5 matches found
ats-esi-unix-recvport
abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · ats-esi-unix-recvport ats-esi-unix-recvport Class: SSRF Reach: Remote Apache Traffic Server 10.2.0 b1df7334 - Apache Software Foundation ESI FetchSM PluginVC reports dest port 0. Remap treats port 0 as UDS and rewrite...
RaspAP 2.8.7 Unauthenticated Command Injection Exploit
RaspAP is feature-rich wireless router software that just works on many popular Debian-based devices, including the Raspberry Pi. A Command Injection vulnerability in RaspAP versions 2.8.0 thru 2.8.7 allows unauthenticated attackers to execute arbitrary commands in the context of the user running...
CVE-2022-30322
go-getter up to 1.5.11 and 2.0.2 allowed asymmetric resource exhaustion when go-getter processed malicious HTTP responses. Fixed in 1.6.1 and 2.1.0...