CVE-2022-42054

Multiple stored cross-site scripting XSS vulnerabilities in GL.iNet GoodCloud IoT Device Management System Version 1.00.220412.00 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Company Name and Description text fields...

CVE-2022-42055

Multiple command injection vulnerabilities in GL.iNet GoodCloud IoT Device Management System Version 1.00.220412.00 via the ping and traceroute tools allow attackers to read arbitrary files on the system...

EUVD-2022-45145

Malicious code in bioql PyPI...

EUVD-2022-45146

Malicious code in bioql PyPI...

EUVD-2022-47161

Malicious code in bioql PyPI...

CVE-2022-44212

In GL.iNet Goodcloud 1.0, insecure design allows remote attacker to access devices' admin panel...

CVE-2022-44211

In GL.iNet Goodcloud 1.1 Incorrect access control allows a remote attacker to access/change devices' settings...

CVE-2022-44212

In GL.iNet Goodcloud 1.0, insecure design allows remote attacker to access devices' admin panel...

CVE-2022-44211

In GL.iNet Goodcloud 1.1 Incorrect access control allows a remote attacker to access/change devices' settings...

Improper access control

In GL.iNet Goodcloud 1.1 Incorrect access control allows a remote attacker to access/change devices' settings...

Code injection

In GL.iNet Goodcloud 1.0, insecure design allows remote attacker to access devices' admin panel...

GL.iNet GoodCloud 安全漏洞

GL.iNet GoodCloud is an Internet of Things IoT device management system from China's Guanglian Zhitong GL.iNet. A security vulnerability exists in GL.iNet GoodCloud version 1.1, which stems from incorrect access control...

CVE-2022-44212

In GL.iNet Goodcloud 1.0, insecure design allows remote attacker to access devices' admin panel...

PT-2022-27143 · Gl.Inet · Gl.Inet Goodcloud

Name of the Vulnerable Software and Affected Versions: GL.iNet Goodcloud version 1.0 Description: The issue is related to an insecure design in the software, which allows a remote attacker to access the devices' admin panel. Recommendations: For GL.iNet Goodcloud version 1.0, consider restricting...

CVE-2022-44212

In GL.iNet Goodcloud 1.0, insecure design allows remote attacker to access devices' admin panel...

CVE-2022-44211

In GL.iNet Goodcloud 1.1 Incorrect access control allows a remote attacker to access/change devices' settings...

GL.iNet GoodCloud 安全漏洞

GL.iNet GoodCloud is an IoT device management system from China's Guanglian Zhitong GL.iNet. A security vulnerability exists in GL.iNet GoodCloud version 1.0. An attacker can access the device's management panel by exploiting the vulnerability...

CVE-2022-44211

In GL.iNet Goodcloud 1.1 Incorrect access control allows a remote attacker to access/change devices' settings...

CVE-2022-44211

GL.iNet Goodcloud 1.1 is affected by an improper access control vulnerability. The issue allows a remote attacker to access or change devices’ settings due to insufficient authorization checks in the Goodcloud component. Affected product: GL.iNet Goodcloud (version 1.1). Reported impact per conne...

PT-2022-27142 · Gl.Inet · Gl.Inet Goodcloud

Name of the Vulnerable Software and Affected Versions: GL.iNet Goodcloud version 1.1 Description: The issue allows a remote attacker to access or change devices' settings due to incorrect access control. Recommendations: For GL.iNet Goodcloud version 1.1, update to a newer version that addresses...