17 matches found
CVE-2024-41643
An issue in Arris NVG443B 9.3.0h3d36 allows a physically proximate attacker to execute arbitrary code via the cshell login component...
EUVD-2022-47953
Malicious code in bioql PyPI...
EUVD-2024-54310
Malicious code in bioql PyPI...
CVE-2022-45028
A cross-site scripting XSS vulnerability in Arris NVG443B 9.3.0h3d36 allows attackers to execute arbitrary web scripts or HTML via a crafted POST request sent to /cgi-bin/logs.ha...
CVE-2024-41643
An issue in Arris NVG443B 9.3.0h3d36 allows a physically proximate attacker to execute arbitrary code via the cshell login component...
CVE-2024-41643
An issue in Arris NVG443B 9.3.0h3d36 allows a physically proximate attacker to execute arbitrary code via the cshell login component...
ARRIS NVG443B 安全漏洞
The ARRIS NVG443B is a full-featured, high-performance gateway from ARRIS, Inc. A security vulnerability exists in the ARRIS NVG443B version 9.3.0h3d36, which stems from a physical access attack in the cshell login component that could lead to the execution of arbitrary code...
CVE-2024-41643
CVE-2024-41643 is associated with Arris NVG443B firmware 9.3.0h3d36. The vulnerability allows a physically proximate attacker to execute arbitrary code via the cshell login component. The CVSS 3.1 base score is 6.8 (MEDIUM), with high impact to confidentiality, integrity, and availability, and an...
CVE-2024-41643
An issue in Arris NVG443B 9.3.0h3d36 allows a physically proximate attacker to execute arbitrary code via the cshell login component...
CVE-2022-45028
A cross-site scripting XSS vulnerability in Arris NVG443B 9.3.0h3d36 allows attackers to execute arbitrary web scripts or HTML via a crafted POST request sent to /cgi-bin/logs.ha...
CVE-2022-45028
A cross-site scripting XSS vulnerability in Arris NVG443B 9.3.0h3d36 allows attackers to execute arbitrary web scripts or HTML via a crafted POST request sent to /cgi-bin/logs.ha...
Cross site scripting
A cross-site scripting XSS vulnerability in Arris NVG443B 9.3.0h3d36 allows attackers to execute arbitrary web scripts or HTML via a crafted POST request sent to /cgi-bin/logs.ha...
PT-2022-27378 · Arris · Arris Nvg443B
Name of the Vulnerable Software and Affected Versions: Arris NVG443B version 9.3.0h3d36 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted POST request sent to "/cgi-bin/logs.ha". This enables attackers to potentially manipulate t...
CVE-2022-45028
The CVE-2022-45028 entry concerns Arris NVG443B firmware 9.3.0h3d36. The vulnerability is a cross-site scripting (XSS) flaw that allows an attacker to execute arbitrary web scripts or HTML via a crafted POST to /cgi-bin/logs.ha. Per the connected sources, the impact is browser-execution of attack...
CVE-2022-45028
A cross-site scripting XSS vulnerability in Arris NVG443B 9.3.0h3d36 allows attackers to execute arbitrary web scripts or HTML via a crafted POST request sent to /cgi-bin/logs.ha...
CVE-2022-45028
A cross-site scripting XSS vulnerability in Arris NVG443B 9.3.0h3d36 allows attackers to execute arbitrary web scripts or HTML via a crafted POST request sent to /cgi-bin/logs.ha...
ARRIS NVG443B 跨站脚本漏洞
The ARRIS NVG443B is a full-featured, high-performance gateway from ARRIS America. A security vulnerability exists in the ARRIS NVG443B version 9.3.0h3d36, which stems from the presence of cross-site scripting XSS that allows an attacker to execute arbitrary web script or HTML via a specially...