Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-24952 State: PUBLISHED Published: 2022-08-16T00:00:00 Last Updated: 2024-08-03T04:29:01.137Z Vendors: Jason Gauci Products: Eternal Terminal Problem Types: CWE-20 Description: Several denial of service vulnerabilities exist in Eternal Terminal prior to version 6.2.0, including a DoS triggered remotely by an invalid sequence number and a local bug triggered by invalid input sent directly to the IPC socket. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/MisterTea/EternalTerminal/releases/tag/et-v6.2.0 - https://github.com/metaredteam/external-disclosures/security/advisories/GHSA-8cw3-6r98-g7cw - http://www.openwall.com/lists/oss-security/20
metaredteam/external-disclosures/security/advisories/GHSA-8cw3-6r98-g7cw - http://www.openwall.com/lists/oss-security/2023/02/16/1
CVE ID: CVE-2022-24953 State: PUBLISHED Published: 2022-02-17T04:22:05 Last Updated: 2024-08-03T04:29:01.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Crypt_GPG extension before 1.6.7 for PHP does not prevent additional options in GPG calls, which presents a risk for certain environments and GPG versions. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pear/Crypt_GPG/commit/74c8f989cefbe0887274b461dc56197e121bfd04 - https://github.com/pear/Crypt_GPG/commit/29c0fbe96d0d4063ecd5c9a4644cb65a7fb7cc4e
CVE ID: CVE-2022-24954 State: PUBLISHED Published: 2022-02-11T01:40:20 Last Updated: 2024-08-03T04:29:01.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: Foxit PDF Reader before 11.2.1 and Foxit PDF Editor before 11.2.1 have a Stack-Based Buffer Overflow related to XFA, for the 'subform colSpan="-2"' and 'draw colSpan="1"' substrings. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxit.com/support/security-bulletins.html - https://twitter.com/l33d0hyun/status/1487047927415459851
CVE ID: CVE-2022-24955 State: PUBLISHED Published: 2022-02-11T01:40:02 Last Updated: 2024-08-03T04:29:01.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: Foxit PDF Reader before 11.2.1 and Foxit PDF Editor before 11.2.1 have an Uncontrolled Search Path Element for DLL files. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxit.com/support/security-bulletins.html
CVE ID: CVE-2022-24956 State: PUBLISHED Published: 2022-03-29T01:08:12 Last Updated: 2024-08-03T04:29:01.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Shopware B2B-Suite through 4.4.1. The sort-by parameter of the search functionality of b2border and b2borderlist allows SQL injection. Possible techniques are boolean-based blind, time-based blind, and potentially stacked queries. The vulnerability allows a remote authenticated attacker to dump the underlying database. Additional Analyst Notes: - CVE Program Container: References: - https://syss.de - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2022-018.txt
CVE ID: CVE-2022-24957 State: PUBLISHED Published: 2022-03-29T01:11:38 Last Updated: 2024-08-03T04:29:01.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: DHC Vision eQMS through 5.4.8.322 has Persistent XSS due to insufficient encoding of untrusted input/output. To exploit the vulnerability, the attacker has to create or edit a new information object and use the XSS payload as the name. Any user that opens the object's version or history tab will be attacked. Additional Analyst Notes: - CVE Program Container: References: - https://syss.de - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2022-019.txt
CVE ID: CVE-2022-24958 State: PUBLISHED Published: 2022-02-11T04:21:36 Last Updated: 2024-08-03T04:29:01.617Z Vendors: n/a Products: n/a Problem Types: n/a Description: drivers/usb/gadget/legacy/inode.c in the Linux kernel through 5.16.8 mishandles dev->buf release. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=89f3594d0de58e8a57d92d497dea9fee3d4b9cda - https://github.com/torvalds/linux/commit/89f3594d0de58e8a57d92d497dea9fee3d4b9cda - https://github.com/torvalds/linux/commit/501e38a5531efbd77d5c73c0ba838a889bfc1d74 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro
e38a5531efbd77d5c73c0ba838a889bfc1d74 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TCW2KZYJ2H6BKZE3CVLHRIXYDGNYYC5P/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SUVZA2YVOQJBJTDIDQ5HF5TAU2C6WP6H/ - https://security.netapp.com/advisory/ntap-20220225-0008/ - https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html
CVE ID: CVE-2022-24959 State: PUBLISHED Published: 2022-02-11T04:21:16 Last Updated: 2024-08-03T04:29:01.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel before 5.16.5. There is a memory leak in yam_siocdevprivate in drivers/net/hamradio/yam.c. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.5 - https://github.com/torvalds/linux/commit/29eb31542787e1019208a2e1047bb7c76c069536 - https://www.debian.org/security/2022/dsa-5092 - https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html - https://www.debian.org/security/2022/dsa-5096
