CVE-2023-6339

Google Nest WiFi Pro root code-execution & user-data compromise...

Remote code execution

Google Nest WiFi Pro root code-execution & user-data compromise...

CVE-2023-6339 Google Nest WiFi Pro root code-execution & user-data compromise

Google Nest WiFi Pro root code-execution & user-data compromise...

CVE-2023-6339

CVE-2023-6339 affects Google Nest WiFi Pro. The vulnerability allows remote root code execution and user-data compromise over the network with low attack complexity and no privileges required. Impacted by confidentiality, integrity, and availability being high. CVSS metrics show a critical risk (...

PT-2024-14935 · Google · Google Nest Wifi Pro

Name of the Vulnerable Software and Affected Versions: Google Nest WiFi Pro affected versions not specified Description: A severe issue has been disclosed for Google Nest WiFi Pro, allowing for root code-execution and user-data compromise. The estimated number of potentially affected devices...

Malicious code in new-pro-anu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0b55891b547000b2110259388d7a21b3400ccd5815214318ed92c74acd78bf3c The OpenSSF Package Analysis project identified 'new-pro-anu' @ 1.2.8 npm as malicious. It is considered malicious because: - The package...

ASB-A-300090204

In convertToComponentName of DreamService.java, there is a possible way to launch arbitrary protected activities due to intent redirection. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-49830

Improper Control of Generation of Code 'Code Injection' vulnerability in Brainstorm Force Astra Pro.This issue affects Astra Pro: from n/a through 4.3.1...

CVE-2023-49830

Improper Control of Generation of Code 'Code Injection' vulnerability in Brainstorm Force Astra Pro.This issue affects Astra Pro: from n/a through 4.3.1...

Code injection

Improper Control of Generation of Code 'Code Injection' vulnerability in Brainstorm Force Astra Pro.This issue affects Astra Pro: from n/a through 4.3.1...

CVE-2023-49830 WordPress Astra Pro Plugin <= 4.3.1 is vulnerable to Remote Code Execution (RCE)

Improper Control of Generation of Code 'Code Injection' vulnerability in Brainstorm Force Astra Pro.This issue affects Astra Pro: from n/a through 4.3.1...

CVE-2023-49830

CVE-2023-49830 concerns Brainstorm Force Astra Pro Addon (vulnerable: Astra Pro

pro-eps.fr Improper Access Control vulnerability OBB-3825257

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

VulnCheck KEV: CVE-2018-20470

An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0. A directory traversal arbitrary file access vulnerability exists in the web reports module. This allows an outside attacker to view contents of sensitive files...

WordPress Custom 404 Pro Plugin <= 3.10.0 is vulnerable to Cross Site Scripting (XSS)

Software Custom 404 Pro Type Plugin Vulnerable versions = 3.10.0 Fixed in 3.10.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-51540 Patch priority Medium CVSS severity Medium 7.1 Developer Kunal Nagar PSID ae8e6b89c98e Credits Kyle Sanchez Required privilege...

CVE-2023-31224

There is broken access control during authentication in Jamf Pro Server before 10.46.1...

CVE-2023-31224

There is broken access control during authentication in Jamf Pro Server before 10.46.1...

CVE-2023-31224

There is broken access control during authentication in Jamf Pro Server before 10.46.1...

Improper access control

There is broken access control during authentication in Jamf Pro Server before 10.46.1...

Voltronic Power ViewPower Remote Code Execution Vulnerability (CNVD-2025-2159900)

Voltronic Power ViewPower is Voltronic Power's monitoring and management software for solar inverters. A remote code execution vulnerability exists in Voltronic Power ViewPower Pro, which is caused by a lack of proper validation of user-supplied data and can lead to deserialization of untrustwort...