14 matches found
UniFi OS Server - Command Injection
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection. id: CVE-2026-34910 info: name: UniFi OS Server - Command Injection author: Kazgangap severity: critical description: | A malicious actor...
Exploit for Improper Input Validation in Ui Unifi_Os_Server
CVE-2026-34910 / CVE-2026-34909 — UniFi OS Unauthenticated RCE...
CVE-2026-34910
creationtimestamp| type| source ---|---|--- 2026-05-22 14:49:07+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116618778795603147 2026-05-26 09:13:20+00:00| seen| https://ccb.belgium.be/advisories/warning-ubiquiti-has-addressed-multiple-critical-vulnerabilities-unifi-os-patch 2026-05-...
CVE-2026-34910
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection...
CVE-2026-34910
CVE-2026-34910 affects UniFi OS Server and is triggered by an Improp er Input Validation vulnerability in UniFi OS devices, enabling an unauthenticated Command Injection over the network. The connected documentation shows that the vulnerability path leads to remote code execution with potential f...
MAL-2025-34910 Malicious code in test-mlw2-avers-tymps (npm)
The package test-mlw2-avers-tymps was found to contain malicious code...
CVE-2022-34910
An issue was discovered in the A4N Aremis 4 Nomad application 1.5.0 for Android. It uses a local database to store data and accounts. However, the password is stored in cleartext. Therefore, an attacker can retrieve the passwords of other users that used the same device...
CVE-2022-34910
creationtimestamp| type| source ---|---|--- 2023-02-27 16:27:54+00:00| seen| https://t.me/cibsecurity/58941...
CVE-2022-34910
The CVE-2022-34910 entry concerns the A4N (Aremis 4 Nomad) Android app 1.5.0, where user passwords are stored in cleartext in the local data store. This root cause enables any attacker with device access to retrieve other users’ passwords, describing a local, data-leak risk rather than a remote e...
CVE-2022-34910
An issue was discovered in the A4N Aremis 4 Nomad application 1.5.0 for Android. It uses a local database to store data and accounts. However, the password is stored in cleartext. Therefore, an attacker can retrieve the passwords of other users that used the same device...
CVE-2021-34910
creationtimestamp| type| source ---|---|--- 2022-01-14 00:23:59+00:00| seen| https://t.me/cibsecurity/35463...
CVE-2021-34910
CVE-2021-34910 affects Bentley View 10.15.0.75. The vulnerability arises from parsing DGN files and is caused by insufficient validation of user-supplied data, leading to an out-of-bounds read. This could allow a local attacker who can coerce the target to visit a malicious page or open a malicio...
