195 matches found
PT-2024-20680 · Raspap · Raspap
Name of the Vulnerable Software and Affected Versions: RaspAP raspap-webgui version 3.0.9 Description: A critical issue affects the processing of the file includes/provider.php in the HTTP POST Request Handler component. The manipulation of the country argument leads to code injection. This issue...
RaspAP Code Injection Vulnerability
RaspAP is application software for simple wireless AP setup and management of Debian-based devices. RaspAP raspap-webgui version 3.0.9 suffers from a code injection vulnerability that stems from the parameter country in the file include/provider.php that can lead to code injection...
Denial of Service (DoS)
Overview billz/raspap-webgui is a Simple wireless AP setup and mangement for Debian-based devices. Affected versions of this package are vulnerable to Denial of Service DoS due to improper authentication. An attacker can cause a persistent denial of service bricking by sending a specially crafted...
GHSA-VC9F-MGXR-H32R raspap-webgui vulnerable to denial of service
RaspAP aka raspap-webgui through 3.0.9 allows remote attackers to cause a persistent denial of service bricking via a crafted request...
raspap-webgui vulnerable to denial of service
RaspAP aka raspap-webgui through 3.0.9 allows remote attackers to cause a persistent denial of service bricking via a crafted request...
CVE-2024-28753
RaspAP aka raspap-webgui through 3.0.9 allows remote attackers to read the /etc/passwd file via a crafted request...
CVE-2024-28754
RaspAP aka raspap-webgui through 3.0.9 allows remote attackers to cause a persistent denial of service bricking via a crafted request...
Cross site request forgery (csrf)
RaspAP aka raspap-webgui through 3.0.9 allows remote attackers to read the /etc/passwd file via a crafted request...
Cross site request forgery (csrf)
RaspAP aka raspap-webgui through 3.0.9 allows remote attackers to cause a persistent denial of service bricking via a crafted request...
RaspAP security vulnerability
RaspAP is application software for simple wireless AP setup and management of Debian-based devices. A security vulnerability exists in RaspAP 3.0.9 and earlier versions, which stems from a vulnerability that allows remote attackers to read the /etc/passwd file via a crafted request...
RaspAP security vulnerability
RaspAP is application software for simple wireless AP setup and management of Debian-based devices. A security vulnerability exists in RaspAP 3.0.9 and earlier versions that originated from allowing a remote attacker to cause a persistent denial of service via a crafted request...
CVE-2024-28753
RaspAP aka raspap-webgui through 3.0.9 allows remote attackers to read the /etc/passwd file via a crafted request...
CVE-2024-28753
CVE-2024-28753 affects RaspAP (raspap-webgui) up to version 3.0.9. The issue allows remote attackers to read the /etc/passwd file via a crafted request, revealing sensitive local user information. Root cause: likely an improper access path/authorization check that permits reading sensitive system...
PT-2024-22561 · Raspap · Raspap
Name of the Vulnerable Software and Affected Versions: RaspAP aka raspap-webgui versions 3.0.9 and earlier Description: The issue allows remote attackers to read the /etc/passwd file via a crafted request. Recommendations: For RaspAP aka raspap-webgui versions 3.0.9 and earlier, update to a versi...
CVE-2024-28754
RaspAP aka raspap-webgui through 3.0.9 allows remote attackers to cause a persistent denial of service bricking via a crafted request...
CVE-2024-28754
CVE-2024-28754 affects RaspAP (raspap-webgui) up to version 3.0.9. A remote attacker can trigger a crafted request to cause a persistent denial of service (bricking). The issue is documented across multiple sources (including Red Hat and OSV/GHSA/NVD entries). Remediation available in at least on...
CVE-2024-28754
RaspAP aka raspap-webgui through 3.0.9 allows remote attackers to cause a persistent denial of service bricking via a crafted request...
PT-2024-22562 · Raspap · Raspap
Name of the Vulnerable Software and Affected Versions: RaspAP aka raspap-webgui versions 3.0.9 and earlier Description: The issue allows remote attackers to cause a persistent denial of service, potentially leading to device bricking, via a crafted request. Recommendations: For RaspAP aka...