EUVD-2018-9339

Malware in sbrugna...

AirTies Air 5750 cross-site scripting vulnerability (CNVD-2018-20474)

AirTies Air 5750 is a wireless router product from Airties Turkey. A cross-site scripting vulnerability exists in the AirTies Air 5750. A remote attacker can exploit this vulnerability by sending the 'productboardtype' parameter to the top.html page to inject arbitrary web script or HTML...

Airties AIR5342 1.0.0.18 - Cross-Site Scripting Vulnerability

Exploit for hardware platform in category web applications Exploit Title: Airties AIR5342 1.0.0.18 - Cross-Site Scripting Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.airties.com/ Software http://www.airties.com.tr/support/dcenter/ Version: 1.0.0.18 Affected products: AIR5342,...

CVE-2018-17593

AirTies Air 5453 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter...

CVE-2018-17593

AirTies Air 5453 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter...

CVE-2018-17594

AirTies Air 5443v2 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter...

CVE-2018-17587

AirTies Air 5750 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter...

CVE-2018-17588

AirTies Air 5021 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter...

CVE-2018-17589

AirTies Air 5650 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter...

CVE-2018-17590

AirTies Air 5442 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter...

CVE-2018-17587

AirTies Air 5750 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter...

Design/Logic Flaw

AirTies Air 5021 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter...

Design/Logic Flaw

AirTies Air 5442 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter...

CVE-2018-17593

CVE-2018-17593 affects AirTies Air 5453 devices running software 1.0.0.18. A cross-site scripting vulnerability exists in the top.html page via the productboardtype parameter, enabling injection of arbitrary script/HTML. Public reports (CNVD, Exploit-DB, 0day, PacketStorm) corroborate the XSS iss...

CVE-2018-17588

AirTies Air 5021 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter...

CVE-2018-17591

CVE-2018-17591 affects AirTies Air 5343v2 devices with software 1.0.0.18. The vulnerability is a cross-site scripting (XSS) flaw exploitable via the top.html page’s productboardtype parameter. Multiple connected sources (NVD, CNVD, Exploit-DB, 0day/1337DAY, CVE listings) consistently describe an ...

CVE-2018-17590

CVE-2018-17590 affects AirTies Air 5442 devices running 1.0.0.18, with a Cross-Site Scripting vulnerability exploitable via the top.html page parameter productboardtype. The underlying issue is reflected XSS in that parameter, enabling injection of arbitrary script/HTML. CVSS v2 base 4.3 (MEDIUM)...

CVE-2018-17587

CVE-2018-17587 affects AirTies Air 5750 devices running 1.0.0.18. The vulnerability is a cross-site scripting (XSS) flaw in the top.html page reachable via the productboardtype parameter, enabling injection of arbitrary HTML/JavaScript. Multiple sources (NVD, CNVD, CVE listings) corroborate the i...

CVE-2018-17594: Improper Neutralization of Input During Web Page Generation

AirTies Air 5443v2 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter...

CVE-2018-17590: Improper Neutralization of Input During Web Page Generation

AirTies Air 5442 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter...