CVE-2025-52264

StarCharge Artemis AC Charger 7-22 kW v1.0.4 was discovered to contain a stack overflow via the cgiMain function at download.cgi...

CVE-2025-52264: Improper Restriction of Operations within the Bounds of a Memory Buffer

StarCharge Artemis AC Charger 7-22 kW v1.0.4 was discovered to contain a stack overflow via the cgiMain function at download.cgi...

PT-2025-43958

Name of the Vulnerable Software and Affected Versions StarCharge Artemis AC Charger versions 1.0.4 Description The StarCharge Artemis AC Charger version 1.0.4 contains a stack overflow issue. This occurs through the cgiMain function at the download.cgi endpoint. The vulnerability is triggered via...

CVE-2025-52264

StarCharge Artemis AC Charger 7-22 kW v1.0.4 was discovered to contain a stack overflow via the cgiMain function at download.cgi...

CVE-2025-52264

The StarCharge Artemis AC Charger 7-22 kW v1.0.4 is vulnerable to a stack overflow located in the cgiMain function at the download.cgi API endpoint. This flaw, identified as a memory buffer restriction issue (CWE-119), could potentially lead to the execution of arbitrary code . To remediate this ...

StarCharge Artemis AC Charger 安全漏洞

StarCharge Artemis AC Charger is an AC charger from StarCharge Singapore. A security vulnerability exists in the StarCharge Artemis AC Charger version 7-22 kW 1.0.4, which originates from a stack overflow in the cgiMain function in download.cgi, which could lead to the execution of arbitrary code...

EUVD-2007-3676

Malware in sbrugna...

EUVD-1999-1358

Malware in sbrugna...

Open redirect

download.cgi in Pulse Secure Pulse Connect Secure 8.1RX before 8.1R13 and 8.3RX before 8.3R4 and Pulse Policy Secure through 5.2RX before 5.2R10 and 5.4RX before 5.4R4 have an Open Redirect Vulnerability...

PT-2018-12466 · Pulse · Pulse Policy Secure +1

Name of the Vulnerable Software and Affected Versions: Pulse Connect Secure versions 8.1RX through 8.1R12 Pulse Connect Secure versions 8.3RX through 8.3R3 Pulse Policy Secure versions 5.2RX through 5.2R9 Pulse Policy Secure versions 5.4RX through 5.4R3 Description: The issue is related to an Ope...

CVE-2018-14366: URL Redirection to Untrusted Site

download.cgi in Pulse Secure Pulse Connect Secure 8.1RX before 8.1R13 and 8.3RX before 8.3R4 and Pulse Policy Secure through 5.2RX before 5.2R10 and 5.4RX before 5.4R4 have an Open Redirect Vulnerability...

Path traversal

A path traversal vulnerability in download.cgi in ASUSTOR AS6202T ADM 3.1.0.RFQ3 allows attackers to arbitrarily specify a file on the system to download via the file1 parameter...

Design/Logic Flaw

An insecure direct object reference vulnerability in download.cgi in ASUSTOR AS6202T ADM 3.1.0.RFQ3 allows the ability to reference the "downloadsyssettings" action and then specify files arbitrarily throughout the system via the act parameter...

CVE-2018-11344

A path traversal vulnerability in download.cgi in ASUSTOR AS6202T ADM 3.1.0.RFQ3 allows attackers to arbitrarily specify a file on the system to download via the file1 parameter...

CVE-2018-11346

CVE-2018-11346 affects ASUSTOR NAS model AS6202T running ADM 3.1.0.RFQ3. The vulnerability is an insecure direct object reference in download.cgi that can reference the action "download_sys_settings" and then specify arbitrary files across the system via the act parameter. The provided documents ...

CVE-2018-11346

An insecure direct object reference vulnerability in download.cgi in ASUSTOR AS6202T ADM 3.1.0.RFQ3 allows the ability to reference the "downloadsyssettings" action and then specify files arbitrarily throughout the system via the act parameter...

CVE-2018-11344

A path traversal vulnerability in download.cgi in ASUSTOR AS6202T ADM 3.1.0.RFQ3 allows attackers to arbitrarily specify a file on the system to download via the file1 parameter...

CVE-2018-11344

CVE-2018-11344 concerns ASUSTOR ADM 3.1.0.RFQ3 on AS6202T. A path traversal vulnerability in download.cgi via the file1 parameter allows an attacker to download arbitrary files from the system. Affected component: download.cgi; root cause: improper validation of file paths in file1. Proof of impa...

CVE-2018-11346: Direct Request

An insecure direct object reference vulnerability in download.cgi in ASUSTOR AS6202T ADM 3.1.0.RFQ3 allows the ability to reference the "downloadsyssettings" action and then specify files arbitrarily throughout the system via the act parameter...

CVE-2018-11344: Improper Limitation of a Pathname to a Restricted Directory

A path traversal vulnerability in download.cgi in ASUSTOR AS6202T ADM 3.1.0.RFQ3 allows attackers to arbitrarily specify a file on the system to download via the file1 parameter...