743 matches found
Ruijie Networks RG-UAC 操作系统命令注入漏洞
Ruijie Networks RG-UAC is an Internet behavior management and auditing product from China's Ruijie Networks Ruijie Networks. It is used to solve Internet auditing problems. An operating system command injection vulnerability exists in Ruijie Networks RG-UAC 20240428 and earlier versions, which...
PT-2024-31431 · Ruijie · Ruijie Rg-Uac
Name of the Vulnerable Software and Affected Versions: Ruijie RG-UAC up to 20240428 Description: A critical issue affects some unknown functionality of the file /view/networkConfig/ArpTable/arp add commit.php. The manipulation of the text ip addr and text mac addr arguments leads to os command...
Ruijie Networks RG-UAC 操作系统命令注入漏洞
Ruijie Networks RG-UAC is an Internet behavior management and auditing product from China's Ruijie Networks Ruijie Networks. It is used to solve Internet auditing problems. An operating system command injection vulnerability exists in Ruijie Networks RG-UAC 20240428 and earlier versions, which...
CVE-2024-4503: Improper Neutralization of Special Elements used in an OS Command
A vulnerability classified as critical was found in Ruijie RG-UAC up to 20240428. Affected by this vulnerability is an unknown functionality of the file /view/dhcp/dhcpConfig/dhcprelaycommit.php. The manipulation of the argument interfacefrom leads to os command injection. The attack can be...
CVE-2024-4501: Improper Neutralization of Special Elements used in an OS Command
A vulnerability was found in Ruijie RG-UAC up to 20240428. It has been rated as critical. This issue affects some unknown processing of the file /view/bugSolve/captureData/commit.php. The manipulation of the argument tcpDump leads to os command injection. The attack may be initiated remotely. The...
PT-2024-31421 · Ruijie · Ruijie Rg-Uac
Name of the Vulnerable Software and Affected Versions: Ruijie RG-UAC up to 20240428 Description: A critical issue has been found, allowing for OS command injection through the manipulation of the oldipmask, oldgateway, and olddevname arguments in an unknown function of the file...
Ruijie Networks RG-UAC 操作系统命令注入漏洞
Ruijie Networks RG-UAC is an Internet behavior management and auditing product from China's Ruijie Networks Ruijie Networks. It is used to solve Internet auditing problems. An operating system command injection vulnerability exists in Ruijie Networks RG-UAC 20240428 and earlier versions, which...
CVE-2024-4505: Improper Neutralization of Special Elements used in an OS Command
A vulnerability, which was classified as critical, was found in Ruijie RG-UAC up to 20240428. This affects an unknown part of the file /view/IPV6/ipv6Addr/ipaddraddcommit.php. The manipulation of the argument prelen/ethname leads to os command injection. It is possible to initiate the attack...
CVE-2024-4506: Improper Neutralization of Special Elements used in an OS Command
A vulnerability has been found in Ruijie RG-UAC up to 20240428 and classified as critical. This vulnerability affects unknown code of the file /view/IPV6/ipv6Addr/ipaddreditcommit.php. The manipulation of the argument textipaddr/orgprelen/orgname leads to os command injection. The attack can be...
CVE-2024-4255
A vulnerability, which was classified as critical, has been found in Ruijie RG-UAC up to 20240419. This issue affects some unknown processing of the file /view/network Config/GRE/greeditcommit.php. The manipulation of the argument name leads to os command injection. The attack may be initiated...
CVE-2024-4255 Ruijie RG-UAC gre_edit_commit.php os command injection
A vulnerability, which was classified as critical, has been found in Ruijie RG-UAC up to 20240419. This issue affects some unknown processing of the file /view/network Config/GRE/greeditcommit.php. The manipulation of the argument name leads to os command injection. The attack may be initiated...
CVE-2024-4255
CVE-2024-4255 affects Ruijie RG-UAC (up to 20240419). The issue is in the file /view/network Config/GRE/gre_edit_commit.php, where manipulation of the parameter name enables OS command injection. Exploitation may be possible remotely and the vulnerability entry has been publicized (VDB-262145). P...
CVE-2024-4255 Ruijie RG-UAC gre_edit_commit.php os command injection
A vulnerability, which was classified as critical, has been found in Ruijie RG-UAC up to 20240419. This issue affects some unknown processing of the file /view/network Config/GRE/greeditcommit.php. The manipulation of the argument name leads to os command injection. The attack may be initiated...
Ukraine Targeted in Cyberattack Exploiting 7-Year-Old Microsoft Office Flaw
Cybersecurity researchers have discovered a targeted operation against Ukraine that has been found leveraging a nearly seven-year-old flaw in Microsoft Office to deliver Cobalt Strike on compromised systems. The attack chain, which took place at the end of 2023 according to Deep Instinct, employs...
CVE-2024-4255: Improper Neutralization of Special Elements used in an OS Command
A vulnerability, which was classified as critical, has been found in Ruijie RG-UAC up to 20240419. This issue affects some unknown processing of the file /view/network Config/GRE/greeditcommit.php. The manipulation of the argument name leads to os command injection. The attack may be initiated...
Command Execution Vulnerability in RG-UAC 6000-E50C at Beijing StarNet Ruijie Network Technology Co.
Ruijie Networks, founded in 2003, is an industry-leading provider of network infrastructure and solutions. A command execution vulnerability exists in the RG-UAC 6000-E50C of Beijing StarNet Ruijie Network Technology Company Limited, which can be exploited by an attacker to execute arbitrary...
Attacks, Vulnerabilities and Actors 5 to 11 February 2024
For a detailed threat digest, download the pdf file here Summary HiveForce Labs recently made several significant discoveries in the realm of cybersecurity threats. In the past week alone, a total of five attacks were executed, six vulnerabilities were uncovered, and two active adversaries were...
Ukraine Hit by Cyber Attack 2,000+ Computers Infected by DIRTYMOE
Summary: The UAC-0027 group executed a sophisticated cyber attack against Ukrainian organizations. Their weapon of choice was the notorious DIRTYMOE PURPLEFOX malware. This modular malware has been active for over half a decade and poses a serious threat. Threat Level - Amber | Attack Report For ...