PT-2024-24943 · Unknown · Librespeed Speedtest

Name of the Vulnerable Software and Affected Versions: librespeed/speedtest versions 5.2.5 through 5.3.0 Description: The issue arises from missing neutralization of the ISP information in a speedtest result, leading to stored Cross-site scripting in the JSON API. The processedString field in the...

speedtest 安全漏洞

speedtest is a very lightweight web speed test tool implemented in Javascript. A security vulnerability exists in speedtest versions 5.2.5 through 5.3.0, which stems from a stored cross-site scripting XSS vulnerability...

CVE-2022-4957

A vulnerability was found in librespeed speedtest up to 5.2.4. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file results/stats.php. The manipulation of the argument id leads to cross site scripting. The attack can be launched remotely...

Cross site scripting

A vulnerability was found in librespeed speedtest up to 5.2.4. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file results/stats.php. The manipulation of the argument id leads to cross site scripting. The attack can be launched remotely...

CVE-2022-4957 librespeed speedtest stats.php cross site scripting

A vulnerability was found in librespeed speedtest up to 5.2.4. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file results/stats.php. The manipulation of the argument id leads to cross site scripting. The attack can be launched remotely...

CVE-2022-4957

Summary: CVE-2022-4957 affects librespeed speedtest (versions up to 5.2.4) due to an input handling flaw in results/stats.php. The vulnerability arises from manipulating the id parameter, enabling cross-site scripting (XSS). The issue is exploitable remotely and the impact is limited to the affec...

CVE-2022-4957 librespeed speedtest stats.php cross site scripting

A vulnerability was found in librespeed speedtest up to 5.2.4. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file results/stats.php. The manipulation of the argument id leads to cross site scripting. The attack can be launched remotely...

PT-2023-15940 · Unknown · Librespeed Speedtest

Name of the Vulnerable Software and Affected Versions: librespeed speedtest versions up to 5.2.4 Description: A vulnerability was found in an unknown functionality of the file results/stats.php. The manipulation of the argument id leads to cross site scripting. The attack can be launched remotely...

speedtest Cross-Site Scripting Vulnerability

speedtest is a very lightweight network speed test tool implemented in Javascript. A cross-site scripting vulnerability exists in librespeed speedtest version 5.2.4 and earlier, which stems from the parameter id in the file results/stats.php that causes cross-site scripting...

Malicious code in sparhandy-speedtest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab7facb8b74174e953d353343764d8957c3d1e576e007850604571d2cc34b614 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6228 Malicious code in sparhandy-speedtest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab7facb8b74174e953d353343764d8957c3d1e576e007850604571d2cc34b614 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview sparhandy-speedtest is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this packa...

Penglab - Abuse Of Google Colab For Cracking Hashes

Abuse of Google Colab for fun and profit. What is it ? Penglab is a ready-to-install setup on Google Colab for cracking hashes with an incredible power, really useful for CTFs. See benchmarks below. It installs by default : Hashcat John Hydra SSH with ngrok And now, it can also : Launch an...

CVE-2019-18370

An issue was discovered on Xiaomi Mi WiFi R3G devices before 2.28.23-stable. The backup file is in tar.gz format. After uploading, the application uses the tar zxf command to decompress, so one can control the contents of the files in the decompressed directory. In addition, the application's sh...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Kodak InSite 6.5 to 8.0 allow remote attackers to inject arbitrary web script via the 1 "paramFile" parameter to /Site/Troubleshooting/DiagnosticReport.asp, or 2 "paramFile" parameter to /Site/Troubleshooting/SpeedTest.asp...

speedtest.net XSS vulnerability

Vulnerable URL: http://www.speedtest.net/articles/wp-includes/js/mediaelement/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| Yes, at 08.05.2017 Latest check for patch:| 08.05.2017 02:45 GMT Vulnerability type:| XSS Vulnerability status:|...

Vodafone SpeedTest - Customized SSL, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Vodafone SpeedTest published at the 'play' market has multiple vulnerabilities...

Mobile WIFI & DSL Speedtest - Dynamic Code Loading, External URLs, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Mobile WIFI & DSL Speedtest published at the 'play' market has multiple vulnerabilities...

Speedtest - Command Line Interface for Testing Internet Bandwidth

speedtest-cli is a command line interface for testing internet bandwidth using speedtest.net Installation pip / easyinstall pip install speedtest-cli or easyinstall speedtest-cli Github pip install git+https://github.com/sivel/speedtest-cli.git or git clone...

GDTelcom Speedtest Denial Of Service

Title: GDTelcom Speedtest ActiveX Control "FTPDownLoad Class"-ActiveX.dll Remote Denial of Service Vulnerability Software: GDTelcom Speedtest ActiveX Control "FTPDownLoad Class"-ActiveX.dllVersion 1.0 Vulnerability Published :2011-10-15 Vulnerability Update Time :2011-09-10 Vendor: www.gdcn.comNo...