10 matches found
Privilege-escalation-MitraStar
Privilege-escalation-MitraStar-Router-GPT-2541GNAC-N1 CVE-2021-42165 MitraStar 라우터의 권한 상승 취약점 장치: Mitrastar GPT-2541GNAC-N1 펌웨어: BRg3.5100VNZ0b33 다른 버전에서는 테스트되지 않음 익스플로잇: Mitrastar GPT-2541GNAC-N1 장치는 SSH를 통해 제한된 기본 셸로 접근할 수 있게 제공됩니다: 제한된 셸은 CLI 버전이 “ReducedCLIHGUv15”이며, 일반적인 linux/unix 명령 실행을 막기...
EUVD-2024-50258
Malicious code in bioql PyPI...
CVE-2024-9977
A vulnerability, which was classified as critical, was found in MitraStar GPT-2541GNAC BRg5.61.11WVK.0b26. Affected is an unknown function of the file /cgi-bin/settings-firewall.cgi of the component Firewall Settings Page. The manipulation of the argument SrcInterface leads to os command injectio...
CVE-2024-9977
CVE-2024-9977 refers to a remote os command injection vulnerability in the MitraStar GPT-2541GNAC Firewall Settings Page, via the /cgi-bin/settings-firewall.cgi file. The attackable surface is the SrcInterface parameter, whose manipulation can lead to command execution on the device. Multiple sou...
CVE-2024-9977 MitraStar GPT-2541GNAC Firewall Settings Page settings-firewall.cgi os command injection
A vulnerability, which was classified as critical, was found in MitraStar GPT-2541GNAC BRg5.61.11WVK.0b26. Affected is an unknown function of the file /cgi-bin/settings-firewall.cgi of the component Firewall Settings Page. The manipulation of the argument SrcInterface leads to os command injectio...
CVE-2021-42165
MitraStar GPT-2541GNAC-N1 HGU 100VNZ0b33 devices allow remote authenticated users to obtain root access by executing command "deviceinfo show file &&/bin/bash" because of incorrect sanitization of parameter "path"...
Mitrastar GPT-2541GNAC-N1 - Privilege escalation Vulnerability
Exploit Title: Mitrastar GPT-2541GNAC-N1 - Privilege escalation Exploit Author: Leonardo Nicolas Servalli Vendor Homepage: www.mitrastar.com Platform: Mistrastar router devices GPT-2541GNAC-N1 HGU Tested on: Firmware BRg3.5100VNZ0b33 Vulnerability analysis:...
Design/Logic Flaw
MitraStar GPT-2541GNAC HGU 1.00VNJ0b1 and DSL-100HN-T1 ES113WJY0b16 devices allow remote authenticated users to obtain root access by specifying /bin/sh as the command to execute...