CVE ID: CVE-2022-24960 State: PUBLISHED Published: 2022-03-09T06:20:50.785007Z Last Updated: 2024-09-17T01:46:59.769Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L) Vendors: n/a Products: n/a Problem Types: n/a Description: A use after free vulnerability was discovered in PDFTron SDK version 9.2.0. A crafted PDF can overwrite RIP with data previously allocated on the heap. This issue affects: PDFTron PDFTron SDK 9.2.0 on OSX; 9.2.0 on Linux; 9.2.0 on Windows. Additional Analyst Notes: - CVE Program Container: References: - https://www.pdftron.com/nightly/#stable/2022-02-08/9.2/ - https://github.com/suletm/security_research/blob/main/CVE/CVE-2022-24960.json
CVE ID: CVE-2022-24961 State: PUBLISHED Published: 2022-02-11T04:52:45 Last Updated: 2024-08-03T04:29:01.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Portainer Agent before 2.11.1, an API server can continue running even if not associated with a Portainer instance in the past few days. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/portainer/portainer/issues/6420 - https://github.com/portainer/agent/pull/225/commits/a66977c76043fcff4a8f69c4b65988272d27c01f - https://www.portainer.io/blog/should-you-expose-portainer-or-agent-to-the-internet - https://github.com/portainer/agent/compare/2.11.0...2.11.1
CVE ID: CVE-2022-24963 State: PUBLISHED Published: 2023-01-31T15:52:09.716Z Last Updated: 2025-03-27T14:33:39.826Z Vendors: Apache Software Foundation Products: Apache Portable Runtime (APR) Problem Types: CWE-190 Description: Integer Overflow or Wraparound vulnerability in apr_encode functions of Apache Portable Runtime (APR) allows an attacker to write beyond bounds of a buffer. This issue affects Apache Portable Runtime (APR) version 1.7.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/fw9p6sdncwsjkstwc066vz57xqzfksq9 - https://security.netapp.com/advisory/ntap-20230908-0008/
CVE ID: CVE-2022-24967 State: PUBLISHED Published: 2022-05-29T17:35:56.000Z Last Updated: 2025-05-30T16:02:08.261Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AC:L/AV:N/A:L/C:L/I:L/PR:L/S:C/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: Black Rainbow NIMBUS before 3.7.0 allows stored Cross-site Scripting (XSS). Additional Analyst Notes: - CVE Program Container: References: - https://blackrainbow.com/corporate/ - https://excellium-services.com/cert-xlm-advisory/CVE-2022-24967 - https://cds.thalesgroup.com/en/tcs-cert/CVE-2022-24967
CVE ID: CVE-2022-24968 State: PUBLISHED Published: 2022-02-11T18:16:54 Last Updated: 2024-08-03T04:29:01.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Mellium mellium.im/xmpp through 0.21.0, an attacker capable of spoofing DNS TXT records can redirect a WebSocket connection request to a server under their control without causing TLS certificate verification to fail. This occurs because the wrong host name is selected during this verification. Additional Analyst Notes: - CVE Program Container: References: - https://mellium.im/xmpp/ - https://mellium.im/cve/cve-2022-24968/
CVE ID: CVE-2022-24969 State: PUBLISHED Published: 2022-06-06T22:00:16 Last Updated: 2024-08-03T04:29:01.633Z Vendors: Apache Software Foundation Products: Apache Dubbo Problem Types: CWE-918 Description: bypass CVE-2021-25640 > In Apache Dubbo prior to 2.6.12 and 2.7.15, the usage of parseURL method will lead to the bypass of the white host check which can cause open redirect or SSRF vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread/1xbckc3467wfk5r7n2o44r2brdsbwxgr
CVE ID: CVE-2022-24971 State: PUBLISHED Published: 2022-02-18T19:52:28 Last Updated: 2024-08-03T04:29:01.466Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Foxit Products: PDF Reader Problem Types: CWE-125 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JPEG2000 images. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an
e issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15812. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxit.com/support/security-bulletins.html - https://www.zerodayinitiative.com/advisories/ZDI-22-319/
CVE ID: CVE-2022-24972 State: PUBLISHED Published: 2023-03-28T00:00:00.000Z Last Updated: 2025-02-19T19:11:00.818Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: TP-Link Products: TL-WR940N Problem Types: CWE-284 Description: This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR940N 3.20.1 Build 200316 Rel.34392n (5553) routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from the lack of proper access control. An attacker can leverage this vulnerability to
80 by default. The issue results from the lack of proper access control. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-13911. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-22-405/
CVE ID: CVE-2022-24973 State: PUBLISHED Published: 2023-03-28T00:00:00.000Z Last Updated: 2025-02-19T19:07:59.472Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: TP-Link Products: TL-WR940N Problem Types: CWE-121 Description: This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR940N 3.20.1 Build 200316 Rel.34392n (5553) routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fi
