CVE-2023-35086-POC

CVE-2023-35086-POC 2023年7月25日, Altin tin-z, github.com/tin-z 簡単な説明 ASUS RT-AX56U V2 および RT-AC86U ルーターファームウェアのバージョン 3.0.0.4.38650460 以下、および 3.0.0.438651529 以下には、httpd サービスの detwan.cgi 関数に書式文字列の脆弱性が存在し、攻撃者が悪意のあるデータを構築するとコード実行が引き起こされる可能性があります。この脆弱性は、httpd サービスを使用する他の ASUS デバイスにも影響を与えます。詳細についてはこちら 詳細...

EUVD-2023-42972

Malicious code in bioql PyPI...

EUVD-2023-42973

Malicious code in bioql PyPI...

EUVD-2022-27208

Malicious code in bioql PyPI...

EUVD-2022-28886

Malicious code in bioql PyPI...

EUVD-2022-28888

Malicious code in bioql PyPI...

EUVD-2022-28887

Malicious code in bioql PyPI...

EUVD-2023-42974

Malicious code in bioql PyPI...

CVE-2023-39239

It is identified a format string vulnerability in ASUS RT-AX56U V2’s General function API. This vulnerability is caused by lacking validation for a specific value within its apply.cgi module. A remote attacker with administrator privilege can exploit this vulnerability to perform remote arbitrary...

CVE-2023-39238

It is identified a format string vulnerability in ASUS RT-AX56U V2. This vulnerability is caused by lacking validation for a specific value within its setiperf3svr.cgi module. A remote attacker with administrator privilege can exploit this vulnerability to perform remote arbitrary code execution,...

CVE-2023-39239

It is identified a format string vulnerability in ASUS RT-AX56U V2’s General function API. This vulnerability is caused by lacking validation for a specific value within its apply.cgi module. A remote attacker with administrator privilege can exploit this vulnerability to perform remote arbitrary...

CVE-2023-39240

It is identified a format string vulnerability in ASUS RT-AX56U V2’s iperf client function API. This vulnerability is caused by lacking validation for a specific value within its setiperf3cli.cgi module. A remote attacker with administrator privilege can exploit this vulnerability to perform remo...

Format string

It is identified a format string vulnerability in ASUS RT-AX56U V2’s General function API. This vulnerability is caused by lacking validation for a specific value within its apply.cgi module. An unauthenticated remote attacker can exploit this vulnerability without privilege to perform remote...

Format string

It is identified a format string vulnerability in ASUS RT-AX56U V2. This vulnerability is caused by lacking validation for a specific value within its setiperf3svr.cgi module. An unauthenticated remote attacker can exploit this vulnerability without privilege to perform remote arbitrary code...

Format string

It is identified a format string vulnerability in ASUS RT-AX56U V2’s iperf client function API. This vulnerability is caused by lacking validation for a specific value within its setiperf3cli.cgi module. An unauthenticated remote attacker can exploit this vulnerability without privilege to perfor...

CVE-2023-39240 ASUS RT-AX55、RT-AX56U_V2 - Format String - 3

It is identified a format string vulnerability in ASUS RT-AX56U V2’s iperf client function API. This vulnerability is caused by lacking validation for a specific value within its setiperf3cli.cgi module. A remote attacker with administrator privilege can exploit this vulnerability to perform remo...

CVE-2023-39240

CVE-2023-39240 affects ASUS RT-AX56U V2: a format string vulnerability in the iperf client API, caused by insufficient validation in set_iperf3_cli.cgi. A remote attacker with administrator privileges could achieve remote code execution or service disruption. Exploitation details are not provided...

CVE-2023-39239 ASUS RT-AX55、RT-AX56U_V2、RT-AC86U - Format String - 2

It is identified a format string vulnerability in ASUS RT-AX56U V2’s General function API. This vulnerability is caused by lacking validation for a specific value within its apply.cgi module. A remote attacker with administrator privilege can exploit this vulnerability to perform remote arbitrary...

CVE-2023-39239 ASUS RT-AX55、RT-AX56U_V2、RT-AC86U - Format String - 2

It is identified a format string vulnerability in ASUS RT-AX56U V2’s General function API. This vulnerability is caused by lacking validation for a specific value within its apply.cgi module. A remote attacker with administrator privilege can exploit this vulnerability to perform remote arbitrary...

CVE-2023-39238

CVE-2023-39238 affects ASUS RT-AX56U V2. The issue is a format string vulnerability in the set_iperf3_svr.cgi module caused by missing input validation. A remote attacker with administrator privileges can trigger remote arbitrary code execution, alter system operation, or disrupt service. Reporte...