CVE-2021-23439 Cross-site Scripting (XSS)

This affects the package file-upload-with-preview before 4.2.0. A file containing malicious JavaScript code in the name can be uploaded a user needs to be tricked into uploading such a file...

PT-2020-18693

Name of the Vulnerable Software and Affected Versions Teltonika firmware version TRB2 R 00.02.04.01 Description The issue is related to improper input validation, allowing a remote, authenticated attacker to gain root privileges. This can be achieved by uploading a malicious package file...