Lucene search
+L

110 matches found

Nuclei
Nuclei
•added 2026/11/14 2:03 a.m.•16 views

Neterbit NW-431F - Unauthenticated SMS Disclosure

Neterbit NW-431F 20250715 contains an information disclosure vulnerability caused by manipulation in /sms.json of the Embedded Web Server, letting remote attackers access sensitive information, exploit requires no special conditions. id: CVE-2026-108578 info: name: Neterbit NW-431F -...

6.9CVSS5.8AI score0.01467EPSS
SaveExploits1References4
Packet Storm
Packet Storm
•added 2026/10/16 12:00 a.m.•30 views

Neterbit NW-431F 20250715 SMS Information Disclosure

Neterbit NW-431F version 20250715 contains an unauthenticated information disclosure in /sms.json that exposes stored SMS records. The proof of concept retrieves and analyzes the response. https://packetstorm.news/download/236053...

5.8AI score
SaveExploits0
GithubExploit
GithubExploit
•added 2026/10/15 4:33 p.m.•34 views

Exploit for CVE-2026-108578

CVE-2026-108578 — Neterbit NW-431F unauthenticated SMS disclos...

6.9CVSS6.1AI score0.01467EPSS
SaveExploits1
NVD
NVD
•added 2026/10/11 1:17 p.m.•14 views

CVE-2026-108578

A vulnerability was identified in Neterbit NW-431F 20250715. Impacted is an unknown function of the file /sms.json of the component Embedded Web Server. Such manipulation leads to information disclosure. The attack may be launched remotely. The vendor was contacted early about this disclosure but...

6.9CVSS0.01467EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2026/10/11 12:45 p.m.•14 views

CVE-2026-108578 Neterbit NW-431F Embedded Web Server sms.json information disclosure

A vulnerability was identified in Neterbit NW-431F 20250715. Impacted is an unknown function of the file /sms.json of the component Embedded Web Server. Such manipulation leads to information disclosure. The attack may be launched remotely. The vendor was contacted early about this disclosure but...

6.9CVSS5.4AI score0.01467EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2026/10/11 12:45 p.m.•55 views

CVE-2026-108578 Neterbit NW-431F Embedded Web Server sms.json information disclosure

A vulnerability was identified in Neterbit NW-431F 20250715. Impacted is an unknown function of the file /sms.json of the component Embedded Web Server. Such manipulation leads to information disclosure. The attack may be launched remotely. The vendor was contacted early about this disclosure but...

6.9CVSS0.01467EPSS
SaveExploits1References4
EUVD
EUVD
•added 2026/10/11 12:45 p.m.•74 views

EUVD-2026-96927

A vulnerability was identified in Neterbit NW-431F 20250715. Impacted is an unknown function of the file /sms.json of the component Embedded Web Server. Such manipulation leads to information disclosure. The attack may be launched remotely. The vendor was contacted early about this disclosure but...

6.9CVSS5.5AI score0.01467EPSS
SaveExploits1References4
CVE
CVE
•added 2026/10/11 12:45 p.m.•78 views

CVE-2026-108578

A vulnerability exists in the Embedded Web Server component of Neterbit NW-431F 20250715 . Specifically, an unknown function within the /sms.json file allows for information disclosure . This vulnerability can be triggered via a remote attack . No remediation details or specific exploit informati...

6.9CVSS5.4AI score0.01467EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2026/10/11 12:00 a.m.•20 views

PT-2026-110112

Name of the Vulnerable Software and Affected Versions Neterbit NW-431F version 20250715 Description An issue exists in the Embedded Web Server component within the /sms.json file. A remote attacker can manipulate an unknown function in this file to cause information disclosure. Recommendations At...

6.9CVSS5.7AI score0.01467EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/11 12:00 a.m.•16 views

CVE-2026-108578: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability was identified in Neterbit NW-431F 20250715. Impacted is an unknown function of the file /sms.json of the component Embedded Web Server. Such manipulation leads to information disclosure. The attack may be launched remotely. The vendor was contacted early about this disclosure but...

6.9CVSS5.5AI score0.01467EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2026/10/10 4:00 p.m.•17 views

Neterbit NW-431F information leakage vulnerability

Neterbit NW-431F 20250715 version has a security vulnerability. This vulnerability stems from improper handling of the file/sms.json in the Embedded Web Server component, which may lead to information leakage...

6.9CVSS5.8AI score0.01467EPSS
SaveExploits1References4
Snyk
Snyk
•added 2026/06/10 2:30 p.m.•29 views

Malicious Package

Overview nw-demo-utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.4AI score
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2026/06/10 2:30 p.m.•4 views

Malware in nw-demo-utils

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2026/06/10 2:30 p.m.•3 views

Malware in nw-demo

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
osv_mal
osv_mal
•added 2026/06/10 2:30 p.m.•52 views

MAL-2026-5511 Malicious code in nw-demo-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f0c784f9f2bc00678e2648cce9c110ad5084c595b42f80e086bc8dbfbe034359 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

5.5AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/06/10 2:30 p.m.•35 views

Malicious code in nw-demo-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f0c784f9f2bc00678e2648cce9c110ad5084c595b42f80e086bc8dbfbe034359 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

5.5AI score
SaveExploits0References1
Snyk
Snyk
•added 2026/06/10 2:30 p.m.•52 views

Malicious Package

Overview nw-demo is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

9.8CVSS5.4AI score
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/06/05 12:09 a.m.•25 views

CVE-2025-69755

An issue in Neterbit NW-431F Router vNW-431F-20241014-IR03 allows a remote attacker to obtain sensitive information and execute arbitrary code via a crafted command to the atcommand.asp interface...

8.2CVSS6.1AI score0.00464EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/06/05 12:09 a.m.•31 views

CVE-2025-67447

The network diagnosis ping module in Neterbit NW-431F Router 20241014-IR03 and before is vulnerable to OS command injection. The application does not properly sanitize user input in the IP address field before passing it to the system's ping command. An attacker can inject arbitrary OS commands,...

9.8CVSS6AI score0.01026EPSS
SaveExploits0References1
NVD
NVD
•added 2026/06/04 6:16 p.m.•39 views

CVE-2025-69755

An issue in Neterbit NW-431F Router vNW-431F-20241014-IR03 allows a remote attacker to obtain sensitive information and execute arbitrary code via a crafted command to the atcommand.asp interface...

8.2CVSS0.00464EPSS
SaveExploits0References2
Rows per page
Query Builder