268 matches found
CVE-2021-40870
CVE-2021-40870 الرفع غير المقيد لملف من نوع خطير في Aviatrix يسمح لمستخدم مُصادَق عليه بتنفيذ كود تعسفي...
CVE-2021-40870
CVE-2021-40870 Aviatrix में खतरनाक प्रकार की फ़ाइल का असीमित अपलोड एक प्रमाणित उपयोगकर्ता को मनमाना कोड निष्पादित करने की अनुमति देता है https://attackerkb.com/assessments/970a9fa9-223d-4d07-bafa-a338147934f3...
CVE-2021-40870
CVE-2021-40870 शोषण Aviatrix Controller 6.x के 6.5-1804.1922 से पहले के संस्करणों में एक समस्या पाई गई। खतरनाक प्रकार की फ़ाइल का असीमित अपलोड संभव है, जो एक अप्रमाणित उपयोगकर्ता को निर्देशिका ट्रैवर्सल के माध्यम से मनमाना कोड निष्पादित करने की अनुमति देता है। स्थापित करने के लिए आवश्यक मॉड्यूल इ...
CVE-2024-50603
CVE-2024-50603: Aviatrix कंट्रोलर में बिना प्रमाणीकरण के कमांड इंजेक्शन CVEHunter उपकरण CVE-2024-50603 के लिए असिंक्रोनस प्रदर्शन के साथ भेद्यता पहचान और शोषण उपकरण है। स्थापना git clone https://github.com/th3gokul/CVE-2024-50603.git cd CVE-2024-50603 pip install -r requirements.txt python3...
CVE-2021-40870
CVE-2021-40870 Aviatrix يسمح لمستخدم مصادق بتنفيذ كود تعسفي...
Aviatrix Controller - Remote Code Execution
An issue was discovered in Aviatrix Controller before 7.1.4191 and 7.2.x before 7.2.4996. Due to the improper neutralization of special elements used in an OS command, an unauthenticated attacker is able to execute arbitrary code. Shell metacharacters can be sent to /v1/api in cloudtype for...
Aviatrix Controller 6.x before 6.5-1804.1922 - Remote Command Execution
Aviatrix Controller 6.x before 6.5-1804.1922 contains a vulnerability that allows unrestricted upload of a file with a dangerous type, which allows an unauthenticated user to execute arbitrary code via directory traversal. id: CVE-2021-40870 info: name: Aviatrix Controller 6.x before 6.5-1804.192...
CVE-2021-31776
Aviatrix VPN Client before 2.14.14 on Windows has an unquoted search path that enables local privilege escalation to the SYSTEM user, if the machine is misconfigured to allow unprivileged users to write to directories that are supposed to be restricted to administrators...
CVE-2022-38368
An issue was discovered in Aviatrix Gateway before 6.6.5712 and 6.7.x before 6.7.1376. Because Gateway API functions mishandle authentication, an authenticated VPN user can inject arbitrary commands...
CVE-2020-7224
The Aviatrix OpenVPN client through 2.5.7 on Linux, macOS, and Windows is vulnerable when OpenSSL parameters are altered from the issued value set; the parameters could allow unauthorized third-party libraries to load...
Aviatrix Controller Unrestricted Upload of File (CVE-2021-40870)
While the Aviatrix UI requires authentication, many API calls do not enforce a check for authentication. Some of these API calls allow an unauthenticated attacker to upload arbitrary files, including .php scripts, to the filesystem. These uploaded scripts will be processed by the web frontend,...
Aviatrix Controllers < 7.1.4191 / 7.2 < 7.2.4996 RCE
The version of Aviatrix Controller installed on the remote host is prior to 7.1.4191 for 7.1.x or prior to 7.2.4996 for 7.2.x. It is, therefore, affected by an OS command injection vulnerability caused by improper neutralization of special elements in API input. An unauthenticated attacker can se...
MAL-2025-48092 Malicious code in @aviatrixdev/flight-suit1 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f67f0297879682bb09001ab95a186ca13c641603c6a4694b81972b68d8a7b55d The OpenSSF Package Analysis project identified '@aviatrixdev/flight-suit1' @ 1.1.25050 npm as malicious. It is considered malicious because: -...
EUVD-2020-19093
Malware in sbrugna...
EUVD-2020-19095
Malware in sbrugna...
EUVD-2020-5667
Malware in sbrugna...
EUVD-2020-5668
Malware in sbrugna...
EUVD-2020-28353
Malware in sbrugna...