CVE-2023-0646

CVE-2023-0646 affects dst-admin 1.5.0. The vulnerability arises from an unknown functionality in the file /home/cavesConsole where manipulation of the command argument enables remote command injection. Exploitation has been publicly disclosed. Multiple connected sources identify this as a remote-...

CVE-2023-0647

CVE-2023-0647 affects dst-admin 1.5.0. The vulnerability resides in an unknown function targeting the file /home/kickPlayer, where manipulating the argument userId leads to a remote command injection. The exploit has been disclosed publicly. Multiple sources corroborate a remote attack scenario w...

CVE-2023-0649

CVE-2023-0649 affects dst-admin 1.5.0, with a flaw in the /home/sendBroadcast code path where manipulating the message parameter enables remote command injection. Multiple sources confirm a critical issue with remote exploit capability and public disclosure. The underlying impact is command execu...

CVE-2023-0648

CVE-2023-0648 affects dst-admin 1.5.0, with a command injection in the /home/masterConsole area caused by manipulation of the command argument. It can be exploited remotely and the exploit has been publicly disclosed. Some connected sources note a workaround (restrict access to the command argume...

CVE-2021-44586

CVE-2021-44586 concerns dst-admin v1.3.0, where an unauthorized arbitrary file download vulnerability can expose sensitive information. According to NVD, the issue has a Network attack vector with low complexity and no authentication required, exposing partial confidentiality (C:P) and no integri...