38 matches found
qaiu netdisk-fast-download encryption vulnerability
The qaiu netdisk-fast-download version 0.4.8 and earlier have a security vulnerability. This vulnerability stems from an information leakage issue with the /v2/randomAuth endpoint in the ParserApi. An attacker can repeatedly call this endpoint and use the hardcoded AES key nfdauthkey2026 to decry...
EUVD-2021-23884
Malware in sbrugna...
EUVD-2021-23886
Malware in sbrugna...
EUVD-2023-44336
Malicious code in bioql PyPI...
CVE-2021-37317
Directory Traversal vulnerability in Cloud Disk in ASUS RT-AC68U router firmware version before 3.0.0.4.386.41634 allows remote attackers to write arbitrary files via improper sanitation on the target for COPY and MOVE operations...
CVE-2021-37315
Incorrect Access Control issue discoverd in Cloud Disk in ASUS RT-AC68U router firmware version before 3.0.0.4.386.41634 allows remote attackers to write arbitrary files via improper sanitation on the source for COPY and MOVE operations...
CVE-2021-37316
SQL injection vulnerability in Cloud Disk in ASUS RT-AC68U router firmware version before 3.0.0.4.386.41634 allows remote attackers to view sensitive information via /etc/shadow...
CVE-2023-3701
Aqua Drive, in its 2.4 version, is vulnerable to a relative path traversal vulnerability. By exploiting this vulnerability, an authenticated non privileged user could access/modify stored resources of other users. It could also be possible to access and modify the source and configuration files o...
Path traversal
Aqua Drive, in its 2.4 version, is vulnerable to a relative path traversal vulnerability. By exploiting this vulnerability, an authenticated non privileged user could access/modify stored resources of other users. It could also be possible to access and modify the source and configuration files o...
CVE-2023-3701 Relative path traversal in Aqua eSolutions
Aqua Drive, in its 2.4 version, is vulnerable to a relative path traversal vulnerability. By exploiting this vulnerability, an authenticated non privileged user could access/modify stored resources of other users. It could also be possible to access and modify the source and configuration files o...
CVE-2023-3701
The CVE-2023-3701 entry concerns Aqua Drive version 2.4, which is reported to be vulnerable to a relative path traversal. The vulnerability allows an authenticated non-privileged user to access or modify stored resources belonging to other users and could enable access or modification of source a...
CVE-2023-3701 Relative path traversal in Aqua eSolutions
Aqua Drive, in its 2.4 version, is vulnerable to a relative path traversal vulnerability. By exploiting this vulnerability, an authenticated non privileged user could access/modify stored resources of other users. It could also be possible to access and modify the source and configuration files o...
PT-2023-25768 · Unknown · Aqua Drive
Name of the Vulnerable Software and Affected Versions: Aqua Drive version 2.4 Description: The issue allows an authenticated non-privileged user to access or modify stored resources of other users through a relative path traversal vulnerability. It could also be possible to access and modify the...
CVE-2023-3701: Relative Path Traversal
Aqua Drive, in its 2.4 version, is vulnerable to a relative path traversal vulnerability. By exploiting this vulnerability, an authenticated non privileged user could access/modify stored resources of other users. It could also be possible to access and modify the source and configuration files o...
Cloud Disk Cloud Storage Disclosure
The vulnerability of the Cloud Disk cloud storage solution for ASUS RT-AC68U router microprogramming software is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow a malicious actor to disclose the protected information remotely...
Cloud Disk arbitrary file write
The vulnerability of the Cloud Disk cloud storage solution for ASUS RT-AC68U router microprogramming software exists due to incomplete cleaning of temporary resources. Exploiting this vulnerability allows a malicious actor to write arbitrary files into the system remotely...
CVE-2021-37316
SQL injection vulnerability in Cloud Disk in ASUS RT-AC68U router firmware version before 3.0.0.4.386.41634 allows remote attackers to view sensitive information via /etc/shadow...
CVE-2021-37315
Incorrect Access Control issue discoverd in Cloud Disk in ASUS RT-AC68U router firmware version before 3.0.0.4.386.41634 allows remote attackers to write arbitrary files via improper sanitation on the source for COPY and MOVE operations...
CVE-2021-37315
Incorrect Access Control issue discoverd in Cloud Disk in ASUS RT-AC68U router firmware version before 3.0.0.4.386.41634 allows remote attackers to write arbitrary files via improper sanitation on the source for COPY and MOVE operations...