101 matches found
Code injection
AdGuard DNS before 2.2 allows remote attackers to cause a denial of service via malformed UDP packets...
CVE-2023-41173
AdGuard DNS before 2.2 allows remote attackers to cause a denial of service via malformed UDP packets...
CVE-2023-41173
CVE-2023-41173 affects AdGuard DNS, with versions prior to 2.2 vulnerable to denial of service from malformed UDP packets. The issue is documented across multiple feeds (NVD, Red Hat, OSV, CNNVD, etc.) and is described as a DoS via malformed UDP packets. Affected software: AdGuard DNS before 2.2....
CVE-2023-41173
AdGuard DNS before 2.2 allows remote attackers to cause a denial of service via malformed UDP packets...
AdGuard DNS 安全漏洞
AdGuard DNS is a free, privacy-focused ad-blocking DNS server from AdGuard DNS. A security vulnerability exists in versions prior to AdGuard DNS 2.2 that stems from allowing an attacker to cause a denial of service DoS via a malformed UDP packet...
CVE-2023-41173
AdGuard DNS before 2.2 allows remote attackers to cause a denial of service via malformed UDP packets...
CVE-2022-45770
Improper input validation in adgnetworkwfpdrv.sys in Adguard For Windows x86 through 7.11 allows local privilege escalation...
CVE-2022-45770
Improper input validation in adgnetworkwfpdrv.sys in Adguard For Windows x86 through 7.11 allows local privilege escalation...
AdGuard for Windows 安全漏洞
AdGuard for Windows is a unique Windows ad block program from AdGuard Inc. With all the necessary features for an optimal web experience. A security vulnerability exists in Adguard For Windows x86 version 7.11 and prior versions that originates from incorrect input validation in the driver...
CVE-2022-45770
CVE-2022-45770 affects AdGuard for Windows (x86) up to version 7.11, via driver adgnetworkwfpdrv.sys. Root cause: improper input validation in the driver, enabling local privilege escalation. Remediation: upgrade to AdGuard Windows 7.11.x patch (e.g., 7.11.40780) or later as per available release...
CVE-2022-45770
Improper input validation in adgnetworkwfpdrv.sys in Adguard For Windows x86 through 7.11 allows local privilege escalation...
CVE-2022-32175
In AdGuardHome, versions v0.95 through v0.108.0-b.13 are vulnerable to Cross-Site Request Forgery CSRF, in the custom filtering rules functionality. An attacker can persuade an authorized user to follow a malicious link, resulting in deleting/modifying the custom filtering rules...
PT-2022-21138 · Adguard · Adguardhome
Name of the Vulnerable Software and Affected Versions: AdGuardHome versions v0.95 through v0.108.0-b.13 Description: The issue affects the custom filtering rules functionality, where an attacker can exploit it to delete or modify these rules by persuading an authorized user to follow a malicious...
AdGuardHome 跨站请求伪造漏洞
AdGuardHome is AdguardTeam's blocking DNS servers for network-wide ads and trackers. A cross-site request forgery vulnerability exists in AdGuardHome versions v0.95 through v0.108.0-b. By exploiting this vulnerability, an attacker can convince an authorized user to follow malicious links, thereby...
CVE-2021-27935
An issue was discovered in AdGuard before 0.105.2. An attacker able to get the user's cookie is able to bruteforce their password offline, because the hash of the password is stored in the cookie...
CVE-2021-27935
An issue was discovered in AdGuard before 0.105.2. An attacker able to get the user's cookie is able to bruteforce their password offline, because the hash of the password is stored in the cookie...
CVE-2021-27935
An issue was discovered in AdGuard before 0.105.2. An attacker able to get the user's cookie is able to bruteforce their password offline, because the hash of the password is stored in the cookie...
Design/Logic Flaw
An issue was discovered in AdGuard before 0.105.2. An attacker able to get the user's cookie is able to bruteforce their password offline, because the hash of the password is stored in the cookie...
CVE-2021-27935
An issue was discovered in AdGuard before 0.105.2. An attacker able to get the user's cookie is able to bruteforce their password offline, because the hash of the password is stored in the cookie...
CVE-2021-27935
Affected software: AdGuard prior to 0.105.2. The issue is that the password hash is stored in the user cookie, enabling an attacker who can obtain a user cookie to offline-brute-force the password. This is a server-side authentication-credential exposure via cookies. Impact stated: offline passwo...