227 matches found
Aviatrix Controller 6.x before 6.5-1804.1922 - Remote Command Execution
Aviatrix Controller 6.x before 6.5-1804.1922 contains a vulnerability that allows unrestricted upload of a file with a dangerous type, which allows an unauthenticated user to execute arbitrary code via directory traversal. id: CVE-2021-40870 info: name: Aviatrix Controller 6.x before 6.5-1804.192...
Aviatrix Controller - Remote Code Execution
An issue was discovered in Aviatrix Controller before 7.1.4191 and 7.2.x before 7.2.4996. Due to the improper neutralization of special elements used in an OS command, an unauthenticated attacker is able to execute arbitrary code. Shell metacharacters can be sent to /v1/api in cloudtype for...
CVE-2021-40870
CVE-2021-40870 Unbeschränkter Upload von Dateien mit gefährlichem Typ in Aviatrix ermöglicht einem authentifizierten Benutzer die Ausführung von beliebigem Code https://attackerkb.com/assessments/970a9fa9-223d-4d07-bafa-a338147934f3...
CVE-2024-50603
CVE-2024-50603: Aviatrix Controller – Nicht authentifizierte Befehlseinschleusung CVEHunter-Tool zur Erkennung und Ausnutzung von Schwachstellen für CVE-2024-50603 mit asynchroner Leistung. Installation root@kitploit: git clone https://github.com/th3gokul/CVE-2024-50603.git cd CVE-2024-50603 pip...
CVE-2021-40870
CVE-2021-40870 Aviatrix erlaubt einem authentifizierten Benutzer, beliebigen Code auszuführen...
CVE-2021-40870
CVE-2021-40870 Caricamento senza restrizioni di file con tipo pericoloso in Aviatrix consente a un utente autenticato di eseguire codice arbitrario...
CVE-2021-40870
CVE-2021-40870 Exploit Ein Problem wurde im Aviatrix Controller 6.x vor 6.5-1804.1922 entdeckt. Ein uneingeschränkter Upload einer Datei mit einem gefährlichen Typ ist möglich, was es einem nicht authentifizierten Benutzer ermöglicht, über einen Directory-Traversal-Angriff beliebigen Code...
CVE-2021-31776
Aviatrix VPN Client before 2.14.14 on Windows has an unquoted search path that enables local privilege escalation to the SYSTEM user, if the machine is misconfigured to allow unprivileged users to write to directories that are supposed to be restricted to administrators...
CVE-2022-38368
An issue was discovered in Aviatrix Gateway before 6.6.5712 and 6.7.x before 6.7.1376. Because Gateway API functions mishandle authentication, an authenticated VPN user can inject arbitrary commands...
CVE-2020-7224
The Aviatrix OpenVPN client through 2.5.7 on Linux, macOS, and Windows is vulnerable when OpenSSL parameters are altered from the issued value set; the parameters could allow unauthorized third-party libraries to load...
Aviatrix Controller Unrestricted Upload of File (CVE-2021-40870)
While the Aviatrix UI requires authentication, many API calls do not enforce a check for authentication. Some of these API calls allow an unauthenticated attacker to upload arbitrary files, including .php scripts, to the filesystem. These uploaded scripts will be processed by the web frontend,...
Aviatrix Controllers < 7.1.4191 / 7.2 < 7.2.4996 RCE
The version of Aviatrix Controller installed on the remote host is prior to 7.1.4191 for 7.1.x or prior to 7.2.4996 for 7.2.x. It is, therefore, affected by an OS command injection vulnerability caused by improper neutralization of special elements in API input. An unauthenticated attacker can se...
MAL-2025-48092 Malicious code in @aviatrixdev/flight-suit1 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f67f0297879682bb09001ab95a186ca13c641603c6a4694b81972b68d8a7b55d The OpenSSF Package Analysis project identified '@aviatrixdev/flight-suit1' @ 1.1.25050 npm as malicious. It is considered malicious because: -...
EUVD-2020-19098
Malware in sbrugna...
EUVD-2019-7791
Malware in sbrugna...
EUVD-2019-7792
Malware in sbrugna...
EUVD-2020-19095
Malware in sbrugna...
EUVD-2020-19094
Malware in sbrugna...