Lucene search
K

10 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2023-39719

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.00157EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2024/05/03 2:15 a.m.2 views

CVE-2023-35720

ASUS RT-AX92U lighttpd modwebdav.so SQL Injection Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected ASUS RT-AX92U routers. Authentication is not required to exploit this vulnerability. The specific flaw exists...

6.5CVSS6.6AI score0.00157EPSS
Exploits0References3
NVD
NVD
added 2024/05/03 2:15 a.m.15 views

CVE-2023-35720

ASUS RT-AX92U lighttpd modwebdav.so SQL Injection Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected ASUS RT-AX92U routers. Authentication is not required to exploit this vulnerability. The specific flaw exists...

6.5CVSS6.4AI score0.00157EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/05/03 1:57 a.m.24 views

CVE-2023-35720 ASUS RT-AX92U lighttpd mod_webdav.so SQL Injection Information Disclosure Vulnerability

ASUS RT-AX92U lighttpd modwebdav.so SQL Injection Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected ASUS RT-AX92U routers. Authentication is not required to exploit this vulnerability. The specific flaw exists...

6.5CVSS6.8AI score0.00157EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/05/03 1:57 a.m.12 views

CVE-2023-35720 ASUS RT-AX92U lighttpd mod_webdav.so SQL Injection Information Disclosure Vulnerability

ASUS RT-AX92U lighttpd modwebdav.so SQL Injection Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected ASUS RT-AX92U routers. Authentication is not required to exploit this vulnerability. The specific flaw exists...

6.5CVSS6.9AI score0.00157EPSS
Exploits0References2
CVE
CVE
added 2024/05/03 1:57 a.m.65 views

CVE-2023-35720

CVE-2023-35720 affects ASUS RT-AX92U via the mod_webdav.so module. The flaw allows network-adjacent attackers to disclose sensitive information through SQL injection in requests, with no authentication required and root context obtainable. The vulnerability stems from inadequate validation of a u...

6.5CVSS6.5AI score0.00157EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2024/05/03 12:0 a.m.2 views

ASUS RT-AX92U 安全漏洞

ASUS RT-AX92U is a wireless router from Asus China. A security vulnerability exists in the ASUS RT-AX92U that stems from the presence of a SQL injection information disclosure vulnerability that allows network-adjacent attackers to disclose sensitive information on the affected router...

6.5CVSS6.5AI score0.00157EPSS
Exploits0References3
Zero Day Initiative
Zero Day Initiative
added 2023/08/23 12:0 a.m.21 views

ASUS RT-AX92U lighttpd mod_webdav.so SQL Injection Information Disclosure Vulnerability

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected ASUS RT-AX92U routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the modwebdav.so module. When parsing a request, the process does not properly...

6.5CVSS6.8AI score0.00157EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2023/08/23 12:0 a.m.3 views

PT-2023-7493 · Asus · Asus Rt-Ax92U

Name of the Vulnerable Software and Affected Versions: ASUS RT-AX92U affected versions not specified Description: This issue allows network-adjacent attackers to disclose sensitive information on affected ASUS RT-AX92U routers. The flaw exists within the mod webdav.so module, where the process do...

9CVSS6.6AI score0.00157EPSS
Exploits0References7
CVE
CVE
added 2021/11/19 11:26 a.m.100 views

CVE-2021-41435

CVE-2021-41435 affects a broad set of ASUS router models and TUF/ZenWiFi devices. The flaw is a brute-force protection bypass in the CAPTCHA protection that allows a remote attacker to perform an arbitrary number of login attempts by sending a specific HTTP request. Affected versions are before 3...

10CVSS9.2AI score0.02497EPSS
Exploits0References8Affected Software1
Rows per page
Query Builder