CVE-2021-31643

An XSS vulnerability exists in several IoT devices from CHIYU Technology, including SEMAC, Biosense, BF-630, BF-631, and Webpass due to a lack of sanitization on the component if.cgi - username parameter...

EUVD-2021-18531

Malware in sbrugna...

PT-2021-19217

Name of the Vulnerable Software and Affected Versions CHIYU Technology Inc BF-430 CHIYU Technology Inc BF-431 CHIYU Technology Inc BF-450M Description The issue is related to multiple storage XSS vulnerabilities discovered in certain devices from CHIYU Technology Inc. These vulnerabilities are...

CVE-2021-31250: Improper Neutralization of Input During Web Page Generation

Multiple storage XSS vulnerabilities were discovered on BF-430, BF-431 and BF-450M TCP/IP Converter devices from CHIYU Technology Inc due to a lack of sanitization of the input on the components man.cgi, if.cgi, dhcpc.cgi, ppp.cgi...

CVE-2021-31643

An XSS vulnerability exists in several IoT devices from CHIYU Technology, including SEMAC, Biosense, BF-630, BF-631, and Webpass due to a lack of sanitization on the component if.cgi - username parameter...

Cross site scripting

An XSS vulnerability exists in several IoT devices from CHIYU Technology, including SEMAC, Biosense, BF-630, BF-631, and Webpass due to a lack of sanitization on the component if.cgi - username parameter...

CVE-2021-31643

An XSS vulnerability exists in several IoT devices from CHIYU Technology, including SEMAC, Biosense, BF-630, BF-631, and Webpass due to a lack of sanitization on the component if.cgi - username parameter...

CVE-2021-31643

CVE-2021-31643 describes an XSS vulnerability in CHIYU IoT devices (SEMAC, Biosense, BF-630, BF-631, Webpass) caused by inadequate sanitization of the if.cgi username parameter. The issue allows injection of client-side scripts through HTTP input and is reported across multiple CHIYU models. The ...

PT-2021-19459

Name of the Vulnerable Software and Affected Versions CHIYU Technology IoT devices, including SEMAC, Biosense, BF-630, BF-631, and Webpass affected versions not specified Description An issue exists due to a lack of sanitization on the "if.cgi" component, specifically the username parameter. This...

CVE-2021-31643: Improper Neutralization of Input During Web Page Generation

An XSS vulnerability exists in several IoT devices from CHIYU Technology, including SEMAC, Biosense, BF-630, BF-631, and Webpass due to a lack of sanitization on the component if.cgi - username parameter...

CVE-2020-8839

Stored XSS was discovered on CHIYU BF-430 232/485 TCP/IP Converter devices before 1.16.00, as demonstrated by the /if.cgi TFsubmask field...

CVE-2020-8839: Improper Neutralization of Input During Web Page Generation

Stored XSS was discovered on CHIYU BF-430 232/485 TCP/IP Converter devices before 1.16.00, as demonstrated by the /if.cgi TFsubmask field...

PT-2020-20316

Name of the Vulnerable Software and Affected Versions CHIYU BF-430 232/485 TCP/IP Converter versions prior to 1.16.00 Description A stored XSS issue was found, as demonstrated by the "/if.cgi" API endpoint, specifically the TF submask field. Recommendations For versions prior to 1.16.00, update t...