CVE-2023-36146

CVE-2023-36146 PoC of CVE-2023-36146 - Multilaser RE 170 Firmware 2.2.6733 Authenticated stored Cross Site Scripting Steps to Reproduce: 1. Log in the equipment via your web browser 2. Go to Security IP Filtering 3. In the "Description" field inject the payload "" 4. Click Add 5. Exploit!...

EUVD-2023-40125

Malicious code in bioql PyPI...

CVE-2023-36146

A Stored Cross-Site Scripting XSS vulnerability was found in Multilaser RE 170 using firmware 2.2.6733...

CVE-2023-36146

A Stored Cross-Site Scripting XSS vulnerability was found in Multilaser RE 170 using firmware 2.2.6733...

CVE-2023-36146

A Stored Cross-Site Scripting XSS vulnerability was found in Multilaser RE 170 using firmware 2.2.6733...

Cross site scripting

A Stored Cross-Site Scripting XSS vulnerability was found in Multilaser RE 170 using firmware 2.2.6733...

PT-2023-25455 · Multilaser · Multilaser Re 170

Name of the Vulnerable Software and Affected Versions: Multilaser RE 170 version 2.2.6733 Description: A Stored Cross-Site Scripting XSS issue was discovered. This type of issue allows attackers to inject malicious scripts into content from otherwise trusted websites, which can lead to unauthoriz...

CVE-2023-36146

A Stored Cross-Site Scripting XSS vulnerability was found in Multilaser RE 170 using firmware 2.2.6733...

CVE-2023-36146

A Stored Cross-Site Scripting XSS vulnerability was found in Multilaser RE 170 using firmware 2.2.6733...

CVE-2023-36146

CVE-2023-36146 affects Multilaser RE 170 firmware 2.2.6733 with a stored XSS in input handling. Connected sources confirm the issue and provide a PoC exploit; PT-Security notes there is no publicly documented fixed version as of their entry. Practical impact is stored XSS via web UI (IP Filtering...