805 matches found
CVE-2018-8062
CVE-2018-8062 Comtrend AR-5387un 路由器上的持久性XSS 利用说明： 要利用此漏洞，必须登录路由器后创建一个WAN服务 点击"Advanced Setup"，"WAN Service"。点击"Add button"，然后"Next" 然后在"Enter Service Description"字段中插入payload。本次PoC使用了 接着点击四次"Next"逐步完成各个步骤，最后点击"Apply/Save" XSS的结果将在WAN服务页面上显示并触发 本漏洞利用脚本自动完成整个流程，绕过CSRF保护，并允许设置自定义XSS payload Happy...
CVE-2023-37073
CVE-2023-37073 Telnet 默认凭据可能导致信息泄露和拒绝服务 DoS 攻击。 复现步骤 此漏洞影响 AP AR-5310 Telnet 192.168.1.1 username:user password:user 然后 Boom ... 你已登录 通过 Telnet 默认凭据泄露信息 当你通过 Telnet 服务登录后， 输入命令 'help' 或 '?' 可查看 可用选项： reboot, ping, lanhosts, passwd restoredefault, nslookup, traceroute save, uptime, exitOnIdle, wan...
CVE-2024-50510
CVE-2024-50510 AR For Woocommerce = 6.2 - 未经身份验证的任意文件上传 描述 WordPress 的 AR for WooCommerce 插件在所有版本（包括 6.2）中由于缺少文件类型验证，容易受到任意文件上传攻击。这使得未经身份验证的攻击者可以在受影响站点的服务器上上传任意文件，从而可能导致远程代码执行。 详细信息 类型 : plugin 标识符 : ar-for-woocommerce 受影响版本 : 6.2 CVSS 分数 : 9.8 CVSS 评级 : 严重 CVSS 向量 :...
AR150-WiFiPineapple
已废弃！ 此项目已弃用，其替代品为其兄弟项目 Universal Wifi pineapple hardware cloner https://github.com/xchwarze/wifi-pineapple-cloner 在该项目中，您可以找到适用于 AR150 的固件，以及其他设备对应的固件，以及我为此开发的原创方法！ AR-150 WiFi Pineapple NANO 将您的 AR-150 转换为 WiFi Pineapple NANO 应该是一个简单的过程。然而，网络上和 Git 中充斥着损坏的 bin...
CVE-2026-67403
Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Insufficient tenant-level authorization checks allow authenticated users to access administrative resources belonging to other tenants by specifying a valid non predictable tenant identifier...
CVE-2026-68484
Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Administrative functions do not properly verify user privileges, allowing authenticated low-privileged users to create administrator accounts and obtain elevated privileges...
CVE-2026-68484
Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Administrative functions do not properly verify user privileges, allowing authenticated low-privileged users to create administrator accounts and obtain elevated privileges...
CVE-2026-67403
Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Insufficient tenant-level authorization checks allow authenticated users to access administrative resources belonging to other tenants by specifying a valid non predictable tenant identifier...
EUVD-2026-75060
Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Insufficient tenant-level authorization checks allow authenticated users to access administrative resources belonging to other tenants by specifying a valid non predictable tenant identifier...
CVE-2026-67403
Cash Collect (Sage) has an improper authorization vulnerability in the Sage AR Automation API . Insufficient tenant-level authorization checks allow authenticated users to access administrative resources belonging to other tenants by specifying a valid non-predictable tenant identifier. The CVSS ...
CVE-2026-67403
Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Insufficient tenant-level authorization checks allow authenticated users to access administrative resources belonging to other tenants by specifying a valid non predictable tenant identifier...
CVE-2026-68484
Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Administrative functions do not properly verify user privileges, allowing authenticated low-privileged users to create administrator accounts and obtain elevated privileges...
EUVD-2026-75061
Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Administrative functions do not properly verify user privileges, allowing authenticated low-privileged users to create administrator accounts and obtain elevated privileges...
CVE-2026-68484
Cash Collect by Sage contains an improper authorization vulnerability in the Sage AR Automation API . Administrative functions fail to properly verify user privileges, allowing authenticated low-privileged users to create administrator accounts and escalate to elevated privileges. The issue is ra...
CVE-2026-68484: Missing Authorization
Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Administrative functions do not properly verify user privileges, allowing authenticated low-privileged users to create administrator accounts and obtain elevated privileges...
PT-2026-89079
Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Insufficient tenant-level authorization checks allow authenticated users to access administrative resources belonging to other tenants by specifying a valid non predictable tenant identifier...
PT-2026-89080
Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Administrative functions do not properly verify user privileges, allowing authenticated low-privileged users to create administrator accounts and obtain elevated privileges...
CVE-2026-67403: Authorization Bypass Through User-Controlled Key
Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Insufficient tenant-level authorization checks allow authenticated users to access administrative resources belonging to other tenants by specifying a valid non predictable tenant identifier...
