Waveburst

The issue is related to incorrect access control in the web interface, allowing remote information disclosure of bin/web.conf via HTTP requests.

The issue allows remote attackers to execute OS commands. This can be achieved by sending a POST request with the attribute `xcmd=import-category` to "admin/ cmdstat.jsp" via the `uploadFile` attribute.

The issue allows a remote attacker to jailbreak the CLI via enable->debug->script->exec with `../../../bin/sh` as the parameter. This enables the attacker to execute system commands, potentially leading to unauthorized access and control.

A stack-based buffer overflow in `zap parse args` in `zap.c` allows remote code execution via an unauthenticated HTTP request.

The issue allows remote attackers to execute OS commands. This can be achieved by sending a POST request with the attribute `xcmd=spectra-analysis` to the "admin/ cmdstat.jsp" endpoint via the `mac` attribute.