Linear eMerge E3-Series - Cross-Site Scripting

Linear eMerge E3-Series devices contain a cross-site scripting vulnerability via the type parameter, e.g., to the badging/badgetemplatev0.php component. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site and thus steal cookie-based...

Exploit for SQL Injection in Niceforyou Linear_Emerge_E3_Access_Control_Firmware

Research: https://omar0x01.medium.com/cve-2022-38627-a-journ...