MAL-2026-15760 Malicious code in nano-smart-box (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in nano-smart-box (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

CVE-2020-12246

Beeline Smart Box 2.0.38 routers allow "Advanced settings Other Diagnostics" OS command injection via the Ping pingipaddr parameter, the Nslookup nslookupipaddr parameter, or the Traceroute tracerouteipaddr parameter...

EUVD-2020-4560

Malware in sbrugna...

EUVD-2021-28453

Malicious code in bioql PyPI...

EUVD-2021-28454

Malicious code in bioql PyPI...

CVE-2021-41426

Beeline Smart box 2.0.38 is vulnerable to Cross Site Request Forgery CSRF via mgtenduser.htm...

CVE-2021-41427

Beeline Smart Box 2.0.38 is vulnerable to Cross Site Scripting XSS via the choosemac parameter to setup.cgi...

CVE-2021-41426

Beeline Smart box 2.0.38 is vulnerable to Cross Site Request Forgery CSRF via mgtenduser.htm...

CVE-2021-41427

Beeline Smart Box 2.0.38 is vulnerable to Cross Site Scripting XSS via the choosemac parameter to setup.cgi...

CVE-2021-41427

Beeline Smart Box 2.0.38 is vulnerable to Cross Site Scripting XSS via the choosemac parameter to setup.cgi...

CVE-2021-41426

Beeline Smart box 2.0.38 is vulnerable to Cross Site Request Forgery CSRF via mgtenduser.htm...

CVE-2021-41426

Beeline Smart box 2.0.38 is vulnerable to Cross Site Request Forgery CSRF via mgtenduser.htm...

Cross site request forgery (csrf)

Beeline Smart box 2.0.38 is vulnerable to Cross Site Request Forgery CSRF via mgtenduser.htm...

CVE-2021-41427

Beeline Smart Box 2.0.38 is vulnerable to Cross Site Scripting XSS via the choosemac parameter to setup.cgi...

Cross site scripting

Beeline Smart Box 2.0.38 is vulnerable to Cross Site Scripting XSS via the choosemac parameter to setup.cgi...

CVE-2021-41426

Beeline Smart box 2.0.38 is vulnerable to Cross Site Request Forgery CSRF via mgtenduser.htm...

CVE-2021-41426

CVE-2021-41426 affects Beeline Smart Box 2.0.38, with a CSRF vulnerability exposed via the mgt_end_user.htm page. The CVE entry is supported by multiple sources (NVD, Red Hat, CVE List, etc.). The issue is described as vulnerable to CSRF, but the connected documents do not provide explicit exploi...

CVE-2021-41427

Beeline Smart Box 2.0.38 is vulnerable to Cross Site Scripting XSS via the choosemac parameter to setup.cgi...

CVE-2021-41427

Beeline Smart Box 2.0.38 is vulnerable to a Cross Site Scripting (XSS) flaw in the setup.cgi endpoint, exploitable via the choose_mac parameter. The issue is documented under CVE-2021-41427. Affected component: the web interface handling setup.cgi; vulnerability type: XSS. Impact details in the p...