PT-2019-16600

Name of the Vulnerable Software and Affected Versions Wifi-soft UniBox controller versions 0.x through 2.x Description An issue was discovered that allows for arbitrary file upload through the network/mesh/edit-nds.php endpoint, enabling an attacker to upload .php files and execute code on the...

CVE-2019-3495: Unrestricted Upload of File with Dangerous Type

An issue was discovered on Wifi-soft UniBox controller 0.x through 2.x devices. network/mesh/edit-nds.php is vulnerable to arbitrary file upload, allowing an attacker to upload .php files and execute code on the server with root user privileges. Authentication for accessing this component can be...