NETGEAR ProSAFE Plus - Unauthenticated Remote Code Execution

NETGEAR ProSAFE Plus before 2.6.0.43 is susceptible to unauthenticated remote code execution. Any HTML page is allowed as a valid endpoint to submit POST requests, allowing debug action via the submitId and debugCmd parameters. The problem is publicly exposed in the login.html webpage, which has ...

CVE-2021-27276

This vulnerability allows remote attackers to delete arbitrary files on affected installations of NETGEAR ProSAFE Network Management System 1.6.0.26. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists...

CVE-2021-27272

This vulnerability allows remote attackers to delete arbitrary files on affected installations of NETGEAR ProSAFE Network Management System 1.6.0.26. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists...

CVE-2021-27273

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System 1.6.0.26. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists...

CVE-2021-27275

This vulnerability allows remote attackers to disclose sensitive information and delete arbitrary files on affected installations of NETGEAR ProSAFE Network Management System 1.6.0.26. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be...

EUVD-2021-14040

Malware in sbrugna...

EUVD-2011-1673

Malware in sbrugna...

EUVD-2014-4783

Malware in sbrugna...

EUVD-2011-1674

Malware in sbrugna...

EUVD-2023-41923

Malicious code in bioql PyPI...

EUVD-2023-41921

Malicious code in bioql PyPI...

EUVD-2023-41928

Malicious code in bioql PyPI...

EUVD-2023-41927

Malicious code in bioql PyPI...

EUVD-2023-53627

Malicious code in bioql PyPI...

EUVD-2023-41926

Malicious code in bioql PyPI...

EUVD-2023-41925

Malicious code in bioql PyPI...

EUVD-2023-53628

Malicious code in bioql PyPI...

EUVD-2024-46484

Malicious code in bioql PyPI...

EUVD-2023-45699

Malicious code in bioql PyPI...

CVE-2022-29383

NETGEAR ProSafe SSL VPN firmware FVS336Gv2 and FVS336Gv3 was discovered to contain a SQL injection vulnerability via USERDBDomains.Domainname at cgi-bin/platform.cgi...