CVE-2024-8781 Container Escape Vulnerability in TR7's Application Security Platform (ASP)

Execution with Unnecessary Privileges, : Improper Protection of Alternate Path vulnerability in TR7 Application Security Platform ASP allows Privilege Escalation, -Privilege Abuse. This issue affects Application Security Platform ASP: v1.4.25.188...

CVE-2024-8781: Execution with Unnecessary Privileges

Execution with Unnecessary Privileges, : Improper Protection of Alternate Path vulnerability in TR7 Application Security Platform ASP allows Privilege Escalation, -Privilege Abuse. This issue affects Application Security Platform ASP: v1.4.25.188...

D-Link DI-8003 Router Arbitrary Command Execution

The vulnerability of the upgradefilterasp function in the /upgradefilter.asp file of the D-Link DI-8003 router microprogramming system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

D-Link DI-8003 Arbitrary Command Execution

The vulnerability of the dbsrvasp function in the /dbsrv.asp file of the D-Link DI-8003 device’s microprogramming system is related to buffer overflow in the stack. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely by injecting a specially crafted comma...

CVE-2024-11047 D-Link DI-8003 upgrade_filter.asp upgrade_filter_asp stack-based overflow

A vulnerability was found in D-Link DI-8003 16.07.16A1. It has been declared as critical. Affected by this vulnerability is the function upgradefilterasp of the file /upgradefilter.asp. The manipulation of the argument path leads to stack-based buffer overflow. The attack can be launched remotely...

MAL-2024-9834 Malicious code in selected-lavender-asp (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in selected-lavender-asp (npm)

--- -= Per source details. Do not edit below this line.=-...

D-Link DI_8200 security vulnerabilities

The D-Link DI8200 is an enterprise router from China's AUO D-Link. The D-Link DI8200 suffers from a command injection vulnerability that originates from manipulation of the parameter path in the file upgradefilter.asp. No details of the vulnerability are provided at this time...

PT-2024-31149

Name of the Vulnerable Software and Affected Versions DI 8200 version 16.07.26A1 Description A buffer overflow issue was found in the dbsrv asp function. The strcpy function is executed without checking the length of the string, leading to a buffer overflow. Recommendations For DI 8200 version...

Malicious code in asp.app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c7c024883d91bf9fdd3cb49b01873767cbb851c7b663fd2c1ac9d12030157b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Use After Free

Overview Microsoft.AspNetCore.App.Runtime.linux-arm64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Use After Free that could allow remote code executi...

Use After Free

Overview Microsoft.AspNetCore.App.Runtime.linux-musl-arm is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Use After Free that could allow remote code...

Use After Free

Overview Microsoft.AspNetCore.App.Runtime.win-x64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Use After Free that could allow remote code execution...

Use After Free

Overview Microsoft.AspNetCore.App.Runtime.win-arm is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Use After Free that could allow remote code execution...

Malicious Package

Overview asp.app is a malicious package. This package contains malicious code that collects sensitive information about the victim and sends it to the attacker's remote server. While this package might be attempting to impersonate a valid organization, there is no connection between that...

D-Link DI-8004W Router Arbitrary Command Execution

The vulnerability of the upgradefilterasp function in D-Link DI-8004W router microprogramming software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

D-Link DI-8100 Router Command Execution

The vulnerability of the upgradefilterasp function located in the upgradefilter.asp script of D-Link DI-8100 routers is related to the lack of measures taken at the control level to clean up data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

D-Link DI-8300 router Arbitrary Command Execution

The vulnerability of the upgradefilterasp function in D-Link DI-8300 router microprogramming software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands via GET requests...

Internet Explorer help

Internet Explorer help Internet Explorer 11 support ended Support for Internet Explorer 11 ended on June 15, 2022. If any site you visit needs Internet Explorer, you can reload it with Internet Explorer mode in Microsoft Edge. Get started with Microsoft Edge Make the switch from Internet Explorer...

D-Link DI-8300 security vulnerabilities

The D-Link DI-8300 is a wireless broadband router designed for small to medium-sized network environments from China's D-Link. A command injection vulnerability exists in the D-Link DI-8300 version v16.07.26A1, which stems from the upgradefilterasp function failing to properly filter constructor...