Patrick Muench

The issue allows an attacker to open a reverse shell with root privileges.

The issue allows an attacker to gain knowledge by reading insufficiently protected sensitive information, which can be used to plan further attacks.

The issue allows an authenticated low-privileged user to embed malicious Javascript code, potentially gaining admin rights when an admin user visits the vulnerable website. This is a case of local privilege escalation.

Name of the Vulnerable Software and Affected Versions: GitLab Enterprise version 12.0.0-pre Description: The issue allows authenticated remote attackers to read Docker registries of other groups. This occurs when a legitimate user changes the path of a group, and the Docker registries are not adapted, leaving them in the old namespace and making them available to all other users with no previous access to the repository. Recommendations: For GitLab Enterprise version 12.0.0-pre, consider restricting access to the Docker registries until a patch is available to prevent unauthorized access. As a temporary workaround, avoid changing the path of a group to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

A SQL injection issue allows unauthenticated remote attackers to execute arbitrary SQL commands. This is achieved via the `user id` parameter in a "/login/forgot1" POST request.

The issue concerns the Log module in SECUDOS DOMOS, which allows local file inclusion.

The issue affects the Log module, allowing for cross-site scripting (XSS) attacks.

The issue allows unauthenticated remote attackers to disclose password hashes of GUI users through the User.getUserPWD method. This can be exploited by attackers with access to the web interface.

A Remote Code Execution issue in the DNS Query Web UI allows remote authenticated attackers to execute arbitrary commands via a crafted DNS Query address field in a JSON API request.

The issue allows remote attackers to read arbitrary files of the device's filesystem through Directory Traversal or Arbitrary File Read. This can be exploited by unauthenticated attackers with access to the web interface.

A reflected Cross-Site scripting issue allows remote attackers to inject arbitrary web scripts or HTML via the `username` parameter to the "Login Form" API endpoint.

The issue allows exploitation by sending arbitrary XML-RPC requests to control attached BidCos devices, due to an open XML-RPC port without authentication.

The issue concerns the download of software update packages via the HTTP protocol, which lacks cryptographic protection. An attacker with a privileged network position can exploit this to provide malicious firmware updates, potentially resulting in a full system compromise.

The issue allows remote attackers to read the first line of an arbitrary file on the CCU2's filesystem through the User.getLanguage method. This can be exploited by unauthenticated attackers with access to the web interface.

The issue allows authenticated attackers to perform Remote Code Execution in the addon installation process. This enables them to create or overwrite arbitrary files or install malicious software on the device.

The issue is related to a method called `User.setLanguage` and is associated with security mechanism weaknesses. This allows remote attackers to write arbitrary files to the device's filesystem and potentially execute arbitrary code on the device using the web interface. The vulnerability can be exploited by unauthenticated attackers with access to the web interface.

The issue is related to a Remote Code Execution vulnerability in the TCL script interpreter. This allows remote attackers to obtain read/write access and execute system commands on the device. The vulnerability can be exploited by unauthenticated attackers with access to the web interface. It is associated with shortcomings in the security mechanisms of the TCL script interpreter, enabling remote attackers to read and write arbitrary files and execute system commands on the device using the web interface.