CVE-2023-35085

The CVE-2023-35085 issue is an integer overflow in UniFi devices (APs and switches, excluding USW Flex Mini) when SNMP monitoring is enabled with default settings, potentially allowing remote code execution (RCE). Affected: UniFi Access Points (v6.5.50 and earlier) and UniFi Switches (v6.5.32 and...

Ubiquiti UniFi Command Injection Vulnerability

Ubiquiti UniFi is a wireless networking system from Ubiquiti, Inc. A security vulnerability exists in Ubiquiti UniFi Access Points 6.5.50 and earlier, and Switches 6.5.32 and earlier, which stems from an integer overflow vulnerability in UniFi Access Points and Switches except Switch Flex Mini wi...

CVE-2023-35085: Integer Overflow or Wraparound

An integer overflow vulnerability in all UniFi Access Points and Switches, excluding the Switch Flex Mini, with SNMP Monitoring and default settings enabled could allow a Remote Code Execution RCE. Affected Products: All UniFi Access Points Version 6.5.50 and earlier All UniFi Switches Version...

CVE-2023-38034: Improper Neutralization of Special Elements used in a Command

A command injection vulnerability in the DHCP Client function of all UniFi Access Points and Switches, excluding the Switch Flex Mini, could allow a Remote Code Execution RCE. Affected Products: All UniFi Access Points Version 6.5.53 and earlier All UniFi Switches Version 6.5.32 and earlier -USW...

PT-2023-26258

Name of the Vulnerable Software and Affected Versions UniFi Access Points versions 6.5.53 and earlier UniFi Switches versions 6.5.32 and earlier Description A command injection vulnerability in the DHCP Client function of UniFi Access Points and Switches could allow a Remote Code Execution RCE. T...

PT-2023-25136

Name of the Vulnerable Software and Affected Versions UniFi Access Points versions 6.5.50 and earlier UniFi Switches versions 6.5.32 and earlier Description An integer overflow vulnerability in UniFi Access Points and Switches, excluding the Switch Flex Mini, with SNMP Monitoring and default...

Ubiquiti UniFi Input Validation Error Vulnerability

Ubiquiti UniFi is a wireless networking system from Ubiquiti, Inc. A security vulnerability exists in Ubiquiti UniFi Access Points 6.5.50 and earlier, and Switches 6.5.32 and earlier, which stems from an integer overflow vulnerability in UniFi Access Points and Switches except Switch Flex Mini wi...

Free Airline Miles, Hotel Points, and User Data Put at Risk by Flaws in Points Platform

Flaws in the Points.com platform, which is used to manage dozens of major travel rewards programs, exposed user data—and could have let an attacker snag some extra perks...

Moxa AWK-3131A Web Application Ping Command Injection (CVE-2016-8721)

An exploitable OS Command Injection vulnerability exists in the web application 'ping' functionality of Moxa AWK-3131A Wireless Access Points running firmware 1.1. Specially crafted web form input can cause an OS Command Injection resulting in complete compromise of the vulnerable device. An...

Remote code execution

Remote code execution vulnerability in Ruijie Networks Product: RG-EW series home routers and repeaters EW3.01B11P204, RG-NBS and RG-S1930 series switches SWITCH3.01B11P218, RG-EG series business VPN routers EG3.01B11P216, EAP and RAP series wireless access points AP3.01B11P218, NBC series wirele...

CVE-2023-34644

Remote code execution vulnerability in Ruijie Networks Product: RG-EW series home routers and repeaters EW3.01B11P204, RG-NBS and RG-S1930 series switches SWITCH3.01B11P218, RG-EG series business VPN routers EG3.01B11P216, EAP and RAP series wireless access points AP3.01B11P218, NBC series wirele...

Ruijie Networks Product 代码注入漏洞

Ruijie Networks Product is a series of Ruijie wireless products from China-based Ruijie Networks. A security vulnerability exists in the Ruijie Networks Product that originates from an API privilege that allows a remote attacker to escalate via a POST request to /cgi-bin/luci/ and affects the...

CVE-2023-34644

Remote code execution vulnerability in Ruijie Networks Product: RG-EW series home routers and repeaters EW3.01B11P204, RG-NBS and RG-S1930 series switches SWITCH3.01B11P218, RG-EG series business VPN routers EG3.01B11P216, EAP and RAP series wireless access points AP3.01B11P218, NBC series wirele...

PT-2023-24965 · Ruijie Networks · Rg-Nbs +6

Name of the Vulnerable Software and Affected Versions: Ruijie Networks RG-EW series home routers and repeaters version EW 3.01B11P204 Ruijie Networks RG-NBS and RG-S1930 series switches version SWITCH 3.01B11P218 Ruijie Networks RG-EG series business VPN routers version EG 3.01B11P216 Ruijie...

PT-2023-25401 · Aruba · Aruba Access Point

Name of the Vulnerable Software and Affected Versions: Aruba access points affected versions not specified Description: The issue involves buffer overflow vulnerabilities in multiple underlying services. These vulnerabilities could lead to unauthenticated remote code execution by sending speciall...

PT-2023-25403

Name of the Vulnerable Software and Affected Versions Aruba access points affected versions not specified Description The issue involves buffer overflow vulnerabilities in multiple underlying services. These vulnerabilities could lead to unauthenticated remote code execution by sending specially...

Part I: Implementing Effective Cyber Security Metrics That Reduce Risk Realistically

As a CISO or business leader, some burning questions that often come to your mind are: How vulnerable is our cybersecurity posture? Are we better protected than we were three months or a year ago? Have our investments improved the cybersecurity posture and yielded any tangible benefits? Are my...

The vulnerability of the CAPWAP (Control and Provisioning of Wireless Access Points) microprogramming software used in Zyxel’s USG FLEX, USG FLEX 50(W), USG20(W)-VPN, ATP, and VPN devices allows a hacker to cause service interruptions.

The vulnerability of the CAPWAP Control and Provisioning of Wireless Access Points microprogramming software used in Zyxel USG FLEX, USG FLEX 50W, USG20W-VPN, ATP, and VPN devices lies in the fact that the operation data is stored outside of the buffer in memory. Exploiting this vulnerability...

HPESBNW04492 rev.2 - Aruba Access Points, Multiple Vulnerabilities

Potential Security Impact: Remote: Arbitrary Code Execution, Disclosure of Sensitive Information, Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba 100 Series Access Points See vulnerability summary for details Aruba 103 Series Access Points See vulnerability...

myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin < 2.5.1 - Cross-Site Request Forgery

Description The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...