64 matches found
EUVD-2020-13002
Malware in sbrugna...
EUVD-2018-11796
Malware in sbrugna...
EUVD-2018-11794
Malware in sbrugna...
EUVD-2017-11155
Malware in sbrugna...
EUVD-2019-13583
Malware in sbrugna...
EUVD-2019-13586
Malware in sbrugna...
EUVD-2019-13550
Malware in sbrugna...
EUVD-2020-13052
Malware in sbrugna...
EUVD-2018-11795
Malware in sbrugna...
EUVD-2019-6141
Malware in sbrugna...
EUVD-2020-13041
Malware in sbrugna...
EUVD-2019-5222
Malware in sbrugna...
EUVD-2022-48212
Malicious code in bioql PyPI...
The vulnerability of the RouterOS operating system for MikroTik routers, related to insufficient validation of input data, allows attackers to carry out cross-site scripting attacks.
The vulnerability of the RouterOS operating system for MikroTik routers is related to insufficient validation of input data when processing the dst parameter. Exploiting this vulnerability allows a malicious actor to perform domain-based scenario attacks remotely...
CVE-2025-6563
MikroTik RouterOS has a cross-site scripting (XSS) vulnerability in the hotspot component for versions below 7.19.2. The issue stems from improper handling of the destination URL parameter (dst), allowing an attacker to inject a javascript: payload. When a user visits the crafted login URL and au...
CVE-2025-6563 Cross-site scripting via dst parameter in RouterOS WiFi hotspot
A cross-site scripting vulnerability is present in the hotspot of MikroTik's RouterOS on versions below 7.19.2. An attacker can inject the javascript protocol in the dst parameter. When the victim browses to the malicious URL and logs in, the XSS executes. The POST request used to login, can also...
CVE-2025-6563 Cross-site scripting via dst parameter in RouterOS WiFi hotspot
A cross-site scripting vulnerability is present in the hotspot of MikroTik's RouterOS on versions below 7.19.2. An attacker can inject the javascript protocol in the dst parameter. When the victim browses to the malicious URL and logs in, the XSS executes. The POST request used to login, can also...
CVE-2023-30799
MikroTik RouterOS stable before 6.49.7 and long-term through 6.48.6 are vulnerable to a privilege escalation issue. A remote and authenticated attacker can escalate privileges from admin to super-admin on the Winbox or HTTP interface. The attacker can abuse this vulnerability to execute arbitrary...
CVE-2022-36522
Mikrotik RouterOs through stable v6.48.3 was discovered to contain an assertion failure in the component /advanced-tools/nova/bin/netwatch. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted packet...
CVE-2022-45313
Mikrotik RouterOs before stable v7.5 was discovered to contain an out-of-bounds read in the hotspot process. This vulnerability allows attackers to execute arbitrary code via a crafted nova message...