CVE-2021-41870

An issue was discovered in the firmware update form in Socomec REMOTE VIEW PRO 2.0.41.4. An authenticated attacker can bypass a client-side file-type check and upload arbitrary .php files...

EUVD-2021-28868

Malicious code in bioql PyPI...

CVE-2021-41870

An issue was discovered in the firmware update form in Socomec REMOTE VIEW PRO 2.0.41.4. An authenticated attacker can bypass a client-side file-type check and upload arbitrary .php files...

CVE-2021-41870

An issue was discovered in the firmware update form in Socomec REMOTE VIEW PRO 2.0.41.4. An authenticated attacker can bypass a client-side file-type check and upload arbitrary .php files...

CVE-2021-41871

An issue was discovered in Socomec REMOTE VIEW PRO 2.0.41.4. Improper validation of input into the username field makes it possible to place a stored XSS payload. This is executed if an administrator views the System Event Log...

CVE-2021-41870

An issue was discovered in the firmware update form in Socomec REMOTE VIEW PRO 2.0.41.4. An authenticated attacker can bypass a client-side file-type check and upload arbitrary .php files...

CVE-2021-41871

An issue was discovered in Socomec REMOTE VIEW PRO 2.0.41.4. Improper validation of input into the username field makes it possible to place a stored XSS payload. This is executed if an administrator views the System Event Log...

Input validation

An issue was discovered in Socomec REMOTE VIEW PRO 2.0.41.4. Improper validation of input into the username field makes it possible to place a stored XSS payload. This is executed if an administrator views the System Event Log...

Design/Logic Flaw

An issue was discovered in the firmware update form in Socomec REMOTE VIEW PRO 2.0.41.4. An authenticated attacker can bypass a client-side file-type check and upload arbitrary .php files...

CVE-2021-41871

The CVE-2021-41871 entry describes an issue in Socomec REMOTE VIEW PRO 2.0.41.4 where improper validation of input in the username field allows a stored XSS payload to be executed when an administrator views the System Event Log. The affected product is Socomec REMOTE VIEW PRO; the vulnerability ...

CVE-2021-41871

An issue was discovered in Socomec REMOTE VIEW PRO 2.0.41.4. Improper validation of input into the username field makes it possible to place a stored XSS payload. This is executed if an administrator views the System Event Log...

CVE-2021-41870

An issue was discovered in the firmware update form in Socomec REMOTE VIEW PRO 2.0.41.4. An authenticated attacker can bypass a client-side file-type check and upload arbitrary .php files...

CVE-2021-41870

CVE-2021-41870 affects Socomec REMOTE VIEW PRO firmware 2.0.41.4. An authenticated attacker can bypass the client-side file-type check in the firmware update form and upload arbitrary .php files, enabling potential remote code execution. CVSSv3.1 base score is 8.8 (HIGH); attack vector NETWORK, n...

CVE-2021-41871: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Socomec REMOTE VIEW PRO 2.0.41.4. Improper validation of input into the username field makes it possible to place a stored XSS payload. This is executed if an administrator views the System Event Log...

PT-2021-23442

Name of the Vulnerable Software and Affected Versions Socomec REMOTE VIEW PRO version 2.0.41.4 Description An issue was discovered where improper validation of input into the username field allows for a stored XSS payload. This payload is executed when an administrator views the System Event Log...

PT-2021-23441

Name of the Vulnerable Software and Affected Versions Socomec REMOTE VIEW PRO version 2.0.41.4 Description An issue was discovered in the firmware update form, allowing an authenticated attacker to bypass a client-side file-type check and upload arbitrary .php files. Recommendations For Socomec...