12 matches found
CVE-2024-55040-Sensaphone-XSS
SENSAPHONE VULNERABILITY DISCLOSURE Summary In mid-September 2024, I identified several medium-to-low severity security issues in the Sensaphone Web600 Monitoring System, including stored cross-site scripting XSS vulnerabilities in the system Setup, Profile, and Zone options. Remote authenticated...
EUVD-2024-54806
Malicious code in bioql PyPI...
CVE-2024-55040
Cross Site Scripting vulnerability in Sensaphone WEB600 Monitoring System v.1.6.5.H and before allows a remote attacker to execute arbitrary code via a crafted GET requests to /@.xml, placing payloads in the g7200, g7300, g4601, and g1F02 parameters...
CVE-2024-55040
Cross Site Scripting vulnerability in Sensaphone WEB600 Monitoring System v.1.6.5.H and before allows a remote attacker to execute arbitrary code via a crafted GET requests to /@.xml, placing payloads in the g7200, g7300, g4601, and g1F02 parameters...
CVE-2024-55040
Cross Site Scripting vulnerability in Sensaphone WEB600 Monitoring System v.1.6.5.H and before allows a remote attacker to execute arbitrary code via a crafted GET requests to /@.xml, placing payloads in the g7200, g7300, g4601, and g1F02 parameters...
CVE-2024-55040
The Sensaphone WEB600 Monitoring System (v.1.6.5.H and before) is vulnerable to multiple stored cross-site scripting (XSS) flaws. Remote authenticated attackers can inject arbitrary JavaScript payloads via crafted GET requests to the /@.xml endpoint. Specifically, payloads can be placed in the g7...
Sensaphone WEB600 Monitoring System has security vulnerabilities
Sensaphone WEB600 Monitoring System is a remote monitoring and data logging device from Sensaphone USA. A security vulnerability exists in Sensaphone WEB600 Monitoring System version 1.6.5.H and prior versions, which stems from vulnerability to cross-site scripting attacks that could lead to the...
CVE-2024-55040
Cross Site Scripting vulnerability in Sensaphone WEB600 Monitoring System v.1.6.5.H and before allows a remote attacker to execute arbitrary code via a crafted GET requests to /@.xml, placing payloads in the g7200, g7300, g4601, and g1F02 parameters...
CVE-2024-55040
Cross Site Scripting vulnerability in Sensaphone WEB600 Monitoring System v.1.6.5.H and before allows a remote attacker to execute arbitrary code via a crafted GET requests to /@.xml, placing payloads in the g7200, g7300, g4601, and g1F02 parameters...
CVE-2024-55040: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability in Sensaphone WEB600 Monitoring System v.1.6.5.H and before allows a remote attacker to execute arbitrary code via a crafted GET requests to /@.xml, placing payloads in the g7200, g7300, g4601, and g1F02 parameters...
PT-2025-5686 · Sensaphone · Sensaphone Web600
Name of the Vulnerable Software and Affected Versions: Sensaphone Web600 affected versions not specified Description: The issue concerns stored cross-site scripting XSS in the system's Setup, Profile, and Zone options. This means that an attacker could potentially inject malicious code into these...
