Search: “luci”

9 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Policy & legal 12 Data breach 7 Phishing & fraud 6 Ransomware 6 Vulnerability 5 Exploit / PoC 4 Industry 3 Malware 2 Threat actor 2 Research 1 Advisory 1

SeverityAll critical 9 high 17 medium 9 low 14 info 0

[dos] LuCI DHCPv6 - Lease Hostname Stored Cross-Site Scripting

Stored cross-site scripting in OpenWrt LuCI via malicious DHCPv6 lease hostnames allows router interface attacks.

Exploit-DB entry 52637 describes a stored cross-site scripting vulnerability in LuCI, the OpenWrt web administration interface. A attacker on the local network can set a malicious hostname that gets stored in DHCPv6 lease data and rendered unsafely in the LuCI UI. When an administrator views the lease status page, the injected script executes in the router's management context.