CVE-2024-5420-XSS

描述 在 utnserver Pro、utnserver ProMAX 和 INU-100 版本 20.1.22 及更早版本中发现了一个漏洞，影响 Web 界面中的设备描述参数。此缺陷允许存储型跨站脚本（XSS），使攻击者能够注入 JavaScript 代码。攻击者可以通过诱骗受害者访问恶意网站远程执行攻击，可能导致会话劫持。该漏洞已公开披露，并被标识为 CVE-2024-5420。 用法 nuclei --target http://192.168.1.1:8080/ -t CVE-2024-5420.yaml Dork 查询 FOFA : title="utnserver Contr...

SEH utnserver Pro/ProMAX/INU-100 20.1.22 - File Exposure

A vulnerability was identified in utnserver Pro, utnserver ProMAX, and INU-100 version 20.1.22 and earlier, impacting the file handling functions. This flaw results in authenticated file disclosure, granting unauthorized access to sensitive files and directories. Although authentication is...

SEH utnserver Pro/ProMAX/INU-100 20.1.22 - Cross-Site Scripting

A vulnerability was found in utnserver Pro, utnserver ProMAX, and INU-100 version 20.1.22 and earlier, affecting the device description parameter in the web interface. This flaw allows stored cross-site scripting XSS, enabling attackers to inject JavaScript code. The attack can be executed remote...

EUVD-2024-46644

Malicious code in bioql PyPI...

CVE-2024-5421

Missing input validation and OS command integration of the input in the utnserver Pro, utnserver ProMAX, INU-100 web-interface allows authenticated command injection.This issue affects utnserver Pro, utnserver ProMAX, INU-100 version 20.1.22 and below...

CVE-2024-5420

Missing input validation in the SEH Computertechnik utnserver Pro, SEH Computertechnik utnserver ProMAX, SEH Computertechnik INU-100 web-interface allows stored Cross-Site Scripting XSS..This issue affects utnserver Pro, utnserver ProMAX, INU-100 version 20.1.22 and below...

CVE-2024-11304

Missing input validation in the SEH Computertechnik utnserver Pro, SEH Computertechnik utnserver ProMAX, SEH Computertechnik INU-100 web-interface allows stored Cross-Site Scripting XSS. This issue affects utnserver Pro, utnserver ProMAX, INU-100 version 20.1.22 and below...

CVE-2024-11304

Missing input validation in the SEH Computertechnik utnserver Pro, SEH Computertechnik utnserver ProMAX, SEH Computertechnik INU-100 web-interface allows stored Cross-Site Scripting XSS. This issue affects utnserver Pro, utnserver ProMAX, INU-100 version 20.1.22 and below...

CVE-2024-11304

CVE-2024-11304 affects SEH Computertechnik utnserver Pro, ProMAX and INU-100 web interfaces. The root cause is missing input validation allowing stored Cross-Site Scripting (XSS) on versions 20.1.22 and earlier. Public sources confirm affected devices and show remediation paths: update to a newer...

CVE-2024-11304 Multiple Stored Cross-Site Scripting

Missing input validation in the SEH Computertechnik utnserver Pro, SEH Computertechnik utnserver ProMAX, SEH Computertechnik INU-100 web-interface allows stored Cross-Site Scripting XSS. This issue affects utnserver Pro, utnserver ProMAX, INU-100 version 20.1.22 and below...

SEH多款产品 跨站脚本漏洞

SEH utnserver Pro etc. are products of SEH USA.SEH utnserver Pro is a USB device.SEH Computertechnik utnserver ProMAX etc. are products of SEH Computertechnik.SEH Computertechnik SEH Computertechnik utnserver ProMAX is a high-end device server that is an enterprise-class, full-service business...

CVE-2024-11304: Improper Neutralization of Input During Web Page Generation

Missing input validation in the SEH Computertechnik utnserver Pro, SEH Computertechnik utnserver ProMAX, SEH Computertechnik INU-100 web-interface allows stored Cross-Site Scripting XSS. This issue affects utnserver Pro, utnserver ProMAX, INU-100 version 20.1.22 and below...

PT-2024-16896 · Seh Computertechnik · Utnserver Pro +2

Name of the Vulnerable Software and Affected Versions: SEH Computertechnik utnserver Pro versions prior to 20.1.22 SEH Computertechnik utnserver ProMAX versions prior to 20.1.22 SEH Computertechnik INU-100 versions prior to 20.1.22 Description: The issue is related to missing input validation in...

SEH Computertechnik UTN Server PRO and INU-100 Denial of Service (CVE-2024-5422)

An uncontrolled resource consumption of file descriptors in SEH Computertechnik utnserver Pro, SEH Computertechnik utnserver ProMAX, SEH Computertechnik INU-100 allows DoS via HTTP.This issue affects utnserver Pro, utnserver ProMAX, INU-100 version 20.1.22 and below. This plugin only works with...

Exploit for CVE-2024-5420

CVE-2024-5420XSS Description A vulnerability was found in ut...

Exploit for CVE-2024-5420

Description A vulnerability was found in utnserver Pro, utns...

Exploit for CVE-2024-5420

Description A vulnerability was found in utnserver Pro, utns...

SEH utnserver Pro/ProMAX / INU-100 20.1.22 XSS / DoS / File Disclosure

CyberDanube Security Research 20240604-0 ------------------------------------------------------------------------------- title| Multiple Vulnerabilities product| SEH utnserver Pro/ProMAX / INU-100 vulnerable version| 20.1.22 fixed version| 20.1.28 CVE number| CVE-2024-5420, CVE-2024-5421,...

CVE-2024-5420

Missing input validation in the SEH Computertechnik utnserver Pro, SEH Computertechnik utnserver ProMAX, SEH Computertechnik INU-100 web-interface allows stored Cross-Site Scripting XSS..This issue affects utnserver Pro, utnserver ProMAX, INU-100 version 20.1.22 and below...

CVE-2024-5421

Missing input validation and OS command integration of the input in the utnserver Pro, utnserver ProMAX, INU-100 web-interface allows authenticated command injection.This issue affects utnserver Pro, utnserver ProMAX, INU-100 version 20.1.22 and below...