Lê Hữu Quang Linh

A flaw exists in Microsoft SharePoint Server that enables remote attackers to execute arbitrary code and compromise the system. The issue stems from insufficient input validation. Exploitation of this flaw could allow an attacker to execute code remotely by using specially crafted data. This is a post-authentication remote code execution issue.

The issue is related to an elevation of privilege vulnerability. No further details are provided about the nature of the issue, affected devices, or real-world incidents.

The issue is related to insufficient input validation in the Quagga package of the affected ZyXEL devices. This could allow an authenticated local attacker to access configuration files on an affected device.

A command injection vulnerability in the Free Time WiFi hotspot feature could allow an unauthenticated, LAN-based attacker to execute some OS commands on an affected device. The vulnerability is related to the failure to neutralize special elements used in the operating system command, which may allow a remote attacker to execute arbitrary commands.

A buffer overflow vulnerability in the CAPWAP daemon could allow an unauthenticated, LAN-based attacker to cause denial of service (DoS) conditions by sending a crafted request. This issue is related to a buffer overflow in the memory, which can be exploited by a remote attacker to cause a denial of service.

A command injection vulnerability in the access point management feature could allow an unauthenticated, LAN-based attacker to execute some OS commands on an affected device if the attacker could trick an authorized administrator to add their IP address to the managed AP list in advance. The vulnerability is related to the failure to neutralize special elements used in the operating system command.

A command injection vulnerability in the hotspot management feature could allow an unauthenticated, LAN-based attacker to execute some OS commands on an affected device if the attacker could trick an authorized administrator to add their IP address to the list of trusted RADIUS clients in advance. The vulnerability is related to the failure to neutralize special elements used in the operating system command.

The issue exists due to insufficient input validation in the Windows Media Foundation component of Windows operating systems. This allows a remote attacker to execute arbitrary code on the system.

The issue exists due to insufficient input validation in the Windows Media component. This allows a remote attacker to execute arbitrary code.

The issue is related to insufficient input validation in the Windows Media player, which can be exploited by attackers to execute arbitrary code using a specially crafted malicious file. This allows remote attackers to execute arbitrary code and affect the system.

The issue is related to insufficient input validation in Windows Media Player, which can be exploited by attackers to execute arbitrary code using a specially crafted malicious file. This can allow remote attackers to affect the system. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.