CVE-2023-39237

ASUS RT-AC86U Traffic Analyzer - Apps analysis function has insufficient filtering of special character. A remote attacker with regular user privilege can exploit this vulnerability to perform command injection attack to execute arbitrary commands, disrupt system or terminate services...

Command injection

ASUS RT-AC86U Traffic Analyzer - Statistic function has insufficient filtering of special character. A remote attacker with regular user privilege can exploit this vulnerability to perform command injection attack to execute arbitrary commands, disrupt system or terminate services...

CVE-2023-39237

ASUS RT-AC86U Traffic Analyzer's Apps analysis function has insufficient filtering of special characters, enabling a remote attacker with regular user privileges to perform a command injection and execute arbitrary commands. Affected component: Traffic Analyzer - Apps analysis function in firmwar...

CVE-2023-39236

ASUS RT-AC86U Traffic Analyzer - Statistic function is vulnerable to command injection due to insufficient filtering of special characters. A remote attacker with regular user privileges can trigger arbitrary command execution, potentially corrupting the system or stopping services. Affected prod...

CVE-2023-38033

The CVE-2023-38033 entry concerns ASUS RT-AC86U's Traffic Analyzer legacy Statistic function, which contains insufficient filtering of special characters. Based on connected documents, the issue enables a remote attacker with regular user privileges to perform command injection and execute arbitr...

ASUS RT-AC86U OS Command Injection Vulnerability

The ASUS RT-AC86U is a dual-band Wi-Fi router from ASUS, China. The ASUS RT-AC86U suffers from an operating system command injection vulnerability that stems from insufficient filtering of special characters by the Traffic Analyzer Apps analysis feature...

ASUS RT-AC86U OS Command Injection Vulnerability

The ASUS RT-AC86U is a dual-band Wi-Fi router from Asus China. The ASUS RT-AC86U suffers from an operating system command injection vulnerability that stems from insufficient filtering of special characters without using the traditional statistics feature of the traffic analyzer...

PT-2023-7492 · Asus · Asus Rt-Ac86U

Name of the Vulnerable Software and Affected Versions: ASUS RT-AC86U affected versions not specified Description: The issue is related to the insufficient filtering of special characters in the Traffic Analyzer legacy Statistic function of the ASUS RT-AC86U router. A remote attacker with regular...

Associated-Threat-Analyzer - Detects Malicious IPv4 Addresses And Domain Names Associated With Your Web Application Using Local Malicious Domain And IPv4 Lists

Associated-Threat-Analyzer detects malicious IPv4 addresses and domain names associated with your web application using local malicious domain and IPv4 lists. Installation From Git git clone https://github.com/OsmanKandemir/associated-threat-analyzer.git cd associated-threat-analyzer && pip3...

The vulnerability of the CP2179 component, a traffic analyzer for computer networks in Wireshark, allows a hacker to cause a service failure.

The vulnerability of the CP2179 component, a traffic analyzer in Wireshark, is related to a division by zero error. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

Spoofing

Zoho ManageEngine Active Directory 360 versions 4315 and below, ADAudit Plus 7202 and below, ADManager Plus 7200 and below, Asset Explorer 6993 and below and 7xxx 7002 and below, Cloud Security Plus 4161 and below, Data Security Plus 6110 and below, Eventlog Analyzer 12301 and below, Exchange...

The vulnerability of the 7z-file analyzer component of the 7-Zip archive tool allows a hacker to execute arbitrary code.

The vulnerability of the 7z-file analyzer component of the 7-Zip compressor is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

CVE-2023-35785

CVE-2023-35785 is a TFA bypass vulnerability affecting Zoho ManageEngine Active Directory 360, ADAudit Plus, ADManager Plus, Asset Explorer, Cloud Security Plus, Data Security Plus, Eventlog Analyzer, Exchange Reporter Plus, Log360, Log360 UEBA, M365 Manager/Security Plus, Recovery Manager Plus, ...

PT-2023-5122 · Wireshark +4 · Wireshark +4

Name of the Vulnerable Software and Affected Versions: Wireshark versions 4.0.0 through 4.0.6 Description: The issue is caused by an uncontrolled recursion in the traffic analyzer, which can be exploited by a remote attacker to cause a denial of service. This can be achieved via packet injection ...

The vulnerability of the syntax analyzer of the file system for Hierarchical File System Plus (HFS+) in ClamAV allows a perpetrator to trigger a service failure due to improper cleaning or release of resources.

The vulnerability of the syntax analyzer for the Hierarchical File System Plus HFS+ ClamAV is related to improper cleaning or release of resources. Exploiting this vulnerability allows a malicious actor to cause service failure by sending a specially crafted version of the HFS+ file system image...

OESA-2023-1486 sqlite security update

SQLite is a C-language library that implements a small, fast, self-contained, high-reliability, full-featured, SQL database engine. SQLite is the most used database engine in the world. SQLite is built into all mobile phones and most computers and comes bundled inside countless other applications...

CVE-2023-27505

Incorrect default permissions in some IntelR Advanced Link Analyzer Standard Edition software installers before version 22.1 .1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-27505

Incorrect default permissions in some IntelR Advanced Link Analyzer Standard Edition software installers before version 22.1 .1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-27505

Intel’s advisory CVE-2023-27505 applies to Intel® Advanced Link Analyzer Standard Edition installers prior to version 22.1.1, where incorrect default permissions may allow an authenticated user to escalate privileges via local access. The vulnerability affects the installer component and is rated...

Intel Advanced Link Analyzer Standard Edition Security Vulnerability

Intel Advanced Link Analyzer Pro is an advanced link analyzer from Intel Corporation USA. Allows fast and easy evaluation of high-speed serial link performance to estimate optimal link parameter settings. A security vulnerability exists in IntelR Advanced Link Analyzer Standard Edition prior to...