7 matches found
EUVD-2025-23868
Malicious code in bioql PyPI...
CVE-2025-50740
AutoConnect 1.4.2, an Arduino library, is vulnerable to a cross site scripting xss vulnerability. The AutoConnect web interface /ac/config allows HTML/JS code to be executed via a crafted network SSID...
CVE-2025-50740
AutoConnect 1.4.2, an Arduino library, is vulnerable to a cross site scripting xss vulnerability. The AutoConnect web interface /ac/config allows HTML/JS code to be executed via a crafted network SSID...
PT-2025-32215 · Unknown · Autoconnect
Name of the Vulnerable Software and Affected Versions: AutoConnect version 1.4.2 Description: AutoConnect, an Arduino library, contains a cross-site scripting XSS issue. A crafted network SSID can execute HTML/JS code through the AutoConnect web interface / ac/config. Recommendations: At the...
AutoConnect 安全漏洞
AutoConnect is an Arduino library by the individual developer Hieromon Ikasamo. A security vulnerability exists in AutoConnect version 1.4.2, which stems from the AutoConnect web interface /ac/config that allows execution of HTML/JS code in a specially crafted network SSID, potentially leading to...
CVE-2025-50740: Improper Neutralization of Input During Web Page Generation
AutoConnect 1.4.2, an Arduino library, is vulnerable to a cross site scripting xss vulnerability. The AutoConnect web interface /ac/config allows HTML/JS code to be executed via a crafted network SSID...
CVE-2025-50740
The AutoConnect Arduino library version 1.4.2 is vulnerable to a cross-site scripting (XSS) vulnerability (CWE-79). The root cause is the lack of proper input neutralization in the /_ac/config web interface, which allows for the execution of malicious HTML/JS code via a crafted network SSID . Thi...