CVE-2018-8062

CVE-2018-8062 Постоянный XSS на маршрутизаторе Comtrend AR-5387un Объяснение эксплуатации: Чтобы воспользоваться этой уязвимостью, необходимо войти в маршрутизатор и создать WAN-службу Нажмите "Advanced Setup", "WAN Service". "Add button", "Next" Затем вставьте полезную нагрузку в поле "Enter...

AR150-WiFiPineapple

УСТАРЕЛО! Этот проект устарел в пользу его младшего брата Universal Wifi pineapple hardware cloner https://github.com/xchwarze/wifi-pineapple-cloner Там вы найдете прошивку для AR150 , а также прошивки для других устройств и даже метод, который я разработал для этого! AR-150 WiFi Pineapple NANO...

CVE-2023-37073

CVE-2023-37073 Учётные данные Telnet по умолчанию могут привести к раскрытию информации и DoS-атакам. Шаги для воспроизведения Это затрагивает точку доступа AR-5310 root@kitploit: Telnet 192.168.1.1 username:user password:user Then Boom ... You logged in Раскрытие информации через учётные данные...

CVE-2024-50510

CVE-2024-50510 AR For Woocommerce = 6.2 — неаутентифицированная произвольная загрузка файлов Описание Плагин AR for WooCommerce для WordPress уязвим к произвольной загрузке файлов из-за отсутствия проверки типа файлов во всех версиях до 6.2 включительно. Это позволяет неаутентифицированным...

GHSA-8444-P2RX-H3VP vulnerabilities

Vulnerabilities for packages: binutils...

CVE-2026-3442 vulnerabilities

Vulnerabilities for packages: binutils...

EUVD-2026-47100

Vulnerability in the Oracle iReceivables product of Oracle E-Business Suite component: AR Web Utilities. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iReceivables...

CVE-2026-60783

Vulnerability in the Oracle iReceivables product of Oracle E-Business Suite component: AR Web Utilities. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iReceivables...

PT-2026-62777

Name of the Vulnerable Software and Affected Versions Oracle iReceivables versions 12.2.3 through 12.2.15 Description A flaw in the AR Web Utilities component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to a complete...

PYSEC-2026-1670 MobSF Vulnerable to Arbitrary File Write (AR-Slip) via Absolute Path in .a Extraction

Summary The vulnerability allows any user to overwrite any files available under the account privileges of the running process. Details As part of static analysis, iOS MobSF supports loading and parsing statically linked libraries .a. When parsing such archives, the code extracts the embedded...

CVE-2026-14352 AR for WooCommerce <= 8.40 - Unauthenticated Path Traversal to Arbitrary File Read via 'file' Parameter

The AR for WooCommerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 8.40 via the 'file' parameter parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive...

CVE-2026-14327

The AR for WordPress plugin for WordPress is vulnerable to Directory Traversal in all versions up to and including 8.40 via the 'file' parameter. Unauthenticated attackers can read arbitrary server files. Exploitation requires obtaining a valid nonce via ar_get_fresh_nonce and ar_process_user_ima...

EUVD-2026-40109

Unauthenticated Cross Site Scripting XSS in ARForms = 7.1.2 versions...

SUSE CVE-2026-48112

7-Zip is a file archiver with a high compression ratio. Versions 9.18 through 26.00 contain a heap out-of-bounds read in 7-Zip Ar handler BSD SYMDEF parser. A 4-byte heap out-of-bounds read exists in the Unix ar archive parser in 7-Zip. When parsing a BSD-style .SYMDEF symbol table, the...

CVE-2026-48112

7-Zip is a file archiver with a high compression ratio. Versions 9.18 through 26.00 contain a heap out-of-bounds read in 7-Zip Ar handler BSD SYMDEF parser. A 4-byte heap out-of-bounds read exists in the Unix ar archive parser in 7-Zip. When parsing a BSD-style .SYMDEF symbol table, the...

CVE-2026-8682

The 3D Viewer – 3D Model Viewer – Augmented Reality – Virtual Try On plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.0.1. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for...

CVE-2026-48112

7-Zip is a file archiver with a high compression ratio. Versions 9.18 through 26.00 contain a heap out-of-bounds read in 7-Zip Ar handler BSD SYMDEF parser. A 4-byte heap out-of-bounds read exists in the Unix ar archive parser in 7-Zip. When parsing a BSD-style .SYMDEF symbol table, the...

ALPINE-CVE-2026-48112

7-Zip is a file archiver with a high compression ratio. Versions 9.18 through 26.00 contain a heap out-of-bounds read in 7-Zip Ar handler BSD SYMDEF parser. A 4-byte heap out-of-bounds read exists in the Unix ar archive parser in 7-Zip. When parsing a BSD-style .SYMDEF symbol table, the...

CVE-2026-48112

7-Zip is a file archiver with a high compression ratio. Versions 9.18 through 26.00 contain a heap out-of-bounds read in 7-Zip Ar handler BSD SYMDEF parser. A 4-byte heap out-of-bounds read exists in the Unix ar archive parser in 7-Zip. When parsing a BSD-style .SYMDEF symbol table, the...

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound in the ParseLibSymbols function when parsing a BSD-style .SYMDEF symbol table. An attacker can access sensitive information from uninitialized heap memory by providing a specially crafted Unix ar archive...