The vulnerability of the application software interface “certificate_file_remove” of the multifunctional wireless access points manufactured by Advantech, models EKI-6333AC-2G, EKI-6333AC-2GD, and EKI-6333AC-1GPO, allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the application software interface “certificatefileremove” of the multifunctional wireless access points of the Advantech EKI-6333AC-2G, EKI-6333AC-2GD, and EKI-6333AC-1GPO models exists due to the lack of measures taken to neutralize the special elements used in the operatin...

The vulnerability of the “edgserver” service in the microprogramming software of the multifunctional wireless access points Advantech EKI-6333AC-2G, EKI-6333AC-2GD, and EKI-6333AC-1GPO allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the “edgserver” service in the microprogramming software for multifunctional wireless access points of Advantech models EKI-6333AC-2G, EKI-6333AC-2GD, and EKI-6333AC-1GPO exists due to the failure to take measures to neutralize special elements used in the operating system...

The vulnerability of the application software interface “multiple_ssid_htm” of the multifunctional wireless access points manufactured by Advantech, models EKI-6333AC-2G, EKI-6333AC-2GD, and EKI-6333AC-1GPO, allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the “multiplessidhtm” application programming interface in the microprogramming-based wireless access points of Advantech models EKI-6333AC-2G, EKI-6333AC-2GD, and EKI-6333AC-1GPO exists due to the lack of measures taken to neutralize the special elements used in the operatin...

The vulnerability of the application software interface “lan_apply” of the microprogrammed wireless access points of Advantech models EKI-6333AC-2G, EKI-6333AC-2GD, and EKI-6333AC-1GPO allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the “lanapply” application programming interface of the microprogramming-based wireless access points of Advantech models EKI-6333AC-2G, EKI-6333AC-2GD, and EKI-6333AC-1GPO exists due to the failure to take measures to neutralize the special elements used in the operating...

The vulnerability of the “snmp_apply” application programming interface of the microprogramming-based wireless access points of Advantech models EKI-6333AC-2G, EKI-6333AC-2GD, and EKI-6333AC-1GPO allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the “snmpapply” application programming interface of the Advantech EKI-6333AC-2G, EKI-6333AC-2GD, and EKI-6333AC-1GPO wireless access points exists due to the failure to take measures to neutralize special elements used in the operating system command. Exploiting this...

The vulnerability of the “edgserver” service in the microprogramming software for multifunctional wireless access points of Advantech models EKI-6333AC-2G, EKI-6333AC-2GD, and EKI-6333AC-1GPO allows a hacker to execute arbitrary commands with root privileges.

The vulnerability of the “edgserver” service in the microprogramming-based wireless access points of Advantech EKI-6333AC-2G, EKI-6333AC-2GD, and EKI-6333AC-1GPO models exists due to the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting th...

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2023-52524: Fixed possible corruption in nfc/llcp bsc1220927. CVE-2024-49925: fbdev: efifb: Register sysfs groups through driver core bsc1232224 CVE-2024-50089:...

CVE-2024-11201: Improper Neutralization of Input During Web Page Generation

The myCred – Loyalty Points and Rewards plugin for WordPress and WooCommerce – Give Points, Ranks, Badges, Cashback, WooCommerce rewards, and WooCommerce credits for Gamification plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's mycredsend shortcode in all version...

hull.js Code Injection Vulnerability

Versions of the library from 0.2.2 to 1.0.9 are vulnerable to the arbitrary code execution due to unsafe usage of new Function... in the module that handles points format. Applications passing the 3rd parameter to the hull function without sanitising may be impacted. The vulnerability has been...

PT-2024-40423

Name of the Vulnerable Software and Affected Versions Library versions 0.2.2 through 1.0.9 Description The issue is related to arbitrary code execution due to the unsafe usage of new Function... in the module handling points format. Applications that pass the 3rd parameter to the hull function...

CVE-Research

It is an offensive tool for web application security research. T...

The vulnerability of the capture_packages function in multifunctional wireless access points of Advantech EKI-6333AC-2G, EKI-6333AC-2GD, and EKI-6333AC-1GPO allows a intruder to execute arbitrary commands.

The vulnerability of the capturepackages function in multifunctional wireless access points of Advantech EKI-6333AC-2G, EKI-6333AC-2GD, and EKI-6333AC-1GPO is related to the lack of measures to neutralize special elements. Exploiting this vulnerability could allow a remote attacker to execute...

CVE-2024-50371

A CWE-78 "Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection'" was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G = 1.6.3, EKI-6333AC-2GD = v1.6.3 and EKI-6333AC-1GPO = v1.2.1. The vulnerability can be exploited by remote...

The vulnerability of RUCKUS Wireless Access Points (Ruckus AP) lies in insufficient verification of input data, allowing attackers to execute arbitrary codes.

The vulnerability of RUCKUS Wireless Access Points involves insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands via the SSH interface...

CVE-2024-11653

CVE-2024-11653 affects EnGenius ENH1350EXT, ENS500-AC and ENS620EXT (up to 2024-11-18). The vulnerability is a command injection in the /admin/network/diag_traceroute endpoint via manipulation of the diag_traceroute parameter. It can be exploited remotely. Public exploit has been disclosed; vendo...

EnGenius多款产品 安全漏洞

EnGenius ENH1350EXT and others are an outdoor wireless access point from EnGenius. A security vulnerability exists in various EnGenius products, which stems from a command injection due to incorrect operation of the parameter wifischeduledayem5. The following products are affected: EnGenius...

Astra Linux – Vulnerability in LibreOffice

LibreOffice can import EMF+ graphics, which may be embedded in documents. A heap buffer overflow occurred when importing an EMF+ gradient brush. The number of gradient blend points was read from the file and used to compute an allocation size; however, this multiplication could lead to a buffer...

SUSE CVE-2024-53055

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix 6 GHz scan construction If more than 255 colocated APs exist for the set of all APs found during 2.4/5 GHz scanning, then the 6 GHz scan construction will loop forever since the loop variable has type u8,...

DEBIAN-CVE-2024-53055

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix 6 GHz scan construction If more than 255 colocated APs exist for the set of all APs found during 2.4/5 GHz scanning, then the 6 GHz scan construction will loop forever since the loop variable has type u8,...

UBUNTU-CVE-2024-53055

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix 6 GHz scan construction If more than 255 colocated APs exist for the set of all APs found during 2.4/5 GHz scanning, then the 6 GHz scan construction will loop forever since the loop variable has type u8,...