Cassia Gateway Firmware - Remote Code Execution

In Cassia Gateway firmware XC10002.1.1.2303082218 and XC20002.1.1.2303090947, the queueUrl parameter in /bypass/config is not sanitized. This leads to injecting Bash code and executing it with root privileges on device startup. id: CVE-2023-31446 info: name: Cassia Gateway Firmware - Remote Code...

CVE-2023-31445-Unprivileged-Information-Disclosure

CVE-2023-31445-Unprivileged-Information-Disclosure Repository contains description for CVE-2023-31445 discovered by Dodge Industrial Team for Dodge OPTIFY platfrom. CVE ID: CVE-2023-31445 Vendor: Cassia Networks Product: Access Controller Version: Cassia-AC-2.1.1.2203171453 Vulnerability:...

CVE-2023-31446-Remote-Code-Execution

CVE-2023-31446-Remote-Code-Execution Repository contains description for CVE-2023-31446 discovered by Dodge Industrial Team for Dodge OPTIFY platfrom. CVE ID: CVE-2023-31446 Vendor: Cassia Networks Product: Cassia Gateway Firmware Version: http:///bypass/config?type=sqs&keyId=&key=&queueUrl= Base...

CVE-2023-35793-CSRF-On-Web-SSH

CVE-2023-35793-CSRF-On-Web-SSH Repository contains description for CVE-2023-35793 discovered by Dodge Industrial Team for Dodge OPTIFY platfrom. CVE ID: CVE-2023-35793 Vendor: Cassia Networks Product: Access Controller Version: Cassia-AC-2.1.1.2303271039 Vulnerability: Cross Site Request Forgery...

CVE-2023-35794-WebSSH-Hijacking

CVE-2023-35794-WebSSH-Hijacking Repository contains description for CVE-2023-35794 discovered by Dodge Industrial Team for Dodge OPTIFY platfrom. CVE ID: CVE-2023-35794 Vendor: Cassia Networks Product: Access Controller Version: Cassia-AC-2.1.1.2303271039 Vulnerability: Incorrect Access Control...

Cassia Bluetooth Gateway Panel - Detect

Cassia Bluetooth Gateway Management Platform login page was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Cassia Bluetooth Gateway Management Platform login page was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

cassia-rag (0.1.4), gptparse (>=0.1.0, <=0.3.0) +1 more potentially affected by CVE-2026-55443 via langchain-anthropic (0.2.3)

langchain-anthropic PYPI version 0.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-anthropic and may be impacted: - cassia-rag 0.1.4 - gptparse =0.1.0, =0.3.0 - supercontrast 0.0.2 Source cves: CVE-2026-55443 Source advisory:...

act-workflow (>=4.8.2, <=4.8.399), agent-builder (0.0.1) +11 more potentially affected by CVE-2026-55443 via langchain (0.3.3)

langchain PYPI version 0.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - act-workflow =4.8.2, =0.0.320, =0.0.4rc1, =0.1.0, =4.2.1, =0.1.6, =0.4.16, =0.4.15, =0.5.0, =0.5.1 Source cves: CVE-2026-55443 Source advisory...

cassia-rag (0.1.4), gptparse (>=0.1.0, <=0.3.0) +1 more potentially affected by CVE-2026-55443 via langchain-anthropic (0.2.3)

langchain-anthropic PYPI version 0.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-anthropic and may be impacted: - cassia-rag 0.1.4 - gptparse =0.1.0, =0.3.0 - supercontrast 0.0.2 Source cves: CVE-2026-55443 Source advisory:...

act-workflow (>=4.8.2, <=4.8.399), agent-builder (0.0.1) +13 more potentially affected by CVE-2026-41488 via langchain-openai (0.2.2)

langchain-openai PYPI version 0.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - act-workflow =4.8.2, =0.1.5, =0.0.1, =0.1.0, =0.4.16, =0.4.15, =0.5.0, =0.5.1 Source cves: CVE-2026-41488 Source advisory:...

agent-builder (0.0.1), cassia-rag (0.1.4) +2 more potentially affected by CVE-2026-34070 via langchain-core (0.3.10)

langchain-core PYPI version 0.3.10 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - agent-builder 0.0.1 - cassia-rag 0.1.4 - lazym =0.1.0, =4.2.1, =4.3.14 Source cves: CVE-2026-34070 Source advisory:...

agent-builder (0.0.1), cassia-rag (0.1.4) +2 more potentially affected by CVE-2026-26013 via langchain-core (0.3.10)

langchain-core PYPI version 0.3.10 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - agent-builder 0.0.1 - cassia-rag 0.1.4 - lazym =0.1.0, =4.2.1, =4.3.14 Source cves: CVE-2026-26013 Source advisory:...

CVE-2023-31446

In Cassia Gateway firmware XC10002.1.1.2303082218 and XC20002.1.1.2303090947, the queueUrl parameter in /bypass/config is not sanitized. This leads to injecting Bash code and executing it with root privileges on device startup...

CVE-2021-22685

An attacker may be able to use minify route with a relative path to view any file on the Cassia Networks Access Controller prior to 2.0.1...

EUVD-2021-9821

Malicious code in bioql PyPI...

CVE-2023-31445

Cassia Access controller before 2.1.1.2203171453, was discovered to have a unprivileged -information disclosure vulnerability that allows read-only users have the ability to enumerate all other users and discover e-mail addresses, phone numbers, and privileges of all other users...

Cassia X1000 Code Execution

The vulnerability of the corporate Bluetooth gateway Cassia X1000 is related to the lack of measures taken to secure data at the management level. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with root privileges using the queueUrl parameter in /bypass/conf...

CVE-2023-31446

In Cassia Gateway firmware XC10002.1.1.2303082218 and XC20002.1.1.2303090947, the queueUrl parameter in /bypass/config is not sanitized. This leads to injecting Bash code and executing it with root privileges on device startup...

CVE-2023-31446

In Cassia Gateway firmware XC10002.1.1.2303082218 and XC20002.1.1.2303090947, the queueUrl parameter in /bypass/config is not sanitized. This leads to injecting Bash code and executing it with root privileges on device startup...

Code injection

In Cassia Gateway firmware XC10002.1.1.2303082218 and XC20002.1.1.2303090947, the queueUrl parameter in /bypass/config is not sanitized. This leads to injecting Bash code and executing it with root privileges on device startup...