Cross site scripting

Beetel 777VR1-DI Hardware Version REV.1.01 Firmware Version V01.00.0955 was discovered to contain a cross-site scripting XSS vulnerability via the Ping diagnostic option...

CVE-2020-36056

Beetel 777VR1-DI Hardware Version REV.1.01 Firmware Version V01.00.0955 was discovered to contain a cross-site scripting XSS vulnerability via the Ping diagnostic option...

CVE-2020-36056

CVE-2020-36056 affects the Beetel 777VR1-DI router (Hardware REV.1.01, Firmware V01.00.09_55). The vulnerability is a cross-site scripting (XSS) flaw in the Ping diagnostic option that can be triggered via user input to execute client-side code. Public details confirm the affected product and the...

Beetel 777VR1 跨站脚本漏洞

The Beetel 777VR1 is a router from Beetel. A cross-site scripting vulnerability exists in the Beetel 777VR1-DI that stems from the product's Ping diagnostic option failing to properly handle user input data. The vulnerability can be exploited to execute client-side code. The following products an...

PT-2022-8945 · Beetel · Beetel 777Vr1-Di

Name of the Vulnerable Software and Affected Versions: Beetel 777VR1-DI Hardware Version REV.1.01 Firmware Version V01.00.09 55 Description: A cross-site scripting XSS issue was found in the Ping diagnostic option, which could allow for malicious script execution. Recommendations: For Beetel...

CVE-2020-36056: Improper Neutralization of Input During Web Page Generation

Beetel 777VR1-DI Hardware Version REV.1.01 Firmware Version V01.00.0955 was discovered to contain a cross-site scripting XSS vulnerability via the Ping diagnostic option...

Mageia: Security Advisory (MGASA-2015-0221)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2022-1554

Name of the Vulnerable Software and Affected Versions D-Link DIR-823-Pro version 1.0.2 Description The issue is related to a command injection vulnerability in the SetNetworkTomographySettings function. This vulnerability allows attackers to execute arbitrary commands via the tomography ping...

CVE-2018-17875

A remote code execution issue in the ping command on Poly Trio 8800 5.7.1.4145 devices allows remote authenticated users to execute commands via unspecified vectors...

CVE-2018-17875

A remote code execution issue in the ping command on Poly Trio 8800 5.7.1.4145 devices allows remote authenticated users to execute commands via unspecified vectors...

Remote code execution

A remote code execution issue in the ping command on Poly Trio 8800 5.7.1.4145 devices allows remote authenticated users to execute commands via unspecified vectors...

CVE-2018-17875

A remote code execution issue in the ping command on Poly Trio 8800 5.7.1.4145 devices allows remote authenticated users to execute commands via unspecified vectors...

CVE-2018-17875

Poly Trio 8800 devices running 5.7.1.4145 are affected by CVE-2018-17875, a remote code execution vulnerability in the ping command that allows remote authenticated users to execute commands via unspecified vectors. Impact is high for unauthenticated? No, authenticated users per description; CVSS...

OPENSUSE-SU-2021:4192-1 Security update for permissions

This update for permissions fixes the following issues: - Update to version 20181225: drop ping capabilities in favor of ICMPPROTO sockets bsc1174504...

PT-2021-8828

Name of the Vulnerable Software and Affected Versions Poly Trio 8800 version 5.7.1.4145 Description A remote code execution issue in the ping command allows remote authenticated users to execute commands via unspecified vectors. Recommendations For Poly Trio 8800 version 5.7.1.4145, consider...

CVE-2018-17875: Undefined Security Weakness

A remote code execution issue in the ping command on Poly Trio 8800 5.7.1.4145 devices allows remote authenticated users to execute commands via unspecified vectors...

Security update for permissions (moderate)

openSUSE Security Update: Security update for permissions Announcement ID: openSUSE-SU-2021:4192-1 Rating: moderate References: 1174504 Affected Products: openSUSE Leap 15.3 An update that contains security fixes can now be installed. Description: This update for permissions fixes the following...

CVE-2021-44453

mySCADA myPRO: Versions 8.20.0 and prior has a vulnerable debug interface which includes a ping utility, which may allow an attacker to inject arbitrary operating system commands...

PT-2021-24111

Name of the Vulnerable Software and Affected Versions: mySCADA myPRO versions 8.20.0 and prior Description: The issue concerns a vulnerable debug interface in mySCADA myPRO, which includes a ping utility. This vulnerability may allow an attacker to inject arbitrary operating system commands...

CVE-2021-44453: Improper Neutralization of Special Elements used in an OS Command

mySCADA myPRO: Versions 8.20.0 and prior has a vulnerable debug interface which includes a ping utility, which may allow an attacker to inject arbitrary operating system commands...