Apache Airflow 访问控制错误漏洞

Apache Airflow is the United States Apache Apache Foundation's set of open source platform for creating, managing and monitoring workflow. The platform is scalable and dynamic monitoring and other characteristics. A security bypass vulnerability exists in Apache Airflow versions prior to 2.8.0,...

ASUS Router Buffer Overflow Vulnerability

ASUS routers is a wireless router product from ASUS. A buffer overflow vulnerability exists in the 'ejupdatevariables' function in the router/httpd/web.c file in ASUS routers. An attacker could exploit this vulnerability by sending a request to update settings to execute code...

CVE-2018-5721

Stack-based buffer overflow in the ejupdatevariables function in router/httpd/web.c on ASUS routers when using software from https://github.com/RMerl/asuswrt-merlin allows web authenticated attackers to execute code via a request that updates a setting. In ejupdatevariables, the length of the...