CVE-2026-34908

A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi OS devices to make unauthorized changes to the system...

CVE-2026-34908

A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi OS devices to make unauthorized changes to the system...

CVE-2026-34908

The CVE-2026-34908 entry describes an Improper Access Control vulnerability in UniFi OS devices. A network-adjacent attacker could cause unauthorized changes to the system with network access and no user interaction, as reflected by a CVSS 3.1 base score of 10.0 (CRITICAL) with high impact to con...

MAL-2025-34908 Malicious code in test-mlw2-autos-edger (npm)

The package test-mlw2-autos-edger was found to contain malicious code...

CVE-2022-34908

An issue was discovered in the A4N Aremis 4 Nomad application 1.5.0 for Android. It possesses an authentication mechanism; however, some features do not require any token or cookie in a request. Therefore, an attacker may send a simple HTTP request to the right endpoint, and obtain authorization ...

CVE-2022-34908

creationtimestamp| type| source ---|---|--- 2023-02-27 16:27:48+00:00| seen| https://t.me/cibsecurity/58938 2025-03-10 20:38:53+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7050 2025-03-11 04:41:13+00:00| seen| Telegram/k35qgeSbpJwUh4kRbnMRkyTko0pm-pVzkYlHjRFae-DuDNVg...

CVE-2022-34908

CVE-2022-34908 affects A4N (Aremis 4 Nomad) Android app (version 1.5.0). The issue is in the authentication flow: while an auth mechanism exists, some endpoints do not require a token or cookie, allowing an attacker to send a simple HTTP request to the appropriate endpoint and obtain authorizatio...

CVE-2021-34908

creationtimestamp| type| source ---|---|--- 2022-01-14 00:24:10+00:00| seen| https://t.me/cibsecurity/35470...

CVE-2021-34908

Bentley View 10.15.0.75 is affected by CVE-2021-34908. The issue arises in the parsing of J2K files where the attacker does not validate the existence of an object before performing operations, leading to remote code execution. Exploitation requires user interaction (e.g., visiting a malicious pa...

CVE-2025-34908

CVE-2025-34908 entry is rejected/not used and does not represent an active vulnerability.

CVE-2025-34908

...