Peplink Balance Two before 8.4.0 - Unauthenticated Config Upload

A vulnerability in Peplink Balance Two prior to version 8.4.0 allows unauthenticated attackers to modify captive portal configurations due to a missing authorization check. Specifically, attackers can upload files via /guest/portaladminupload.cgi, with the changes reflected at...

CVE-2023-49230

An issue was discovered in Peplink Balance Two before 8.4.0. A missing authorization check in captive portals allows attackers to modify the portals' configurations without prior authentication...

CVE-2023-49229

An issue was discovered in Peplink Balance Two before 8.4.0. A missing authorization check in the administration web service allows read-only, unprivileged users to obtain sensitive information about the device configuration...

CVE-2023-49226

An issue was discovered in Peplink Balance Two before 8.4.0. Command injection in the traceroute feature of the administration console allows users with admin privileges to execute arbitrary commands as root...

CVE-2020-24246

Peplink Balance before 8.1.0rc1 allows an unauthenticated attacker to download PHP configuration files /filemanager/php/connector.php from Web Admin...

CVE-2023-40146

A privilege escalation vulnerability exists in the /bin/login functionality of Peplink Smart Reader v1.2.0 in QEMU. A specially crafted command line argument can lead to a limited-shell escape and elevated capabilities. An attacker can authenticate with hard-coded credentials and execute unblocke...

EUVD-2017-17778

Malware in sbrugna...

EUVD-2017-17783

Malware in sbrugna...

EUVD-2017-17781

Malware in sbrugna...

EUVD-2020-16981

Malware in sbrugna...

EUVD-2017-17782

Malware in sbrugna...

EUVD-2017-17780

Malware in sbrugna...

EUVD-2023-49516

Malicious code in bioql PyPI...

EUVD-2023-31156

Malicious code in bioql PyPI...

EUVD-2023-32077

Malicious code in bioql PyPI...

EUVD-2023-39196

Malicious code in bioql PyPI...

EUVD-2023-38434

Malicious code in bioql PyPI...

EUVD-2023-50033

Malicious code in bioql PyPI...

EUVD-2023-44753

Malicious code in bioql PyPI...

EUVD-2023-39197

Malicious code in bioql PyPI...