CVE-2023-38032 ASUS RT-AC86U - Command injection vulnerability - 2

ASUS RT-AC86U AiProtection security- related function has insufficient filtering of special character. A remote attacker with regular user privilege can exploit this vulnerability to perform command injection attack to execute arbitrary commands, disrupt system or terminate services...

CVE-2023-38032

CVE-2023-38032 affects the ASUS RT-AC86U router’s AiProtection security-related function. The root cause is insufficient filtering of special characters, enabling a remote attacker with regular user privileges to perform a command injection and execute arbitrary commands, potentially disrupting t...

CVE-2023-38031

ASUS RT-AC86U Adaptive QoS - Web History function has insufficient filtering of special character. A remote attacker with regular user privilege can exploit this vulnerability to perform command injection attack to execute arbitrary commands, disrupt system or terminate services...

PT-2023-7491 · Asus · Asus Rt-Ac86U

Name of the Vulnerable Software and Affected Versions: ASUS RT-AC86U affected versions not specified Description: The issue exists due to insufficient filtering of special characters in the Traffic Analyzer - Statistic function of the ASUS RT-AC86U Wi-Fi router's firmware. A remote attacker with...

ASUS RT-AX56U 格式化字符串错误漏洞

The ASUS RT-AX56U is a wireless router from Asus China. The ASUS RT-AX56U V2 and RT-AC86U suffer from a Format String Error vulnerability that stems from the presence of a format string vulnerability, which can be exploited by an unauthenticated, remote attacker to perform remote arbitrary code...

CVE-2023-37289 InfoDoc Document On-line Submission and Approval System - Arbitrary File Upload

It is identified a vulnerability of Unrestricted Upload of File with Dangerous Type in the file uploading function in InfoDoc Document On-line Submission and Approval System, which allows an unauthenticated remote attacker can exploit this vulnerability without logging system to upload and run...

CVE-2023-32753

OMICARD EDM’s file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can exploit this vulnerability to upload and run arbitrary executable files to perform arbitrary system commands or disrupt service...

CVE-2023-28703

ASUS RT-AC86U’s specific cgi function has a stack-based buffer overflow vulnerability due to insufficient validation for network packet header length. A remote attacker with administrator privileges can exploit this vulnerability to execute arbitrary system commands, disrupt system or terminate...

PT-2023-21914 · Unknown · Wade Graphic Design Fantsy

Name of the Vulnerable Software and Affected Versions: Wade Graphic Design FANTSY affected versions not specified Description: The issue is related to insufficient filtering for file type in the file update function. An authenticated remote attacker with general user privilege can exploit this to...

CVE-2023-28703 ASUS RT-AC86U - Buffer Overflow

ASUS RT-AC86U’s specific cgi function has a stack-based buffer overflow vulnerability due to insufficient validation for network packet header length. A remote attacker with administrator privileges can exploit this vulnerability to execute arbitrary system commands, disrupt system or terminate...

CVE-2023-20878

VMware Aria Operations contains a deserialization vulnerability. A malicious actor with administrative privileges can execute arbitrary commands and disrupt the system...

CVE-2023-20878

VMware Aria Operations contains a deserialization vulnerability. A malicious actor with administrative privileges can execute arbitrary commands and disrupt the system...

Deserialization of untrusted data

VMware Aria Operations contains a deserialization vulnerability. A malicious actor with administrative privileges can execute arbitrary commands and disrupt the system...

CVE-2023-20878

VMware Aria Operations contains a deserialization vulnerability. A malicious actor with administrative privileges can execute arbitrary commands and disrupt the system...

PT-2023-19816

Name of the Vulnerable Software and Affected Versions SUNNET CTMS affected versions not specified Description The issue is related to a path traversal vulnerability within the file uploading function of SUNNET CTMS. This allows an authenticated remote attacker with general user privileges to uplo...

PT-2023-17678 · A+Hrd · A+Hrd

Name of the Vulnerable Software and Affected Versions: a+HRD affected versions not specified Description: The issue concerns Deserialization of Untrusted Data within the MSMQ asynchronized message process. An unauthenticated remote attacker can exploit this to execute arbitrary system commands,...

Security Bulletin: CLI access security issue on IBM SAN Volume Controller and Storwize Family (CVE-2014-0880)

Summary Security Bulletin: CLI access security issue on IBM SAN Volume Controller and Storwize Family CVE-2014-0880 Vulnerability Details Security Bulletin --- Summary --- CLI security issue Vulnerability Details --- CVEID: CVE-2014-0880 DESCRIPTION: An unauthorized user with network access to a...

Authentication flaw

Osprey Pump Controller version 1.01 could allow an unauthenticated user to create an account and bypass authentication, thereby gaining unauthorized access to the system. A threat actor could exploit this vulnerability to create a user account without providing valid credentials. A threat actor w...

CVE-2023-28398 CVE-2023-28398

Osprey Pump Controller version 1.01 could allow an unauthenticated user to create an account and bypass authentication, thereby gaining unauthorized access to the system. A threat actor could exploit this vulnerability to create a user account without providing valid credentials. A threat actor w...

CVE-2018-25048 Codesys Runtime Improper Limitation of a Pathname

The CODESYS runtime system in multiple versions allows an remote low privileged attacker to use a path traversal vulnerability to access and modify all system files as well as DoS the device...