533 matches found
PT-2025-29718 · Adm · Adm
Name of the Vulnerable Software and Affected Versions: ADM versions 4.1.0 through 4.3.3.RH61 ADM version 5.0.0.RIN1 and earlier Description: An improper access control vulnerability exists in the EZ Sync Manager of ADM. Authenticated users can copy arbitrary files from the server file system into...
CVE-2025-50756
Wavlink WN535K3 20191010 was found to contain a command injection vulnerability in the setsysadm function via the newpass parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...
CVE-2025-7618
A stored Cross-Site Scripting XSS vulnerability vulnerability was found in the File Explorer and Text Editor of ADM. An attacker could exploit this vulnerability to inject malicious scripts into the applications, which may then access cookies or other sensitive information retained by the browser...
CVE-2025-7618 A stored Cross-Site Scripting (XSS) vulnerability exists in the File Explorer and Text Editor of ADM
A stored Cross-Site Scripting XSS vulnerability vulnerability was found in the File Explorer and Text Editor of ADM. An attacker could exploit this vulnerability to inject malicious scripts into the applications, which may then access cookies or other sensitive information retained by the browser...
CVE-2025-7618 A stored Cross-Site Scripting (XSS) vulnerability exists in the File Explorer and Text Editor of ADM
A stored Cross-Site Scripting XSS vulnerability vulnerability was found in the File Explorer and Text Editor of ADM. An attacker could exploit this vulnerability to inject malicious scripts into the applications, which may then access cookies or other sensitive information retained by the browser...
CVE-2025-7618
CVE-2025-7618 describes a stored Cross-Site Scripting (XSS) vulnerability in the ADM File Explorer and Text Editor. Affected products and versions include: ADM 4.1.0–4.3.3.RH61 and ADM 5.0.0.RIN1 and earlier, and Text Editor 1.0.0.r112 and earlier. The vulnerability allows injected scripts to pot...
CVE-2025-7380
A stored Cross-Site Scripting XSS vulnerability exists in the Access Control of ADM, the issue allows an attacker to inject malicious scripts into the folder name field while creating a new shared folder. These scripts are not properly sanitized and will be executed when the folder name is...
CVE-2025-7380 A stored Cross-Site Scripting (XSS) vulnerability exists in the Access Control of ADM
A stored Cross-Site Scripting XSS vulnerability exists in the Access Control of ADM, the issue allows an attacker to inject malicious scripts into the folder name field while creating a new shared folder. These scripts are not properly sanitized and will be executed when the folder name is...
CVE-2025-7380 A stored Cross-Site Scripting (XSS) vulnerability exists in the Access Control of ADM
A stored Cross-Site Scripting XSS vulnerability exists in the Access Control of ADM, the issue allows an attacker to inject malicious scripts into the folder name field while creating a new shared folder. These scripts are not properly sanitized and will be executed when the folder name is...
PT-2025-29451 · Adm +1 · Adm +1
Name of the Vulnerable Software and Affected Versions: ADM versions 4.1.0 through 4.3.3.RH61 ADM version 5.0.0.RIN1 and earlier Text Editor version 1.0.0.r112 and earlier Description: A stored Cross-Site Scripting XSS vulnerability exists in the File Explorer and Text Editor of ADM. An attacker...
ASUSTOR ADM 安全漏洞
ASUSTOR ADM is a specialized operating system for all ASUSTOR NAS devices from ASUS, China. A security vulnerability exists in ASUSTOR ADM that stems from a stored cross-site scripting attack that could result in access to sensitive information...
WAVLINK WN535K3 安全漏洞
WAVLINK WN535K3 is a wireless router from China Ruiyin WAVLINK. A security vulnerability exists in WAVLINK WN535K3 version 20191010, which originates from a command injection in the newpass parameter of the setsysadm function, which could lead to the execution of arbitrary commands...
CVE-2025-7378
An improper Input Validation vulnerability allows injecting arbitrary values of the NAS configuration file in ASUSTOR ADM. This could potentially lead to system misconfiguration and break the format of the configuation file, causing the NAS to exhibit unexpected behavior. This issue affects ADM:...
CVE-2025-7378
An improper Input Validation vulnerability allows injecting arbitrary values of the NAS configuration file in ASUSTOR ADM. This could potentially lead to system misconfiguration and break the format of the configuation file, causing the NAS to exhibit unexpected behavior. This issue affects ADM:...
CVE-2025-7378 An improper input validation vulnerability was found on manipulating configuration of ADM
An improper Input Validation vulnerability allows injecting arbitrary values of the NAS configuration file in ASUSTOR ADM. This could potentially lead to system misconfiguration and break the format of the configuation file, causing the NAS to exhibit unexpected behavior. This issue affects ADM:...
CVE-2025-7378 An improper input validation vulnerability was found on manipulating configuration of ADM
An improper Input Validation vulnerability allows injecting arbitrary values of the NAS configuration file in ASUSTOR ADM. This could potentially lead to system misconfiguration and break the format of the configuation file, causing the NAS to exhibit unexpected behavior. This issue affects ADM:...
CVE-2025-7378
ASUSTOR ADM CVE-2025-7378 is an improper input validation vulnerability affecting ADM versions 4.1 through 4.3.1.R5A0, allowing arbitrary values to be injected into the NAS configuration file and potentially causing misconfiguration and unexpected NAS behavior. The issue is mitigated by updating ...
PT-2025-28858 · Asustor · Asustor Adm
Name of the Vulnerable Software and Affected Versions: ASUSTOR ADM versions 4.1 through 4.3.1.R5A0 Description: The issue is related to improper input validation, allowing arbitrary values to be injected into the NAS configuration file. This could lead to system misconfiguration, breaking the...
ADC-The hostname of Citrix ADC instance is not displayed in ADM
When we add ADC into ADM, the page of adding ADC to ADM may stuck at "Trying to connect XXX". If we open a new page to check ,we may notice that ADC is added to ADM , but the hostname is not displayed. And we may found the masinventory process is not running as no output is displayed for the...