CVE-2023-36146

CVE-2023-36146 CVE-2023-36146的PoC - Multilaser RE 170 固件 2.2.6733 认证后的存储型跨站脚本攻击 复现步骤： 1. 通过Web浏览器登录设备 2. 前往安全 IP过滤 3. 在"描述"字段中注入payload "" 4. 点击添加 5. 利用成功！...

EUVD-2023-40125

Malicious code in bioql PyPI...

CVE-2023-36146

A Stored Cross-Site Scripting XSS vulnerability was found in Multilaser RE 170 using firmware 2.2.6733...

CVE-2023-36146

A Stored Cross-Site Scripting XSS vulnerability was found in Multilaser RE 170 using firmware 2.2.6733...

CVE-2023-36146

A Stored Cross-Site Scripting XSS vulnerability was found in Multilaser RE 170 using firmware 2.2.6733...

Cross site scripting

A Stored Cross-Site Scripting XSS vulnerability was found in Multilaser RE 170 using firmware 2.2.6733...

PT-2023-25455 · Multilaser · Multilaser Re 170

Name of the Vulnerable Software and Affected Versions: Multilaser RE 170 version 2.2.6733 Description: A Stored Cross-Site Scripting XSS issue was discovered. This type of issue allows attackers to inject malicious scripts into content from otherwise trusted websites, which can lead to unauthoriz...

CVE-2023-36146

A Stored Cross-Site Scripting XSS vulnerability was found in Multilaser RE 170 using firmware 2.2.6733...

CVE-2023-36146

CVE-2023-36146 affects Multilaser RE 170 firmware 2.2.6733 with a stored XSS in input handling. Connected sources confirm the issue and provide a PoC exploit; PT-Security notes there is no publicly documented fixed version as of their entry. Practical impact is stored XSS via web UI (IP Filtering...

CVE-2023-36146

A Stored Cross-Site Scripting XSS vulnerability was found in Multilaser RE 170 using firmware 2.2.6733...