PT-2025-2571

Name of the Vulnerable Software and Affected Versions Wavlink AC3000 version M33A8.V5030.210505 Description Multiple external config control vulnerabilities exist in the nas.cgi set ftp cfg functionality. A specially crafted HTTP request can lead to permission bypass. An attacker can make an...

PT-2025-2577

Name of the Vulnerable Software and Affected Versions Wavlink AC3000 version M33A8.V5030.210505 Description Multiple external config control vulnerabilities exist in the openvpn.cgi openvpn server setup functionality. A specially crafted HTTP request can lead to arbitrary command execution. An...

CVE-2024-39800: External Control of System or Configuration Setting

Multiple external config control vulnerabilities exists in the openvpn.cgi openvpnserversetup functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger these...

CVE-2024-39790: External Control of System or Configuration Setting

Multiple external config control vulnerabilities exist in the nas.cgi setftpcfg functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to permission bypass. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A configuration...

PT-2025-2570

Name of the Vulnerable Software and Affected Versions: Wavlink AC3000 version M33A8.V5030.210505 Description: Multiple external config control vulnerabilities exist in the nas.cgi set ftp cfg functionality. A specially crafted HTTP request can lead to permission bypass. An attacker can make an...

PT-2025-2573 · Wavlink · Wavlink Ac3000

Name of the Vulnerable Software and Affected Versions: Wavlink AC3000 version M33A8.V5030.210505 Description: Multiple external config control vulnerabilities exist in the nas.cgi set nas proftpd functionality. A specially crafted HTTP request can lead to permission bypass. An attacker can make a...

PT-2025-2574

Name of the Vulnerable Software and Affected Versions Wavlink AC3000 version M33A8.V5030.210505 Description Multiple external config control vulnerabilities exist in the nas.cgi set nas proftpd functionality. A specially crafted HTTP request can lead to permission bypass. An attacker can make an...

CVE-2024-39789: External Control of System or Configuration Setting

Multiple external config control vulnerabilities exist in the nas.cgi setftpcfg functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to permission bypass. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A configuration...

PT-2025-2576

Name of the Vulnerable Software and Affected Versions Wavlink AC3000 version M33A8.V5030.210505 Description Multiple external configuration control vulnerabilities exist in the openvpn.cgi openvpn server setup functionality. A specially crafted HTTP request can lead to arbitrary command execution...

PT-2025-2569

Name of the Vulnerable Software and Affected Versions: Wavlink AC3000 M33A8.V5030.210505 Description: Multiple external config control vulnerabilities exist in the nas.cgi set ftp cfg functionality. A specially crafted HTTP request can lead to permission bypass. An attacker can make an...

PT-2025-2575

Name of the Vulnerable Software and Affected Versions Wavlink AC3000 version M33A8.V5030.210505 Description There are multiple external configuration control vulnerabilities in the openvpn.cgi openvpn server setup function. A specially crafted HTTP request can lead to arbitrary command execution...

CVE-2024-39799: External Control of System or Configuration Setting

Multiple external config control vulnerabilities exists in the openvpn.cgi openvpnserversetup functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger these...

CVE-2024-39794: External Control of System or Configuration Setting

Multiple external config control vulnerabilities exist in the nas.cgi setnas proftpd functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to permission bypass. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A...

CVE-2024-39798: External Control of System or Configuration Setting

Multiple external config control vulnerabilities exists in the openvpn.cgi openvpnserversetup functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger these...

Insecure Configuration Injection

flowise is vulnerable to insecure configuration injection. The vulnerability is due to insufficient protection and lack of secure default settings for the overrideConfig option, which allows developers to inject configuration into the Chainflow during execution...

Mercurial configuration injectable in repo revision when installing via pip

...

CVE-2024-45405

gix-path is a crate of the gitoxide project an implementation of git written in Rust dealing paths and their conversions. Prior to version 0.10.11, gix-path runs git to find the path of a configuration file associated with the git installation, but improperly resolves paths containing unusual or...

CVE-2024-45405

Technical details about CVE-2024-45405 are not provided in the connected documents. Public details in the initial entry describe the issue and patch, but no additional technical specifics are available here. Monitor for updates.

RHEL 6 : unbound (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - unbound: out-of-bounds write via a compressed name in rdatacopy CVE-2019-25042 - Unbound before 1.9.5...

Fedora 38 : python-pip (2024-600031d2e9)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-600031d2e9 advisory. Security fix for CVE-2023-5752 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...