Lucene search
K

12 matches found

OSV
OSV
added 2026/04/11 3:47 p.m.1 views

MINI-PM25-G6XV-V9WW

Bulletin has no description...

5.5CVSS5.7AI score0.00004EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2026/03/26 3:10 p.m.2 views

CVE-2026-32843

Location Aware Sensor System by Linkit ONE, up to commit f06bd20 2023-04-26, contains a reflected cross-site scripting vulnerability in the PM25.php file that allows remote attackers to execute arbitrary JavaScript by injecting malicious code into GET parameters. Attackers can craft a malicious U...

5.1CVSS6AI score0.00097EPSS
Exploits0References1
EUVD
EUVD
added 2026/03/19 3:31 p.m.3 views

EUVD-2026-13113

Location Aware Sensor System by Linkit ONE, up to commit f06bd20 2023-04-26, contains a reflected cross-site scripting vulnerability in the PM25.php file that allows remote attackers to execute arbitrary JavaScript by injecting malicious code into GET parameters. Attackers can craft a malicious U...

5.1CVSS6AI score0.00097EPSS
Exploits0References3
NVD
NVD
added 2026/03/19 3:16 p.m.2 views

CVE-2026-32843

Location Aware Sensor System by Linkit ONE, up to commit f06bd20 2023-04-26, contains a reflected cross-site scripting vulnerability in the PM25.php file that allows remote attackers to execute arbitrary JavaScript by injecting malicious code into GET parameters. Attackers can craft a malicious U...

5.1CVSS0.00097EPSS
Exploits0References2
CVE
CVE
added 2026/03/19 2:39 p.m.5 views

CVE-2026-32843

A reflected cross-site scripting (XSS) vulnerability affects Location Aware Sensor System by LinkIt ONE up to commit f06bd20 (2023-04-26) in PM25.php. The issue arises from allowing unencoded payloads via GET parameters (site, city, district, channel, or apikey), enabling remote attackers to exec...

5.1CVSS6AI score0.00097EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/03/19 2:39 p.m.1 views

CVE-2026-32843

Location Aware Sensor System by Linkit ONE, up to commit f06bd20 2023-04-26, contains a reflected cross-site scripting vulnerability in the PM25.php file that allows remote attackers to execute arbitrary JavaScript by injecting malicious code into GET parameters. Attackers can craft a malicious U...

5.1CVSS6AI score0.00097EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/03/19 2:39 p.m.15 views

CVE-2026-32843 Linkit ONE Location Aware Sensor System (LASS) Reflected XSS via PM25.php

Location Aware Sensor System by Linkit ONE, up to commit f06bd20 2023-04-26, contains a reflected cross-site scripting vulnerability in the PM25.php file that allows remote attackers to execute arbitrary JavaScript by injecting malicious code into GET parameters. Attackers can craft a malicious U...

5.1CVSS0.00097EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/03/19 12:0 a.m.3 views

LASS 跨站脚本漏洞

LASS is an open-source environmental monitoring sensor network system developed by LinkItONEDevGroup. Versions of LASS starting from f06bd20 and earlier have a cross-site scripting vulnerability. This vulnerability stems from the PM25.php file, which contains a reflective cross-site scripting...

5.1CVSS6AI score0.00097EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/03/19 12:0 a.m.2 views

PT-2026-26296

Location Aware Sensor System by Linkit ONE, up to commit f06bd20 2023-04-26, contains a reflected cross-site scripting vulnerability in the PM25.php file that allows remote attackers to execute arbitrary JavaScript by injecting malicious code into GET parameters. Attackers can craft a malicious U...

5.1CVSS6AI score0.00097EPSS
Exploits0References5
OSV
OSV
added 2025/08/16 2:34 p.m.1 views

CGA-PM25-CCGM-4V8C

Bulletin has no description...

6.5CVSS7.2AI score0.00026EPSS
Exploits0
OSV
OSV
added 2024/09/25 5:15 a.m.9 views

CGA-726Q-PM25-JJGC

Bulletin has no description...

3.7CVSS4.9AI score0.00146EPSS
Exploits0
Openbugbounty
Openbugbounty
added 2023/09/13 11:36 a.m.6 views

pm25.lass-net.org Cross Site Scripting vulnerability OBB-3676937

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
Exploits0
Rows per page
Query Builder