Lucene search
K

108 matches found

RedhatCVE
RedhatCVE
added 2026/03/05 7:51 a.m.8 views

CVE-2026-28772

A Reflected Cross-Site Scripting XSS vulnerability in the /IDCLogging/index.cgi endpoint of International Datacasting Corporation IDC SFX Series SuperFlex SatelliteReceiver Web Management Interface version 101 allows a remote attacker to execute arbitrary web scripts or HTML. The vulnerability is...

6.1CVSS6.2AI score0.0021EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2026/03/04 7:12 a.m.2 views

CVE-2026-28772 Reflected XSS in IDC_Logging Index endpoint

A Reflected Cross-Site Scripting XSS vulnerability in the /IDCLogging/index.cgi endpoint of International Datacasting Corporation IDC SFX Series SuperFlex SatelliteReceiver Web Management Interface version 101 allows a remote attacker to execute arbitrary web scripts or HTML. The vulnerability is...

5.1CVSS6.2AI score0.0021EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2026/03/04 7:12 a.m.4 views

CVE-2026-28772

A Reflected Cross-Site Scripting XSS vulnerability in the /IDCLogging/index.cgi endpoint of International Datacasting Corporation IDC SFX Series SuperFlex SatelliteReceiver Web Management Interface version 101 allows a remote attacker to execute arbitrary web scripts or HTML. The vulnerability is...

5.1CVSS6.2AI score0.0021EPSS
Exploits1References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/03/04 7:11 a.m.4 views

CVE-2026-28771

A Reflected Cross-Site Scripting XSS vulnerability exists in the /index.cgi endpoint of International Datacasting Corporation IDC SFX Series SuperFlex Satellite Receiver Web Management Interface version 101. The application fails to adequately sanitize user-supplied input provided via the cat...

5.1CVSS6.2AI score0.0021EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2026/03/04 7:11 a.m.34 views

CVE-2026-28771 Reflected XSS In /index.cgi Endpoint On IDC Satellite Receiver Web Management Interface Version 101

A Reflected Cross-Site Scripting XSS vulnerability exists in the /index.cgi endpoint of International Datacasting Corporation IDC SFX Series SuperFlex Satellite Receiver Web Management Interface version 101. The application fails to adequately sanitize user-supplied input provided via the cat...

5.1CVSS0.0021EPSS
Exploits1References1
CNNVD
CNNVD
added 2026/03/04 12:0 a.m.5 views

International Datacasting SFX Series SuperFlex Satellite Receiver Web management interface 安全漏洞

The International Datacasting SFX Series SuperFlex Satellite Receiver Web management interface is a web-based management backend for the satellite receiver devices produced by the International Datacasting company. Version 101 of the International Datacasting SFX Series SuperFlex Satellite Receiv...

6.1CVSS5.6AI score0.0021EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2026/03/04 12:0 a.m.4 views

PT-2026-22873

Name of the Vulnerable Software and Affected Versions International Datacasting Corporation IDC SFX Series SuperFlex Satellite Receiver Web Management Interface version 101 Description A Reflected Cross-Site Scripting XSS issue exists in the /index.cgi API endpoint. The application does not...

5.1CVSS6.2AI score0.0021EPSS
Exploits1References6
RedhatCVE
RedhatCVE
added 2025/12/03 2:2 p.m.3 views

CVE-2025-11779

Stack-based buffer overflow vulnerability in CircutorSGE-PLC1000/SGE-PLC50 v9.0.2. The 'SetLan' function is invoked when a new configuration is applied. This new configuration function is activated by a management web request, which can be invoked by a user when making changes to the 'index.cgi'...

9.8CVSS7.3AI score0.01272EPSS
Exploits0References1
OSV
OSV
added 2025/12/02 1:15 p.m.3 views

CVE-2025-11779

Stack-based buffer overflow vulnerability in CircutorSGE-PLC1000/SGE-PLC50 v9.0.2. The 'SetLan' function is invoked when a new configuration is applied. This new configuration function is activated by a management web request, which can be invoked by a user when making changes to the 'index.cgi'...

9.8CVSS6.1AI score0.01272EPSS
Exploits0References1
NVD
NVD
added 2025/12/02 1:15 p.m.2 views

CVE-2025-11779

Stack-based buffer overflow vulnerability in CircutorSGE-PLC1000/SGE-PLC50 v9.0.2. The 'SetLan' function is invoked when a new configuration is applied. This new configuration function is activated by a management web request, which can be invoked by a user when making changes to the 'index.cgi'...

9.8CVSS0.01272EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/12/02 12:57 p.m.5 views

CVE-2025-11779 Stack-based buffer overflow vulnreability in Circutor SGE-PLC1000/SGE-PLC50

Stack-based buffer overflow vulnerability in CircutorSGE-PLC1000/SGE-PLC50 v9.0.2. The 'SetLan' function is invoked when a new configuration is applied. This new configuration function is activated by a management web request, which can be invoked by a user when making changes to the 'index.cgi'...

9.4CVSS0.01272EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2002-0098

Malware in sbrugna...

7.5CVSS6.4AI score0.06881EPSS
Exploits1References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2011-4981

Malware in sbrugna...

4.3CVSS6.1AI score0.02067EPSS
Exploits1References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2011-3325

Malware in sbrugna...

4.3CVSS6AI score0.02507EPSS
Exploits1References12
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2011-4834

Malware in sbrugna...

4.3CVSS6.1AI score0.02108EPSS
Exploits0References7
Packet Storm
Packet Storm
added 2024/09/01 12:0 a.m.170 views

Zen Load Balancer Directory Traversal

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Zen Load Balancer Directory Traversal', 'Description' = %q This module exploits a authenticated directory traversal vulnerability in Zen Load...

7.4AI score
Exploits0
BDU FSTEC
BDU FSTEC
added 2023/06/07 12:0 a.m.6 views

The vulnerability of the index.cgi component of D-Link DIR-620 router microprogramming software allows a hacker to execute arbitrary commands.

The vulnerability of the index.cgi component in D-Link DIR-620 router microprogramming software is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands using...

9CVSS7.5AI score0.05768EPSS
Exploits1References5Affected Software1
OSV
OSV
added 2022/11/02 8:15 p.m.22 views

CVE-2022-3844

A vulnerability, which was classified as problematic, was found in Webmin 2.001. Affected is an unknown function of the file xterm/index.cgi. The manipulation leads to basic cross site scripting. It is possible to launch the attack remotely. Upgrading to version 2.003 is able to address this issu...

6.1CVSS6.2AI score
Exploits0References4
Positive Technologies
Positive Technologies
added 2022/11/02 12:0 a.m.3 views

PT-2022-24410 · Webmin · Webmin

Name of the Vulnerable Software and Affected Versions: Webmin versions prior to 2.003 Description: A problematic issue was found in Webmin, affecting an unknown function of the file xterm/index.cgi, leading to basic cross site scripting. The manipulation can be launched remotely. Recommendations:...

6.1CVSS4.2AI score0.00591EPSS
Exploits1References9
CNNVD
CNNVD
added 2022/11/02 12:0 a.m.3 views

Webmin 跨站脚本漏洞

Webmin is a set of Web-based system administration tools for Unix-like operating systems from the Webmin community. Webmin suffers from a cross-site scripting vulnerability that originates in an unknown function of xterm/index.cgi that could lead to cross-site scripting issues...

6.1CVSS4.8AI score0.00591EPSS
Exploits0References6
Rows per page
Query Builder