33 matches found
CVE-2024-34582
CVE-2024-34582 影响最新版本的Mozilla和Chrome浏览器、Sunhillo Rici5k及Sureline设备 运行在Sunhillo设备上的最新版本Web服务器容易受到反射型XSS攻击。该漏洞存在于/cgi/usrPasswd.cgi中的useridchange参数内。当用户通过Web服务器的“忘记密码”功能尝试重置密码时，此参数会被复制到HTML标签的值中。 攻击者可以利用此漏洞构造一个请求，如果其他应用程序用户触发了该请求，将导致恶意Javascript代码在用户与该应用程序的浏览器会话上下文中执行。...
Sunhillo SureLine <8.7.0.1.1 - Unauthenticated OS Command Injection
Sunhillo SureLine 8.7.0.1.1 is vulnerable to OS command injection. The /cgi/networkDiag.cgi script directly incorporated user-controllable parameters within a shell command, allowing an attacker to manipulate the resulting command by injecting valid OS command input. The following POST request...
CVE-2024-34582
Sunhillo SureLine through 8.10.0 on RICI 5000 devices allows cgi/usrPasswd.cgi useridchange XSS within the Forgot Password feature...
EUVD-2021-24757
Malware in sbrugna...
EUVD-2024-34882
Malicious code in bioql PyPI...
CVE-2021-36380
Sunhillo SureLine before 8.7.0.1.1 allows Unauthenticated OS Command Injection via shell metacharacters in ipAddr or dnsAddr /cgi/networkDiag.cgi...
CVE-2021-38303
A SQL injection vulnerability exists in Sureline SUREedge Migrator 7.0.7.29360...
Sunhillo SureLine < 8.7.0.1.1 Unauthenticated OS Command Injection (CVE-2021-36380)
The version of Sunhillo SureLine running on the remote host is prior to 8.7.0.1.1. It is, therefore, affected by an unauthenticatd OS command injection vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...
Sunhillo SureLine Web Portal Detection
Binary data sunhillosurelinewebdetect.nbin...
CVE-2024-34582
Sunhillo SureLine through 8.10.0 on RICI 5000 devices allows cgi/usrPasswd.cgi useridchange XSS within the Forgot Password feature...
CVE-2024-34582
Sunhillo SureLine through 8.10.0 on RICI 5000 devices allows cgi/usrPasswd.cgi useridchange XSS within the Forgot Password feature...
CVE-2024-34582
Sunhillo SureLine through 8.10.0 on RICI 5000 devices allows cgi/usrPasswd.cgi useridchange XSS within the Forgot Password feature...
CVE-2024-34582
Sunhillo SureLine on RICI 5000 devices (through 8.10.0) is affected by a cross-site scripting (XSS) vulnerability in the cgi/usrPasswd.cgi userid_change path within the Forgot Password feature. The issue is documented across multiple sources (NVD/Red Hat/EUVD/CVE lists) as a vulnerability in Sunh...
PT-2024-25996 · Sunhillo · Sunhillo Sureline
Name of the Vulnerable Software and Affected Versions: Sunhillo SureLine versions through 8.10.0 Description: The issue allows for cgi/usrPasswd.cgi userid change XSS within the Forgot Password feature. This can be exploited through the /cgi/usrPasswd.cgi endpoint, specifically targeting the user...
Sunhillo SureLine 跨站脚本漏洞
Sunhillo SureLine is a monitoring product from Sunhillo USA. A cross-site scripting vulnerability exists in Sunhillo SureLine RICI 5000 version 8.10.0 and earlier, which stems from the cgi/usrPasswd.cgi useridchange in the Forgot Password function containing cross-site scripting...
Sunhillo SureLine OS Command Injection Vulnerablity
Sunhillo SureLine contains an OS command injection vulnerability that allows an attacker to cause a denial-of-service or utilize the device for persistence on the network via shell metacharacters in ipAddr or dnsAddr in /cgi/networkDiag.cgi...
VulnCheck KEV: CVE-2021-36380
Sunhillo SureLine contains an OS command injection vulnerability that allows an attacker to cause a denial-of-service or utilize the device for persistence on the network via shell metacharacters in ipAddr or dnsAddr in /cgi/networkDiag.cgi...
The vulnerability of the cgi/networkDiag.cgi implementation of the SureLine aircraft monitoring application, which allows a violator to execute arbitrary commands
The vulnerability of the cgi/networkDiag.cgi implementation of the SureLine monitoring application exists because measures are not taken to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands...
Sunhillo SureLine Command Injection (CVE-2021-36380)
A command injection vulnerability exists in Sunhillo SureLine. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...