EUVD-2024-27343

Malicious code in bioql PyPI...

The vulnerability of the Lab Handler component in the EVE-NG multi-user networking emulation software allows a attacker to perform XSS attacks.

The vulnerability of the Lab Handler component in the EVE-NG multi-user networking emulator exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

CVE-2024-2391

A vulnerability was found in EVE-NG 5.0.1-13 and classified as problematic. Affected by this issue is some unknown functionality of the component Lab Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may ...

CVE-2024-2391

A vulnerability was found in EVE-NG 5.0.1-13 and classified as problematic. Affected by this issue is some unknown functionality of the component Lab Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may ...

CVE-2024-2391 EVE-NG Lab cross site scripting

A vulnerability was found in EVE-NG 5.0.1-13 and classified as problematic. Affected by this issue is some unknown functionality of the component Lab Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may ...

PT-2024-2358 · Eve-Ng · Eve-Ng

Name of the Vulnerable Software and Affected Versions: EVE-NG versions 5.0.1-13 Description: The issue exists due to the lack of protection of the web page structure in the Lab Handler component of EVE-NG, allowing a remote attacker to conduct a cross-site scripting XSS attack. The manipulation o...

EVE-NG Cross-Site Scripting Vulnerability

EVE-NG is a clientless multi-vendor network emulation software from EVE-NG, Inc. A cross-site scripting vulnerability exists in EVE-NG version 5.0.1-13, which stems from the component Lab Handler that causes cross-site scripting...

CVE-2024-2391: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in EVE-NG 5.0.1-13 and classified as problematic. Affected by this issue is some unknown functionality of the component Lab Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may ...