CVE-2024-41643

An issue in Arris NVG443B 9.3.0h3d36 allows a physically proximate attacker to execute arbitrary code via the cshell login component...

EUVD-2022-47953

Malicious code in bioql PyPI...

EUVD-2024-54310

Malicious code in bioql PyPI...

CVE-2022-45028

A cross-site scripting XSS vulnerability in Arris NVG443B 9.3.0h3d36 allows attackers to execute arbitrary web scripts or HTML via a crafted POST request sent to /cgi-bin/logs.ha...

CVE-2024-41643

An issue in Arris NVG443B 9.3.0h3d36 allows a physically proximate attacker to execute arbitrary code via the cshell login component...

CVE-2024-41643

The Arris NVG443B gateway, running version 9.3.0h3d36 , is vulnerable to an issue in the cshell login component . A physically proximate attacker can exploit this component to perform arbitrary code execution . Proof-of-concept information was published on March 26, 2025. No specific remediation ...

CVE-2024-41643

An issue in Arris NVG443B 9.3.0h3d36 allows a physically proximate attacker to execute arbitrary code via the cshell login component...

CVE-2024-41643

An issue in Arris NVG443B 9.3.0h3d36 allows a physically proximate attacker to execute arbitrary code via the cshell login component...

CVE-2024-41643: Improper Control of Generation of Code

An issue in Arris NVG443B 9.3.0h3d36 allows a physically proximate attacker to execute arbitrary code via the cshell login component...

ARRIS NVG443B 安全漏洞

The ARRIS NVG443B is a full-featured, high-performance gateway from ARRIS, Inc. A security vulnerability exists in the ARRIS NVG443B version 9.3.0h3d36, which stems from a physical access attack in the cshell login component that could lead to the execution of arbitrary code...

CVE-2022-45028

A cross-site scripting XSS vulnerability in Arris NVG443B 9.3.0h3d36 allows attackers to execute arbitrary web scripts or HTML via a crafted POST request sent to /cgi-bin/logs.ha...

CVE-2022-45028

A cross-site scripting XSS vulnerability in Arris NVG443B 9.3.0h3d36 allows attackers to execute arbitrary web scripts or HTML via a crafted POST request sent to /cgi-bin/logs.ha...

Cross site scripting

A cross-site scripting XSS vulnerability in Arris NVG443B 9.3.0h3d36 allows attackers to execute arbitrary web scripts or HTML via a crafted POST request sent to /cgi-bin/logs.ha...

PT-2022-27378 · Arris · Arris Nvg443B

Name of the Vulnerable Software and Affected Versions: Arris NVG443B version 9.3.0h3d36 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted POST request sent to "/cgi-bin/logs.ha". This enables attackers to potentially manipulate t...

CVE-2022-45028

A cross-site scripting XSS vulnerability in Arris NVG443B 9.3.0h3d36 allows attackers to execute arbitrary web scripts or HTML via a crafted POST request sent to /cgi-bin/logs.ha...

CVE-2022-45028

The CVE-2022-45028 entry concerns Arris NVG443B firmware 9.3.0h3d36. The vulnerability is a cross-site scripting (XSS) flaw that allows an attacker to execute arbitrary web scripts or HTML via a crafted POST to /cgi-bin/logs.ha. Per the connected sources, the impact is browser-execution of attack...

CVE-2022-45028: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in Arris NVG443B 9.3.0h3d36 allows attackers to execute arbitrary web scripts or HTML via a crafted POST request sent to /cgi-bin/logs.ha...

CVE-2022-45028

A cross-site scripting XSS vulnerability in Arris NVG443B 9.3.0h3d36 allows attackers to execute arbitrary web scripts or HTML via a crafted POST request sent to /cgi-bin/logs.ha...