234 matches found
RaspAP 操作系统命令注入漏洞
RaspAP is a simple wireless AP setup and management for Debian-based devices. An operating system command injection vulnerability exists in RaspAP, which stems from the failure to properly filter "interface", "ssid" in /hostapd in RaspAP versions 2.6 through 2.6.5, ";", "$" and other special...
RaspAP 安全漏洞
RaspAP is a simple wireless AP setup and management for Debian-based devices. A security vulnerability exists in RaspAP, which stems from multiple elevation of privilege vulnerabilities in RaspAP from version 1.5 to 2.6.5 that could allow a remote, authenticated attacker to inject arbitrary...
CVE-2021-33358: Improper Neutralization of Special Elements used in an OS Command
Multiple vulnerabilities exist in RaspAP 2.3 to 2.6.5 in the "interface", "ssid" and "wpapassphrase" POST parameters in /hostapd, when the parameter values contain special characters such as ";" or "$" which enables an authenticated attacker to execute arbitrary OS commands...
CVE-2021-33357: Improper Neutralization of Special Elements used in an OS Command
A vulnerability exists in RaspAP 2.6 to 2.6.5 in the "iface" GET parameter in /ajax/networking/getnetcfg.php, when the "iface" parameter value contains special characters such as ";" which enables an unauthenticated attacker to execute arbitrary OS commands...
PT-2021-20126
Name of the Vulnerable Software and Affected Versions RaspAP versions 2.3 through 2.6.5 Description The issue allows an authenticated attacker to execute arbitrary OS commands by exploiting vulnerabilities in the interface, ssid, and wpa passphrase POST parameters in the "/hostapd" API endpoint...
Exploit for OS Command Injection in Raspap
CVE-2020-24572-POC An issue was discovered in includes/webcons...
RaspAP Remote Code Execution Vulnerability
RaspAP is a software solution that makes it easy to deploy a Raspberry Pi as a wireless AP access point, with a responsive set of WebUIs to control WiFi, as easy to use as a home router. A remote code execution vulnerability exists in includes/webconsole.php in RaspAP 2.5, which can be exploited ...
CVE-2020-24572
An issue was discovered in includes/webconsole.php in RaspAP 2.5. With authenticated access, an attacker can use a misconfigured and virtually unrestricted web console to attack the underlying OS Raspberry Pi running this software, and execute commands on the system including ones for uploading o...
CVE-2020-24572
An issue was discovered in includes/webconsole.php in RaspAP 2.5. With authenticated access, an attacker can use a misconfigured and virtually unrestricted web console to attack the underlying OS Raspberry Pi running this software, and execute commands on the system including ones for uploading o...
Code injection
An issue was discovered in includes/webconsole.php in RaspAP 2.5. With authenticated access, an attacker can use a misconfigured and virtually unrestricted web console to attack the underlying OS Raspberry Pi running this software, and execute commands on the system including ones for uploading o...
CVE-2020-24572
CVE-2020-24572 affects RaspAP 2.5 and stems from an issue in includes/webconsole.php. With authenticated access, a misconfigured (and virtually unrestricted) web console can be used to attack the underlying OS (Raspberry Pi) running RaspAP, allowing execution of system commands, including uploadi...
CVE-2020-24572
An issue was discovered in includes/webconsole.php in RaspAP 2.5. With authenticated access, an attacker can use a misconfigured and virtually unrestricted web console to attack the underlying OS Raspberry Pi running this software, and execute commands on the system including ones for uploading o...
CVE-2020-24572: Improper Neutralization of Special Elements used in an OS Command
An issue was discovered in includes/webconsole.php in RaspAP 2.5. With authenticated access, an attacker can use a misconfigured and virtually unrestricted web console to attack the underlying OS Raspberry Pi running this software, and execute commands on the system including ones for uploading o...