assistant frontend of anyone...

9.6CVSS6.2AI score
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/05/28 4:54 p.m.16 views

CVE-2026-45323

MeshCore Card provides MeshCore Lovelace card for Home Assistant. Prior to 0.3.3, Meshcore node names are rendered without HTML escaping in meshcore-card, allowing any node within direct or indirect repeated radio range to execute arbitrary javascript in the Home Assistant frontend of anyone...

9.6CVSS6.1AI score0.00317EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/05/28 4:54 p.m.10 views

CVE-2026-45323 MeshCore Card: XSS vulnerability through meshcore node name

MeshCore Card provides MeshCore Lovelace card for Home Assistant. Prior to 0.3.3, Meshcore node names are rendered without HTML escaping in meshcore-card, allowing any node within direct or indirect repeated radio range to execute arbitrary javascript in the Home Assistant frontend of anyone...

9.6CVSS6.1AI score0.00317EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2026/05/28 12:00 a.m.17 views

MeshCore Card 跨站脚本漏洞

The MeshCore Card is a Home Assistant card developed by John Pettitt, designed to display statistical data related to the MeshCore grid network. Versions of the MeshCore Card prior to 0.3.3 contained a cross-site scripting vulnerability. This vulnerability stemmed from the fact that the names of...

9.6CVSS5.9AI score0.00317EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2026/05/28 12:00 a.m.22 views

PT-2026-44460

Name of the Vulnerable Software and Affected Versions MeshCore Card versions prior to 0.3.3 Description MeshCore Card provides a Lovelace card for Home Assistant. Node names are rendered without HTML escaping in the meshcore-card component, which allows any node within direct or indirect radio...

9.6CVSS5.8AI score0.00317EPSS
SaveExploits1References6
Rows per page
Query Builder