Ruijie Networks RG-UAC 操作系统命令注入漏洞

Ruijie Networks RG-UAC is an Internet behavior management and auditing product from China's Ruijie Networks Ruijie Networks. It is used to solve Internet auditing problems. An operating system command injection vulnerability exists in Ruijie Networks RG-UAC version 20240428 and earlier versions,...

CVE-2023-25082

Multiple buffer overflow vulnerabilities exist in the vtyshubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf pattern. A specially crafted HTTP request can lead to arbitrary code execution. An attacker with high privileges can send HTTP requests to trigger these...

PT-2018-13540

Name of the Vulnerable Software and Affected Versions e107 version 2.1.8 Description The issue allows SQL injection via the old ip parameter in the e107 admin/banlist.php file. Recommendations For version 2.1.8, avoid using the old ip parameter in the affected API endpoint until the issue is...