CVE-2023-34644

Remote code execution vulnerability in Ruijie Networks Product: RG-EW series home routers and repeaters EW3.01B11P204, RG-NBS and RG-S1930 series switches SWITCH3.01B11P218, RG-EG series business VPN routers EG3.01B11P216, EAP and RAP series wireless access points AP3.01B11P218, NBC series wirele...

Ruijie Networks Product 代码注入漏洞

Ruijie Networks Product is a series of Ruijie wireless products from China-based Ruijie Networks. A security vulnerability exists in the Ruijie Networks Product that originates from an API privilege that allows a remote attacker to escalate via a POST request to /cgi-bin/luci/ and affects the...

CVE-2023-34644

CVE-2023-34644 is a remote code execution vulnerability in Ruijie Networks products. A crafted POST to /cgi-bin/luci/api/auth allows unauthorized remote attackers to gain the highest privileges. Affected products and versions include Ruijie RG-EW series (EW_3.0(1)B11P204), RG-NBS and RG-S1930 ser...

CVE-2023-34644: Improper Control of Generation of Code

Remote code execution vulnerability in Ruijie Networks Product: RG-EW series home routers and repeaters EW3.01B11P204, RG-NBS and RG-S1930 series switches SWITCH3.01B11P218, RG-EG series business VPN routers EG3.01B11P216, EAP and RAP series wireless access points AP3.01B11P218, NBC series wirele...

This Week in Security News: Cybercriminals Use Stolen Data and Hacking Tools as Prizes in Poker Games and Rap Battles and VirusTotal Now Supports Trend Micro ELF Hash

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, learn about how cybercriminals are passing the time during the COVID-19 pandemic with online poker games, where the prizes include stolen...

STOMP 2 DIS: Brilliance in the (Visual) Basics

Throughout January 2020, FireEye has continued to observe multiple targeted phishing campaigns designed to download and deploy a backdoor we track as MINEBRIDGE. The campaigns primarily targeted financial services organizations in the United States, though targeting is likely more widespread than...

rap-fr.fr Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1080627 Security Researcher haxmov Helped patch 708 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting rap-fr.fr website and its...

rap-portal.org Open Redirect vulnerability

Open Bug Bounty ID: OBB-678282 Description| Value ---|--- Affected Website:| rap-portal.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

CVE-2018-11031

application/home/controller/debug.php in PHPRAP 1.0.4 through 1.0.8 has SSRF via the /debug URI, as demonstrated by an apiurl=file:////etc/passwd&apimethod=get POST request...

Reflective Cross-Site Scripting Vulnerability in AliMom RAP

AliMom RAP is an omni-directional marketing platform. A reflective cross-site scripting vulnerability exists in AliMom RAP. The vulnerability is due to the account parameter fails to correctly filter and escape the data submitted by the user, the attacker through the construction of XSS statement...

Create your bases Rap - Dynamic Code Loading, External URLs, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Create your bases Rap published at the 'play' market has multiple vulnerabilities...

CVE-2015-1388

The "RAP console" feature in ArubaOS 5.x through 6.2.x, 6.3.x before 6.3.1.15, and 6.4.x before 6.4.2.4 on Aruba access points in Remote Access Point AP mode allows remote attackers to execute arbitrary commands via unspecified vectors...

CVE-2015-1388

The "RAP console" feature in ArubaOS 5.x through 6.2.x, 6.3.x before 6.3.1.15, and 6.4.x before 6.4.2.4 on Aruba access points in Remote Access Point AP mode allows remote attackers to execute arbitrary commands via unspecified vectors...

PT-2015-5259

Name of the Vulnerable Software and Affected Versions ArubaOS versions 5.x through 6.2.x ArubaOS versions 6.3.x before 6.3.1.15 ArubaOS versions 6.4.x before 6.4.2.4 Description The issue affects the "RAP console" feature on Aruba access points in Remote Access Point AP mode, allowing remote...

CVE-2015-1388: Improper Neutralization of Special Elements used in an OS Command

The "RAP console" feature in ArubaOS 5.x through 6.2.x, 6.3.x before 6.3.1.15, and 6.4.x before 6.4.2.4 on Aruba access points in Remote Access Point AP mode allows remote attackers to execute arbitrary commands via unspecified vectors...

CVE-2014-4766

IBM Sametime Classic Meeting Server 8.0.x and 8.5.x allows remote attackers to obtain sensitive information by reading an exported Record and Playback RAP file...

CVE-2014-4766

IBM Sametime Classic Meeting Server 8.0.x and 8.5.x allows remote attackers to obtain sensitive information by reading an exported Record and Playback RAP file...

CVE-2014-4766: Exposure of Sensitive Information to an Unauthorized Actor

IBM Sametime Classic Meeting Server 8.0.x and 8.5.x allows remote attackers to obtain sensitive information by reading an exported Record and Playback RAP file...

Radasm .rap file local buffer overflow vulnerability

No description provided by source. includestdio.h includewindows.h includegetopt.h void genrandomchar,const int; void printchar; unsigned int getFsizeFILE,char; void buildfilechar; int makebindshellunsigned short; void help; void printshell; DWORD SearchStreamconst char ,sizet,const char ,sizet;...

Radasm 2.2.1.6 - (.rap ) Local Buffer Overflow PoC

No description provided by source. /Radasm .rap file local buffer overflow POC I'll be back in a few hours with the exploit. The vuln is in the filename field. snip Files...1=AVP OVERFLOW... snip / includestdio.h void genrandomchar,const int; void printchar; unsigned int getFsizeFILE,char; void...