20 matches found
CVE-2024-41643
An issue in Arris NVG443B 9.3.0h3d36 allows a physically proximate attacker to execute arbitrary code via the cshell login component...
EUVD-2024-54310
Malicious code in bioql PyPI...
EUVD-2022-47953
Malicious code in bioql PyPI...
CVE-2022-45028
A cross-site scripting XSS vulnerability in Arris NVG443B 9.3.0h3d36 allows attackers to execute arbitrary web scripts or HTML via a crafted POST request sent to /cgi-bin/logs.ha...
CVE-2024-41643
An issue in Arris NVG443B 9.3.0h3d36 allows a physically proximate attacker to execute arbitrary code via the cshell login component...
PT-2025-12985
Name of the Vulnerable Software and Affected Versions Arris NVG443B version 9.3.0h3d36 Description The issue allows a physically proximate attacker to execute arbitrary code via the cshell login component. Recommendations For Arris NVG443B version 9.3.0h3d36, consider disabling the cshell login...
CVE-2024-41643
An issue in Arris NVG443B 9.3.0h3d36 allows a physically proximate attacker to execute arbitrary code via the cshell login component...
ARRIS NVG443B 安全漏洞
The ARRIS NVG443B is a full-featured, high-performance gateway from ARRIS, Inc. A security vulnerability exists in the ARRIS NVG443B version 9.3.0h3d36, which stems from a physical access attack in the cshell login component that could lead to the execution of arbitrary code...
CVE-2024-41643
An issue in Arris NVG443B 9.3.0h3d36 allows a physically proximate attacker to execute arbitrary code via the cshell login component...
CVE-2024-41643
The Arris NVG443B gateway, specifically version 9.3.0h3d36 , contains a security vulnerability in its cshell login component . This issue, categorized as CWE-94 (Improper Control of Generation of Code), allows a physically proximate attacker to achieve arbitrary code execution . The vulnerability...
CVE-2024-41643: Improper Control of Generation of Code
An issue in Arris NVG443B 9.3.0h3d36 allows a physically proximate attacker to execute arbitrary code via the cshell login component...
CVE-2022-45028
A cross-site scripting XSS vulnerability in Arris NVG443B 9.3.0h3d36 allows attackers to execute arbitrary web scripts or HTML via a crafted POST request sent to /cgi-bin/logs.ha...
CVE-2022-45028
A cross-site scripting XSS vulnerability in Arris NVG443B 9.3.0h3d36 allows attackers to execute arbitrary web scripts or HTML via a crafted POST request sent to /cgi-bin/logs.ha...
Cross site scripting
A cross-site scripting XSS vulnerability in Arris NVG443B 9.3.0h3d36 allows attackers to execute arbitrary web scripts or HTML via a crafted POST request sent to /cgi-bin/logs.ha...
ARRIS NVG443B 跨站脚本漏洞
The ARRIS NVG443B is a full-featured, high-performance gateway from ARRIS America. A security vulnerability exists in the ARRIS NVG443B version 9.3.0h3d36, which stems from the presence of cross-site scripting XSS that allows an attacker to execute arbitrary web script or HTML via a specially...
CVE-2022-45028
A cross-site scripting XSS vulnerability in Arris NVG443B 9.3.0h3d36 allows attackers to execute arbitrary web scripts or HTML via a crafted POST request sent to /cgi-bin/logs.ha...
PT-2022-27378 · Arris · Arris Nvg443B
Name of the Vulnerable Software and Affected Versions: Arris NVG443B version 9.3.0h3d36 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted POST request sent to "/cgi-bin/logs.ha". This enables attackers to potentially manipulate t...
CVE-2022-45028: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability in Arris NVG443B 9.3.0h3d36 allows attackers to execute arbitrary web scripts or HTML via a crafted POST request sent to /cgi-bin/logs.ha...
CVE-2022-45028
The CVE-2022-45028 entry concerns Arris NVG443B firmware 9.3.0h3d36. The vulnerability is a cross-site scripting (XSS) flaw that allows an attacker to execute arbitrary web scripts or HTML via a crafted POST to /cgi-bin/logs.ha. Per the connected sources, the impact is browser-execution of attack...