PT-2022-5286

Name of the Vulnerable Software and Affected Versions D-Link DSL-2750B versions prior to 1.05 Description The issue allows remote unauthenticated command injection via the login.cgi cli parameter. This has been exploited in the wild from 2016 through 2022. The vulnerability is related to the lack...

PT-2022-23284 · Airspan · Airspan Airspot 5410

Name of the Vulnerable Software and Affected Versions: Airspan AirSpot 5410 versions 0.3.4.1-4 and under Description: The issue concerns a stored XSS vulnerability. It occurs because the binary file /home/www/cgi-bin/login.cgi does not check if the user is authenticated, allowing a malicious acto...