Lucene search
+L

1019 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 9:10 p.m.4 views

Malicious code in constant-unifi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e52978a6cedcbd4f12d4e0ad230a7b6294a81f1f2f17fd929d4be5793ca3235 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2022/06/20 9:10 p.m.12 views

MAL-2022-2165 Malicious code in constant-unifi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e52978a6cedcbd4f12d4e0ad230a7b6294a81f1f2f17fd929d4be5793ca3235 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/04/01 11:15 p.m.12 views

CVE-2022-22570

A buffer overflow vulnerability found in the UniFi Door Access Reader Lite’s UA Lite firmware Version 3.8.28.24 and earlier allows a malicious actor who has gained access to a network to control all connected UA devices. This vulnerability is fixed in Version 3.8.31.13 and later...

10CVSS7.4AI score0.01068EPSS
SaveExploits0References2
NVD
NVD
added 2022/04/01 11:15 p.m.24 views

CVE-2022-22570

A buffer overflow vulnerability found in the UniFi Door Access Reader Lite’s UA Lite firmware Version 3.8.28.24 and earlier allows a malicious actor who has gained access to a network to control all connected UA devices. This vulnerability is fixed in Version 3.8.31.13 and later...

10CVSS0.01068EPSS
SaveExploits0References1
OSV
OSV
added 2022/04/01 11:15 p.m.8 views

CVE-2022-22570

A buffer overflow vulnerability found in the UniFi Door Access Reader Lite’s UA Lite firmware Version 3.8.28.24 and earlier allows a malicious actor who has gained access to a network to control all connected UA devices. This vulnerability is fixed in Version 3.8.31.13 and later...

10CVSS7.5AI score0.01068EPSS
SaveExploits0References1
Prion
Prion
added 2022/04/01 11:15 p.m.19 views

Buffer overflow

A buffer overflow vulnerability found in the UniFi Door Access Reader Lite’s UA Lite firmware Version 3.8.28.24 and earlier allows a malicious actor who has gained access to a network to control all connected UA devices. This vulnerability is fixed in Version 3.8.31.13 and later...

7.5CVSS9.2AI score0.01068EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/04/01 10:17 p.m.32 views

CVE-2022-22570

A buffer overflow vulnerability found in the UniFi Door Access Reader Lite’s UA Lite firmware Version 3.8.28.24 and earlier allows a malicious actor who has gained access to a network to control all connected UA devices. This vulnerability is fixed in Version 3.8.31.13 and later...

9.6AI score0.01068EPSS
SaveExploits0References1
CVE
CVE
added 2022/04/01 10:17 p.m.101 views

CVE-2022-22570

The vulnerability CVE-2022-22570 affects the UniFi Door Access Reader Lite (UA Lite) firmware

10CVSS9.2AI score0.01068EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2022/04/01 12:00 a.m.10 views

Ubiquiti UniFi Door Access Reader Lite 安全漏洞

The Ubiquiti UniFi Door Access Reader Lite Ubiquiti UA Lite is a modern NFC and Bluetooth reader from Ubiquiti USA. A security vulnerability exists in UniFi Door Access Reader Lite UA Lite firmware version 3.8.28.24 and earlier, which originates from a vulnerability that allows a malicious actor...

10CVSS8.3AI score0.01068EPSS
SaveExploits0References2
zdt
zdt
added 2022/01/24 12:00 a.m.1353 views

UniFi Network Application Unauthenticated Log4Shell Remote Code Execution Exploit

The Ubiquiti UniFi Network Application versions 5.13.29 through 6.5.53 are affected by the Log4Shell vulnerability whereby a JNDI string can be sent to the server via the remember field of a POST request to the /api/login endpoint that will cause the server to connect to the attacker and...

10CVSS0.7AI score0.99999EPSS
SaveExploits367
Packet Storm
Packet Storm
added 2022/01/24 12:00 a.m.989 views

UniFi Network Application Unauthenticated Log4Shell Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'UniFi Network Application Unauthenticated JNDI Injection RCE via Log4Shell', 'Description' = %q The Ubiquiti UniFi Network Application versions...

10CVSS0.4AI score0.99999EPSS
SaveExploits367
BDU FSTEC
BDU FSTEC
added 2022/01/17 12:00 a.m.14 views

The vulnerability of the Log4j library used in Java programs of the UniFi Network reporting tool allows a perpetrator to execute arbitrary code.

The vulnerability of the Log4j library used by Java programs in the UniFi Network software exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS8.2AI score0.01091EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
added 2022/01/17 12:00 a.m.32 views

Ubiquiti UniFi Network Injection Vulnerability

Ubiquiti UniFi Network is a wireless network management software solution from Ubiquiti USA. for setting up and managing UniFi Network devices. An injection vulnerability exists in Ubiquiti UniFi Network version 6.5.53 and earlier. The vulnerability allows a malicious actor to take control of the...

9.8CVSS9.7AI score0.01091EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/01/14 8:15 p.m.7 views

CVE-2021-44530

An injection vulnerability exists in a third-party library used in UniFi Network Version 6.5.53 and earlier Log4J CVE-2021-44228 allows a malicious actor to control the application...

9.8CVSS7.3AI score0.01091EPSS
SaveExploits0References2
OSV
OSV
added 2022/01/14 8:15 p.m.11 views

CVE-2021-44530

An injection vulnerability exists in a third-party library used in UniFi Network Version 6.5.53 and earlier Log4J CVE-2021-44228 allows a malicious actor to control the application...

9.8CVSS6.7AI score0.01091EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/01/14 7:15 p.m.37 views

CVE-2021-44530

An injection vulnerability exists in a third-party library used in UniFi Network Version 6.5.53 and earlier Log4J CVE-2021-44228 allows a malicious actor to control the application...

8.7AI score0.01091EPSS
SaveExploits0References1
CVE
CVE
added 2022/01/14 7:15 p.m.157 views

CVE-2021-44530

Technical details for CVE-2021-44530 are not provided in the connected documents. The available sources only reaffirm a Log4j-related vulnerability in UniFi prior to 6.5.53. Monitor for updates from vendors.

9.8CVSS9.4AI score0.01091EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2022/01/14 12:00 a.m.8 views

Ubiquiti UniFi Network 注入漏洞

Ubiquiti UniFi Network is a wireless network management software solution from Ubiquiti USA. for setting up and managing UniFi Network devices. An injection vulnerability exists in Ubiquiti UniFi Network version 6.5.53 and earlier. The vulnerability allows a malicious actor to take control of the...

9.8CVSS5.6AI score0.01091EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2022/01/14 12:00 a.m.12 views

PT-2022-1391 · Ubiquiti +1 · Unifi Network +1

Name of the Vulnerable Software and Affected Versions: UniFi Network versions 6.5.53 and earlier Description: A third-party library injection vulnerability exists due to insufficient input validation in the Java logging library Log4j used in UniFi Network. This issue allows a malicious actor to...

10CVSS9.5AI score0.01091EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2021/12/31 12:00 a.m.1230 views

Ubiquiti UniFi Network Log4Shell Direct Check (CVE-2021-44228)

Binary data ubiquitiunifinetworklog4shell.nbin...

10CVSS10AI score0.99999EPSS
SaveExploits367References3
Rows per page
Query Builder