CVE-2026-48999 Stored Cross-Site Scripting (XSS) vulnerability in ZTE ZXUniPOS NDS-LTE product

Attackers carefully craft malicious scripts, such as JavaScript, and inject them into target systems; when other users access pages containing such malicious content, the scripts are automatically loaded and executed in the victim's browser.Attackers can thereby steal user cookies, hijack session...

CVE-2022-23137

ZTE's ZXCDN product has a reflective XSS vulnerability. The attacker could modify the parameters in the content clearing request url, and when a user clicks the url, an XSS attack will be triggered...

EUVD-2020-28015

Malware in sbrugna...

EUVD-2018-19098

Malware in sbrugna...

EUVD-2020-28008

Malware in sbrugna...

EUVD-2019-13064

Malware in sbrugna...

EUVD-2019-13065

Malware in sbrugna...

EUVD-2020-28017

Malware in sbrugna...

EUVD-2020-28019

Malware in sbrugna...

EUVD-2019-13066

Malware in sbrugna...

EUVD-2020-28016

Malware in sbrugna...

EUVD-2020-28018

Malware in sbrugna...

EUVD-2021-8911

Malicious code in bioql PyPI...

EUVD-2021-8902

Malicious code in bioql PyPI...

EUVD-2021-8899

Malicious code in bioql PyPI...

EUVD-2021-8897

Malicious code in bioql PyPI...

EUVD-2021-8896

Malicious code in bioql PyPI...

CVE-2021-21739

A ZTE's product of the transport network access layer has a security vulnerability. Because the system does not sufficiently verify the data reliability, attackers could replace an authenticated optical module on the equipment with an unauthenticated one, bypassing system authentication and...

CVE-2021-21731

A CSRF vulnerability exists in the management page of a ZTE product.The vulnerability is caused because the management page does not fully verify whether the request comes from a trusted user. The attacker could submit a malicious request to the affected device to delete the data. This affects:...

CVE-2021-21730

A ZTE product is impacted by improper access control vulnerability. The attacker could exploit this vulnerability to access CLI by brute force attacks.This affects: ZXHN H168N V3.5.0TY.T6...