578 matches found
CVE-2025-7378 An improper input validation vulnerability was found on manipulating configuration of ADM
An improper Input Validation vulnerability allows injecting arbitrary values of the NAS configuration file in ASUSTOR ADM. This could potentially lead to system misconfiguration and break the format of the configuation file, causing the NAS to exhibit unexpected behavior. This issue affects ADM:...
PT-2025-28858 · Asustor · Asustor Adm
Name of the Vulnerable Software and Affected Versions: ASUSTOR ADM versions 4.1 through 4.3.1.R5A0 Description: The issue is related to improper input validation, allowing arbitrary values to be injected into the NAS configuration file. This could lead to system misconfiguration, breaking the...
ADC-The hostname of Citrix ADC instance is not displayed in ADM
When we add ADC into ADM, the page of adding ADC to ADM may stuck at "Trying to connect XXX". If we open a new page to check ,we may notice that ADC is added to ADM , but the hostname is not displayed. And we may found the masinventory process is not running as no output is displayed for the...
Agent is not appraising the disk space
ADM Agent Disk Space gets full sporadically, and due to which the ADM Agent goes Down...
NetScaler 14.1 43.x - Citrix ADM Telemetry Download Fails with Error "400 Bad Request"
Citrix ADM users might encounter an immediate "400 Bad Request" error when attempting to download the 'Telemetry file'. As per mpsservice.log - ./mpsservice.log:1 x.x.x.x Debug TCPServerConnection default4473 HTTP Request from URI:/nitro/v1/download/consoletelemetry.tgz, method:GET...
PT-2025-12776 · Asustor · Adm
Name of the Vulnerable Software and Affected Versions: ADM versions 4.1.0 through 4.3.3.RH61 ADM version 5.0.0.RIN1 and earlier Description: A stored Cross-Site Scripting XSS issue exists in the Access Control of ADM. The vulnerability allows an attacker to inject malicious scripts into the folde...
The vulnerability of the adm_add_user() function in the ssi service of TRENDnet TEW-821DAP allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the admadduser function in the ssi service of TRENDnet TEW-821DAP wireless access points is related to the escape of the operation outside the buffer in memory when processing the username parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code o...
Malicious code in sample-nodejs-vsk-with-adm (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 268548cd4032a80297c2f7fd9c2e1171027f9ecf4fabcb35debfb7c1fbc0cc13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-39294
A buffer overflow vulnerability exists in the adm.cgi setwzdgw4G functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger this vulnerability...
PT-2025-2561 · Wavlink · Wavlink Ac3000
Name of the Vulnerable Software and Affected Versions: Wavlink AC3000 version M33A8.V5030.210505 Description: A buffer overflow vulnerability exists in the set sys adm function of adm.cgi. This issue can be triggered by a specially crafted HTTP request, leading to a stack-based buffer overflow. A...
VulnCheck KEV: CVE-2022-23900
A command injection vulnerability in the API of the Wavlink WL-WN531P3 router, version M31G3.V5030.201204, allows an attacker to achieve unauthorized remote code execution via a malicious POST request through /cgi-bin/adm.cgi...
AZL-53676 CVE-2024-52337 affecting package tuned for versions less than 2.15.0-5
A log spoofing flaw was found in the Tuned package due to improper sanitization of some API arguments. This flaw allows an attacker to pass a controlled sequence of characters; newlines can be inserted into the log. Instead of the 'evil' the attacker could mimic a valid TuneD log line and trick t...
DEBIAN-CVE-2024-52337
A log spoofing flaw was found in the Tuned package due to improper sanitization of some API arguments. This flaw allows an attacker to pass a controlled sequence of characters; newlines can be inserted into the log. Instead of the 'evil' the attacker could mimic a valid TuneD log line and trick t...
SSL Dashboard in ADM does not show TLS Information of SDX
Don't see TLS details of SDX NetScaler in ADM SSL Dashboard. We can see TLS details of all ADC's in the SSL Dashboard but for SDX it is missing...
CVE-2024-30951
FUDforum v3.1.3 was discovered to contain a reflected cross-site scripting XSS vulnerability via the chpos parameter at /adm/admsmiley.php...
CVE-2023-51146
Buffer Overflow vulnerability in TRENDnet AC1200 TEW-821DAP with firmware version 3.00b06 allows an attacker to execute arbitrary code via the admadduser action...
CVE-2023-51147
Buffer Overflow vulnerability in TRENDnet Trendnet AC1200 TEW-821DAP with firmware version 3.00b06 allows an attacker to execute arbitrary code via the admmodpwd action...
CVE-2023-51147
Buffer Overflow vulnerability in TRENDnet Trendnet AC1200 TEW-821DAP with firmware version 3.00b06 allows an attacker to execute arbitrary code via the admmodpwd action...