44 matches found
EUVD-2023-38438
Malicious code in bioql PyPI...
EUVD-2022-31224
Malicious code in bioql PyPI...
EUVD-2022-31223
Malicious code in bioql PyPI...
EUVD-2023-38440
Malicious code in bioql PyPI...
EUVD-2023-38439
Malicious code in bioql PyPI...
ASUS RT-AX88U Buffer Overflow Vulnerability
The ASUS RT-AX88U is a wireless router from Asus China. A buffer overflow vulnerability exists in ASUS RT-AX88U version v3.0.0.4.38824198, which originates from an application boundary error when handling untrusted input. A remote attacker could exploit this vulnerability to execute arbitrary cod...
CVE-2024-33278
Buffer Overflow vulnerability in ASUS router RT-AX88U with firmware versions v3.0.0.4.38824198 allows a remote attacker to execute arbitrary code via the connectionstatemachine due to improper length validation for the cookie field...
ASUS RT-AX88U Formatting String Error Vulnerability
The ASUS RT-AX88U is a wireless router from ASUS in China. The ASUS RT-AX88U suffers from a Formatting String Error vulnerability, which stems from a vulnerability in the Advanced Open VPN feature that uses an externally controllable format string, which can be exploited by an attacker with an...
The vulnerability of the do_json_decode function in the ej.c file of the ASUS RT-AX88U router’s software, which allows for a “denial-of-service” attack to be executed.
The vulnerability of the dojsondecode function in the ej.c file of the ASUS RT-AX88U router’s software is related to a buffer overflow error. Exploiting this vulnerability could allow an attacker to execute a DoS attack remotely...
ASUS RT-AX88U ej.c Buffer Overflow Vulnerability
The ASUS RT-AX88U is a wireless router from Asus China. The ASUS RT-AX88U suffers from a buffer overflow vulnerability that stems from a failure to check the buffer input size, which can be exploited by a remote attacker who can send a specially crafted request to the device, resulting in a crash...
ASUS RT-AX88U web.c Buffer Overflow Vulnerability
The ASUS RT-AX88U is a wireless router from Asus China. The ASUS RT-AX88U suffers from a buffer overflow vulnerability that stems from a failure to check the buffer input size, which can be exploited by a remote attacker to send a specially crafted request to a device that contains a specific use...
CVE-2023-34360
A stored cross-site scripting XSS issue was discovered within the Custom User Icons functionality of ASUS RT-AX88U running firmware versions 3.0.0.4.388.23110 and prior. After a remote attacker logging in device with regular user privilege, the remote attacker can perform a Stored Cross-site...
CVE-2023-34360
A stored cross-site scripting XSS issue was discovered within the Custom User Icons functionality of ASUS RT-AX88U running firmware versions 3.0.0.4.388.23110 and prior. After a remote attacker logging in device with regular user privilege, the remote attacker can perform a Stored Cross-site...
Cross site scripting
A stored cross-site scripting XSS issue was discovered within the Custom User Icons functionality of ASUS RT-AX88U running firmware versions 3.0.0.4.388.23110 and prior. After a remote attacker logging in device with regular user privilege, the remote attacker can perform a Stored Cross-site...
CVE-2023-34360 ASUS RT-AX88U - Stored XSS
A stored cross-site scripting XSS issue was discovered within the Custom User Icons functionality of ASUS RT-AX88U running firmware versions 3.0.0.4.388.23110 and prior. After a remote attacker logging in device with regular user privilege, the remote attacker can perform a Stored Cross-site...
CVE-2023-34360 ASUS RT-AX88U - Stored XSS
A stored cross-site scripting XSS issue was discovered within the Custom User Icons functionality of ASUS RT-AX88U running firmware versions 3.0.0.4.388.23110 and prior. After a remote attacker logging in device with regular user privilege, the remote attacker can perform a Stored Cross-site...
CVE-2023-34360
ASUS RT-AX88U is affected by a stored XSS in the Custom User Icons feature. The vulnerability arises from insufficient input validation/escaping, enabling an attacker who logs in with regular user privileges to upload an image containing JavaScript to trigger a stored XSS. Affected firmware versi...
CVE-2023-34358
ASUS RT-AX88U's httpd is subject to an unauthenticated DoS condition. A remote attacker can send a specially crafted request to a device which contains a specific user agent, causing the httpd binary to crash during a string comparison performed within web.c, resulting in a DoS condition...
Design/Logic Flaw
ASUS RT-AX88U's httpd is subject to an unauthenticated DoS condition. A remote attacker can send a specially crafted request to a device which contains a specific user agent, causing the httpd binary to crash during a string comparison performed within web.c, resulting in a DoS condition...
Design/Logic Flaw
ASUS RT-AX88U's httpd is subject to an unauthenticated DoS condition. A remote attacker can send a specially crafted request to the device which causes the httpd binary to crash within the "dojsondecode" function of ej.c, resulting in a DoS condition...