Cross site scripting

ASUS RT-AX88U has insufficient filtering for special characters in the HTTP header parameter. A remote attacker with general user privilege can exploit this vulnerability to inject JavaScript and perform Stored Cross-Site Scripting XSS attacks...

CVE-2022-26674

CVE-2022-26674 affects ASUS RT-AX88U (wireless router). The connected sources describe a Format String vulnerability in the device that, when exploited by an unauthenticated remote attacker, can write to arbitrary memory and lead to remote arbitrary code execution, arbitrary system operations, or...

CVE-2022-26674 ASUS RT-AX88U - Format String

ASUS RT-AX88U has a Format String vulnerability, which allows an unauthenticated remote attacker to write to arbitrary memory address and perform remote arbitrary code execution, arbitrary system operation or disrupt service...

CVE-2022-26673

CVE-2022-26673 affects ASUS RT-AX88U; root cause is insufficient filtering for special characters in an HTTP header parameter, enabling a remote attacker with general user privileges to inject JavaScript and perform Stored XSS. The impact is Stored XSS with potential partial integrity impact as p...

CVE-2022-26673 ASUS RT-AX88U - Stored XSS

ASUS RT-AX88U has insufficient filtering for special characters in the HTTP header parameter. A remote attacker with general user privilege can exploit this vulnerability to inject JavaScript and perform Stored Cross-Site Scripting XSS attacks...

CVE-2022-26674

ASUS RT-AX88U has a Format String vulnerability, which allows an unauthenticated remote attacker to write to arbitrary memory address and perform remote arbitrary code execution, arbitrary system operation or disrupt service...

CVE-2022-26673

ASUS RT-AX88U has insufficient filtering for special characters in the HTTP header parameter. A remote attacker with general user privilege can exploit this vulnerability to inject JavaScript and perform Stored Cross-Site Scripting XSS attacks...

Important: Red Hat Security Advisory: kernel-rt security and bug fix update

An update for kernel-rt is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available f...

RHEL 8 : kernel-rt (RHSA-2022:1413)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:1413 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...

July 12, 2022-Security and Quality Rollup for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 8.1, RT 8.1, and Windows Server 2012 R2 (KB5016568)

July 12, 2022-Security and Quality Rollup for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 8.1, RT 8.1, and Windows Server 2012 R2 KB5016568 Applies to: Microsoft .NET Framework 3.5 Microsoft .NET Framework 4.6.2 Microsoft .NET Framework 4.7 Microsoft .NET Framework 4.7.1 Microso...

ASUS RT-AX56U update_PLC/PORT file path traversal vulnerability

The ASUS RT-AX56U is a wireless router from ASUS of Taiwan, China. A path traversal vulnerability exists in the ASUS RT-AX56U updatePLC/PORT file, which can be exploited by an attacker to overwrite system files by uploading another PLC/PORT file with the same filename, resulting in a service...

ASUS RT-AX56U Stack Buffer Overflow Vulnerability

The ASUS RT-AX56U is a wireless router from ASUS of Taiwan, China. The ASUS RT-AX56U suffers from a stack buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code, perform arbitrary operations, or interrupt services...

ASUS RT-AX56U update_json function path traversal vulnerability

The ASUS RT-AX56U is a wireless router from ASUS of Taiwan, China. A path traversal vulnerability exists in the ASUS RT-AX56U updatejson function due to insufficient filtering of special characters in URL parameters. An attacker can exploit the vulnerability to cause a service interruption by...

ASUS RT-AC86U Command Injection Vulnerability

The ASUS RT-AC86U is a dual-band Wi-Fi router from the Chinese company ASUS. The ASUS RT-AC86U suffers from a command injection vulnerability that can be exploited by an attacker to execute arbitrary commands and interrupt or terminate services...

ASUS RT-AC86U Input Validation Error Vulnerability

The ASUS RT-AC86U is a dual-band Wi-Fi router from the Chinese company ASUS. A security vulnerability exists in the ASUS RT-AC86U, which can be exploited by an attacker to cause a denial of service by sending a server-to-client reply attempt...

ASUS RT-AC56U Heap Buffer Overflow Vulnerability

The ASUS RT-AC56U is a dual-band Wi-Fi router from ASUS China. A security vulnerability exists in the ASUS RT-AC56U, which originates from an insufficient validation of the decryption parameter length, and allows an attacker to execute arbitrary code, arbitrary operations, and interrupt services...

CVE-2022-25595

ASUS RT-AC86U has improper user request handling, which allows an unauthenticated LAN attacker to cause a denial of service by sending particular request a server-to-client reply attempt...

CVE-2022-23972

ASUS RT-AX56U’s SQL handling function has an SQL injection vulnerability due to insufficient user input validation. An unauthenticated LAN attacker to inject arbitrary SQL code to read, modify and delete database...

CVE-2022-23973

ASUS RT-AX56U’s user profile configuration function is vulnerable to stack-based buffer overflow due to insufficient validation for parameter length. An unauthenticated LAN attacker can execute arbitrary code to perform arbitrary operations or disrupt service...

CVE-2022-23970

ASUS RT-AX56U’s updatejson function has a path traversal vulnerability due to insufficient filtering for special characters in the URL parameter. An unauthenticated LAN attacker can overwrite a system file by uploading another file with the same file name, which results in service disruption...