EnGenius EnStation5-AC A8J-ENS500AC 安全漏洞

The EnGenius EnStation5-AC A8J-ENS500AC is a wireless access point from EnGenius. A security vulnerability exists in the EnGenius EnStation5-AC A8J-ENS500AC version 1.0.0, which originates from allowing blind injection of operating system commands via shell metacharacters in the parameters Ping a...

CVE-2024-32890

The CVE-2024-32890 entry describes a stored cross-site scripting (XSS) in LibreSpeed speedtest. Affected are LibreSpeed speedtest instances running version 5.2.5 or higher with telemetry enabled. The vulnerability arises from missing neutralization in the ispinfo.processedString field of the tele...

CVE-2024-32890 Stored Cross-site Scripting in results JSON API in librespeed/speedtest

librespeed/speedtest is an open source, self-hosted speed test for HTML5. In affected versions missing neutralization of the ISP information in a speedtest result leads to stored Cross-site scripting in the JSON API. The processedString field in the ispinfo parameter is missing neutralization. It...

PT-2024-24943 · Unknown · Librespeed Speedtest

Name of the Vulnerable Software and Affected Versions: librespeed/speedtest versions 5.2.5 through 5.3.0 Description: The issue arises from missing neutralization of the ISP information in a speedtest result, leading to stored Cross-site scripting in the JSON API. The processedString field in the...

speedtest 安全漏洞

speedtest is a very lightweight web speed test tool implemented in Javascript. A security vulnerability exists in speedtest versions 5.2.5 through 5.3.0, which stems from a stored cross-site scripting XSS vulnerability...

CVE-2022-4957

A vulnerability was found in librespeed speedtest up to 5.2.4. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file results/stats.php. The manipulation of the argument id leads to cross site scripting. The attack can be launched remotely...

Cross site scripting

A vulnerability was found in librespeed speedtest up to 5.2.4. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file results/stats.php. The manipulation of the argument id leads to cross site scripting. The attack can be launched remotely...

CVE-2022-4957 librespeed speedtest stats.php cross site scripting

A vulnerability was found in librespeed speedtest up to 5.2.4. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file results/stats.php. The manipulation of the argument id leads to cross site scripting. The attack can be launched remotely...

CVE-2022-4957

Summary: CVE-2022-4957 affects librespeed speedtest (versions up to 5.2.4) due to an input handling flaw in results/stats.php. The vulnerability arises from manipulating the id parameter, enabling cross-site scripting (XSS). The issue is exploitable remotely and the impact is limited to the affec...

CVE-2022-4957 librespeed speedtest stats.php cross site scripting

A vulnerability was found in librespeed speedtest up to 5.2.4. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file results/stats.php. The manipulation of the argument id leads to cross site scripting. The attack can be launched remotely...

PT-2023-15940 · Unknown · Librespeed Speedtest

Name of the Vulnerable Software and Affected Versions: librespeed speedtest versions up to 5.2.4 Description: A vulnerability was found in an unknown functionality of the file results/stats.php. The manipulation of the argument id leads to cross site scripting. The attack can be launched remotely...

speedtest Cross-Site Scripting Vulnerability

speedtest is a very lightweight network speed test tool implemented in Javascript. A cross-site scripting vulnerability exists in librespeed speedtest version 5.2.4 and earlier, which stems from the parameter id in the file results/stats.php that causes cross-site scripting...

Malicious code in sparhandy-speedtest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab7facb8b74174e953d353343764d8957c3d1e576e007850604571d2cc34b614 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6228 Malicious code in sparhandy-speedtest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab7facb8b74174e953d353343764d8957c3d1e576e007850604571d2cc34b614 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview sparhandy-speedtest is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this packa...

CVE-2019-18370

An issue was discovered on Xiaomi Mi WiFi R3G devices before 2.28.23-stable. The backup file is in tar.gz format. After uploading, the application uses the tar zxf command to decompress, so one can control the contents of the files in the decompressed directory. In addition, the application's sh...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Kodak InSite 6.5 to 8.0 allow remote attackers to inject arbitrary web script via the 1 "paramFile" parameter to /Site/Troubleshooting/DiagnosticReport.asp, or 2 "paramFile" parameter to /Site/Troubleshooting/SpeedTest.asp...

speedtest.net XSS vulnerability

Vulnerable URL: http://www.speedtest.net/articles/wp-includes/js/mediaelement/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| Yes, at 08.05.2017 Latest check for patch:| 08.05.2017 02:45 GMT Vulnerability type:| XSS Vulnerability status:|...

Vodafone SpeedTest - Customized SSL, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Vodafone SpeedTest published at the 'play' market has multiple vulnerabilities...

Mobile WIFI & DSL Speedtest - Dynamic Code Loading, External URLs, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Mobile WIFI & DSL Speedtest published at the 'play' market has multiple vulnerabilities...