CVE-2022-28374

Summary: CVE-2022-28374 affects Verizon 5G Home LVSKIHP Outdoor Unit (ODU) v3.33.101.0. The issue is improper sanitization of user-controlled parameters in the DMACC URLs on the Engineering portal Settings page, allowing an authenticated remote attacker on the LAN to inject shell metacharacters i...

CVE-2022-28375

Verizon 5G Home LVSKIHP OutDoorUnit ODU 3.33.101.0 does not property sanitize user-controlled parameters within the crtcswitchsimprofile function of the crtcrpc JSON listener. A remote attacker on the local network can inject shell metacharacters into /usr/lib/lua/5.1/luci/controller/rpc.lua to...

CVE-2022-28375

The CVE-2022-28375 issue affects Verizon 5G Home LVSKIHP Outdoor Unit (ODU) version 3.33.101.0. The root cause is improper sanitization in the crtcsimprofile function of the crtcrpc JSON listener, allowing a remote attacker on a local network to inject shell metacharacters into /usr/lib/lua/5.1/l...

CVE-2022-28377

Affected: Verizon 5G Home LVSKIHP IDU 3.4.66.162 and ODU 3.33.101.0. Root cause: CRTC/ODU RPC endpoints rely on a static account username/password for access control, and the password can be generated via a firmware binary after determining the IDU’s base Ethernet MAC and setting DEVICE_MANUFACTU...

PT-2022-18980 · Verizon · Verizon 5G Home Lvskihp Outdoorunit

Name of the Vulnerable Software and Affected Versions: Verizon 5G Home LVSKIHP InDoorUnit IDU version 3.4.66.162 Verizon 5G Home LVSKIHP OutDoorUnit ODU version 3.33.101.0 Description: The CRTC and ODU RPC endpoints rely on a static certificate for access control, which is embedded in the firmwar...

cs.odu.edu XSS vulnerability

Vulnerable URL: http://www.cs.odu.edu/ibl/csschedule.php?semester=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

Unfixed XSS vulnerability at www.odu.edu

Security researcher jath, has submitted on 17/09/2009 a cross-site-scripting XSS vulnerability affecting www.odu.edu, which at the time of submission ranked 34775 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/09/2009. It is currently...