PT-2024-9088 · Tp Link · Tp-Link Archer C7

Name of the Vulnerable Software and Affected Versions: TP-Link ARCHER-C7 version v5 Description: The issue is related to incorrect access control in the l 0 0.xml component, which allows attackers to access sensitive information. This can be exploited by a remote attacker to gain unauthorized...

AndroxGh0st Malware Integrates Mozi Botnet to Target IoT and Cloud Services

The threat actors behind the AndroxGh0st malware are now exploiting a broader set of security flaws impacting various internet-facing applications, while also deploying the Mozi botnet malware. "This botnet utilizes remote code execution and credential-stealing methods to maintain persistent...

CVE-2024-49211

Reflected XSS was discovered in a Dashboard Listing Archer Platform UX page in Archer Platform 6.x before version 2024.08. A remote unauthenticated attacker could potentially exploit this by tricking a victim application user into supplying malicious HTML or JavaScript code to the vulnerable web...

CVE-2024-49211

Reflected XSS was discovered in a Dashboard Listing Archer Platform UX page in Archer Platform 6.x before version 2024.08. A remote unauthenticated attacker could potentially exploit this by tricking a victim application user into supplying malicious HTML or JavaScript code to the vulnerable web...

CVE-2024-49210

Reflected XSS was discovered in an iView List Archer Platform UX page in Archer Platform 6.x before version 2024.09. A remote unauthenticated attacker could potentially exploit this by tricking a victim application user into supplying malicious HTML or JavaScript code to the vulnerable web...

CVE-2024-49209

Archer Platform 2024.03 before version 2024.09 is affected by an API authorization bypass vulnerability related to supporting application files. A remote unprivileged attacker could potentially exploit this vulnerability to elevate their privileges and upload additional system icons...

CVE-2024-49209

Archer Platform 2024.03 before version 2024.09 is affected by an API authorization bypass vulnerability related to supporting application files. A remote unprivileged attacker could potentially exploit this vulnerability to elevate their privileges and upload additional system icons...

CVE-2024-49210

Reflected XSS was discovered in an iView List Archer Platform UX page in Archer Platform 6.x before version 2024.09. A remote unauthenticated attacker could potentially exploit this by tricking a victim application user into supplying malicious HTML or JavaScript code to the vulnerable web...

CVE-2024-49208

Archer Platform 2024.03 before version 2024.08 is affected by an authorization bypass vulnerability related to supporting application files. A remote unprivileged attacker could potentially exploit this vulnerability to elevate their privileges and delete system icons...

CVE-2024-49211

Reflected XSS was discovered in a Dashboard Listing Archer Platform UX page in Archer Platform 6.x before version 2024.08. A remote unauthenticated attacker could potentially exploit this by tricking a victim application user into supplying malicious HTML or JavaScript code to the vulnerable web...

CVE-2024-49209

CVE-2024-49209 affects Archer Platform 2024.03 through 2024.08. The vulnerability is an API authorization bypass related to supporting application files, allowing a remote unprivileged attacker to elevate privileges and upload additional system icons. Remediation: upgrade to Archer Platform 2024....

CVE-2024-49210

Summary: CVE-2024-49210 describes a reflected XSS in Archer Platform 6.x (prior to 2024.09) via the iView List Archer Platform UX page. An unauthenticated remote attacker could entice a user to submit malicious HTML/JavaScript, which is then reflected and executed in the victim’s browser within t...

CVE-2024-49211

CVE-2024-49211 describes a Reflected XSS in the Dashboard Listing Archer Platform UX page for Archer Platform 6.x before 2024.08 . The vulnerability allows a remote, unauthenticated attacker to lure a victim user into submitting malicious HTML/JavaScript, which is then reflected and executed in t...

PT-2024-33350 · Rsa · Archer Platform

Name of the Vulnerable Software and Affected Versions: Archer Platform versions 6.x before 2024.08 Description: A Reflected XSS issue was discovered in the Dashboard Listing Archer Platform UX page. This could allow a remote unauthenticated attacker to trick a victim application user into supplyi...

Archer Platform 安全漏洞

Archer Platform is a modern integrated risk management solution from Archer, Inc. A security vulnerability exists in Archer Platform versions prior to 2024.08, which stems from the presence of a Reflective Cross-Site Scripting XSS vulnerability that could allow a remote, unauthenticated attacker ...

Archer Platform 安全漏洞

Archer Platform is a modern integrated risk management solution from Archer, Inc. A security vulnerability exists in Archer Platform versions prior to 2024.08 that stems from being affected by an authorization bypass vulnerability, which could be exploited by a remote, unprivileged attacker to...

Archer Platform 安全漏洞

Archer Platform is a modern integrated risk management solution from Archer, Inc. A security vulnerability exists in Archer Platform versions prior to 2024.09, which stems from the presence of a Reflective Cross-Site Scripting XSS vulnerability that could allow a remote, unauthenticated attacker ...

Archer Platform 安全漏洞

Archer Platform is a modern integrated risk management solution from Archer, Inc. A security vulnerability exists in Archer Platform versions prior to 2024.09 that stems from being affected by an authorization bypass vulnerability that could be exploited by a remote, unprivileged attacker to...

CVE-2024-49211

Reflected XSS was discovered in a Dashboard Listing Archer Platform UX page in Archer Platform 6.x before version 2024.08. A remote unauthenticated attacker could potentially exploit this by tricking a victim application user into supplying malicious HTML or JavaScript code to the vulnerable web...

PT-2024-33346 · Unknown · Archer Platform

Name of the Vulnerable Software and Affected Versions: Archer Platform versions 2024.03 through 2024.07 Description: The issue is related to an authorization bypass vulnerability concerning supporting application files. A remote unprivileged attacker could potentially exploit this to elevate thei...