Nixawk

Existe uma vulnerabilidade de execução remota de código devido a um backdoor não documentado na porta UDP 53413. Um atacante remoto não autenticado pode enviar pacotes UDP especialmente elaborados para executar comandos arbitrários no dispositivo afetado. O backdoor utiliza um mecanismo de autenticação hardcoded e aceita comandos shell após a autenticação. Alguns modelos de dispositivo incluem uma implementação não padrão do comando `echo`, o que pode afetar a explorabilidade.

The issue exists due to insufficient validation of user-input data that is part of a message, allowing a remote attacker to execute arbitrary code. This can be achieved by passing a malicious field value in a raw message to the ActionMessage.

The issue is related to errors in handling .LNK files, which can allow local users or remote attackers to execute arbitrary code. This can occur when a crafted .LNK file is not properly handled during icon display in Windows Explorer or any other application that parses the icon of the shortcut. Exploitation of this issue may enable an attacker to execute arbitrary code by connecting to a system with a specially crafted shortcut associated with a malicious application. After viewing the storage device using any application that performs icon parsing, arbitrary code will be executed.

The issue allows remote attackers to execute arbitrary code via vectors related to an `!` (exclamation mark) operator to the REST Plugin when Dynamic Method Invocation is enabled.

The issue is related to the implementation of the Dynamic Method Invocation (DMI) mechanism in Apache Struts, which fails to properly sanitize input data. This allows a remote attacker to execute arbitrary code using the `method:` prefix, related to chained expressions.