CVE-2023-24497

Cross-site scripting xss vulnerabilities exist in the requestHandlers.js detaildevice functionality of Milesight VPN v2.0.2. A specially-crafted HTTP request can lead to arbitrary Javascript code injection. An attacker can send an HTTP request to trigger these vulnerabilities.This XSS is exploite...

Milesight VPN path traversal vulnerability

Milesight VPN is a web-based VPN monitoring and management platform from Milesight. A path traversal vulnerability exists in Milesight VPN v2.0.2. An attacker can exploit this vulnerability to read arbitrary files via a specially crafted web request...