36 matches found
CVE-2023-31851
CVE-2023-31851 Cudy LT400 的基于 Web 的管理界面存在反射型跨站脚本(XSS)攻击。 页面 /cgi-bin/luci/admin/network/wireless/status 通过 iface 参数存在反射型 XSS。 利用方法涉及向受害者发送包含恶意代码的特制请求。 受影响的应用程序未将 Session Cookie 设置为 HttpOnly 属性;这可能导致通过会话令牌窃取实现管理员接管。 受影响固件版本:1.13.4 - 1.15.18 - 1.15.27 PoC root@kitploit: GET...
CVE-2023-31852
CVE-2023-31852 Cudy LT400 基于 Web 的管理界面存在反射型跨站脚本(XSS)攻击。 页面 /cgi-bin/luci/admin/network/wireless/config 通过 iface 参数存在反射型 XSS。 利用方法包括向受害者发送包含恶意代码的特制请求。 受影响的应用程序未设置 Session Cookie 的 HttpOnly 属性;这可能导致通过会话令牌窃取实现管理员接管。 PoC root@kitploit: GET...
CVE-2023-31853
CVE-2023-31853 Cudy LT400 基于 Web 的管理界面存在反射型跨站脚本(XSS)攻击。 页面 /cgi-bin/luci/admin/network/bandwidth 通过 icon 参数存在反射型 XSS。 利用方法涉及向受害者发送特制请求,其中包含恶意代码。 受影响的应用未在 Session Cookie 中设置 HttpOnly 属性;这可能导致通过会话令牌窃取实现管理员接管。 PoC root@kitploit: GET...
CVE-2023-31851
Cudy LT400 1.13.4 is has a cross-site scripting XSS vulnerability in /cgi-bin/luci/admin/network/wireless/status via the iface parameter...
CVE-2023-31852
Cudy LT400 1.13.4 is vulnerable to Cross Site Scripting XSS in cgi-bin/luci/admin/network/wireless/config via the iface parameter...
EUVD-2023-36141
Malicious code in bioql PyPI...
EUVD-2023-36142
Malicious code in bioql PyPI...
EUVD-2023-36143
Malicious code in bioql PyPI...
CVE-2023-31853
Cudy LT400 1.13.4 is vulnerable Cross Site Scripting XSS in /cgi-bin/luci/admin/network/bandwidth via the icon parameter...
CVE-2023-31853
Cudy LT400 1.13.4 is vulnerable Cross Site Scripting XSS in /cgi-bin/luci/admin/network/bandwidth via the icon parameter...
CVE-2023-31853
Cudy LT400 1.13.4 is vulnerable Cross Site Scripting XSS in /cgi-bin/luci/admin/network/bandwidth via the icon parameter...
CVE-2023-31851
Cudy LT400 1.13.4 is has a cross-site scripting XSS vulnerability in /cgi-bin/luci/admin/network/wireless/status via the iface parameter...
CVE-2023-31851
Cudy LT400 1.13.4 is has a cross-site scripting XSS vulnerability in /cgi-bin/luci/admin/network/wireless/status via the iface parameter...
CVE-2023-31853
Cudy LT400 1.13.4 is vulnerable Cross Site Scripting XSS in /cgi-bin/luci/admin/network/bandwidth via the icon parameter...
CVE-2023-31851
Cudy LT400 1.13.4 is has a cross-site scripting XSS vulnerability in /cgi-bin/luci/admin/network/wireless/status via the iface parameter...
Cross site scripting
Cudy LT400 1.13.4 is has a cross-site scripting XSS vulnerability in /cgi-bin/luci/admin/network/wireless/status via the iface parameter...
Cross site scripting
Cudy LT400 1.13.4 is vulnerable Cross Site Scripting XSS in /cgi-bin/luci/admin/network/bandwidth via the icon parameter...
CVE-2023-31852
Cudy LT400 1.13.4 is vulnerable to Cross Site Scripting XSS in cgi-bin/luci/admin/network/wireless/config via the iface parameter...