Remote code execution

Array Networks Array AG Series and vxAG 9.4.0.481 and earlier allow remote code execution. An attacker can browse the filesystem on the SSL VPN gateway using a flags attribute in an HTTP header without authentication. The product could then be exploited through a vulnerable URL. The 2023-03-09...

CVE-2023-25814

creationtimestamp| type| source ---|---|--- 2023-03-09 20:20:25+00:00| seen| https://t.me/cibsecurity/59740...

CVE-2023-1293

creationtimestamp| type| source ---|---|--- 2023-03-09 18:20:33+00:00| seen| https://t.me/cibsecurity/59730...

CVE-2023-26209

creationtimestamp| type| source ---|---|--- 2023-03-09 18:20:25+00:00| seen| https://t.me/cibsecurity/59725...

CVE-2022-33256

creationtimestamp| type| source ---|---|--- 2023-03-09 11:50:10+00:00| seen| https://t.me/truesecator/4145 2023-03-11 00:21:31+00:00| seen| https://t.me/cibsecurity/59837...

CVE-2023-26489

creationtimestamp| type| source ---|---|--- 2023-03-09 08:43:42+00:00| seen| https://t.me/cibsecurity/59684 2023-03-12 10:21:32+00:00| published-proof-of-concept| Telegram/gD3ZHB22BRsyxDjUS5eMDdMCCYJLlmDmgybsdsjOwN4-Lko...

CVE-2023-26110

creationtimestamp| type| source ---|---|--- 2023-03-09 07:15:00+00:00| seen| https://t.me/cibsecurity/59717...

CVE-2018-25081

creationtimestamp| type| source ---|---|--- 2023-03-09 02:23:34+00:00| seen| https://t.me/cibsecurity/59712...

CVE-2022-4007

creationtimestamp| type| source ---|---|--- 2023-03-09 02:23:32+00:00| seen| https://t.me/cibsecurity/59710...

CVE-2021-33353

creationtimestamp| type| source ---|---|--- 2023-03-09 00:23:18+00:00| seen| https://t.me/cibsecurity/59704 2025-03-04 21:35:55+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6443...

CVE-2023-27477

creationtimestamp| type| source ---|---|--- 2023-03-09 00:23:16+00:00| seen| https://t.me/cibsecurity/59702...