lt. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-13992. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-22-406/
CVE ID: CVE-2022-24974 State: PUBLISHED Published: 2022-05-02T22:16:19 Last Updated: 2024-08-03T04:29:01.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: Links may not be rewritten according to policy in some specially formatted emails. Additional Analyst Notes: - CVE Program Container: References: - https://www.menlosecurity.com/published-security-vulnerabilities/
CVE ID: CVE-2022-24975 State: PUBLISHED Published: 2022-02-11T00:00:00 Last Updated: 2024-08-03T04:29:01.534Z Vendors: n/a Products: n/a Problem Types: n/a Description: The --mirror documentation for Git through 2.35.1 does not mention the availability of deleted content, aka the "GitBleed" issue. This could present a security risk if information-disclosure auditing processes rely on a clone operation without the --mirror option. Note: This has been disputed by multiple 3rd parties who believe this is an intended feature of the git binary and does not pose a security risk. Additional Analyst Notes: - CVE Program Container: References: - https://wwws.nightwatchcybersecurity.com/2022/02/11/git
Additional Analyst Notes: - CVE Program Container: References: - https://wwws.nightwatchcybersecurity.com/2022/02/11/gitbleed/ - https://github.com/git/git/blob/2dc94da3744bfbbf145eca587a0f5ff480cc5867/Documentation/git-clone.txt#L185-L191 - https://www.aquasec.com/blog/undetected-hard-code-secrets-expose-corporations/ - https://lore.kernel.org/git/xmqq4k14qe9g.fsf%40gitster.g/
CVE ID: CVE-2022-24976 State: PUBLISHED Published: 2022-02-13T06:20:02 Last Updated: 2024-08-03T04:29:01.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: Atheme IRC Services before 7.2.12, when used in conjunction with InspIRCd, allows authentication bypass by ending an IRC handshake at a certain point during a challenge-response login sequence. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2022/01/30/4 - https://github.com/atheme/atheme/commit/4e664c75d0b280a052eb8b5e81aa41944e593c52 - https://github.com/atheme/atheme/compare/v7.2.11...v7.2.12
CVE ID: CVE-2022-24977 State: PUBLISHED Published: 2022-02-13T06:39:33 Last Updated: 2024-08-03T04:29:01.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: ImpressCMS before 1.4.2 allows unauthenticated remote code execution via ...../// directory traversal in origName or imageName, leading to unsafe interaction with the CKEditor processImage.php script. The payload may be placed in PHP_SESSION_UPLOAD_PROGRESS when the PHP installation supports upload_progress. Additional Analyst Notes: - CVE Program Container: References: - https://r0.haxors.org/posts?id=8 - https://github.com/ImpressCMS/impresscms/commit/a66d7bb499faafab803e24833606028fa0ba4261 - https://github.com/ImpressCMS/
ttps://github.com/ImpressCMS/impresscms/commit/a66d7bb499faafab803e24833606028fa0ba4261 - https://github.com/ImpressCMS/impresscms/compare/1.4.1...v1.4.2
CVE ID: CVE-2022-24978 State: PUBLISHED Published: 2022-04-05T18:24:54 Last Updated: 2024-08-03T04:29:01.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine ADAudit Plus before 7055 allows authenticated Privilege Escalation on Integrated products. This occurs because a password field is present in a JSON response. Additional Analyst Notes: - CVE Program Container: References: - https://manageengine.com - https://pitstop.manageengine.com/portal/en/community/topic/cve-2022-24978-privilege-escalation-vulnerability-manageengine-adaudit-plus
CVE ID: CVE-2022-24979 State: PUBLISHED Published: 2022-02-19T03:36:05 Last Updated: 2024-08-03T04:29:01.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Varnishcache extension before 2.0.1 for TYPO3. The Edge Site Includes (ESI) content element renderer component does not include an access check. This allows an unauthenticated user to render various content elements, resulting in insecure direct object reference (IDOR), with the potential of exposing internal content elements. Additional Analyst Notes: - CVE Program Container: References: - https://typo3.org/help/security-advisories - https://typo3.org/security/advisory/typo3-ext-sa-2022-003
CVE ID: CVE-2022-24980 State: PUBLISHED Published: 2022-02-19T03:48:57 Last Updated: 2024-08-03T04:29:01.013Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Kitodo.Presentation (aka dif) extension before 2.3.2, 3.x before 3.2.3, and 3.3.x before 3.3.4 for TYPO3. A missing access check in an eID script allows an unauthenticated user to submit arbitrary URLs to this component. This results in SSRF, allowing attackers to view the content of any file or webpage the webserver has access to. Additional Analyst Notes: - CVE Program Container: References: - https://typo3.org/help/security-advisories - https://typo3.org/security/advisory/typo3-ext-sa-2022-00
ner: References: - https://typo3.org/help/security-advisories - https://typo3.org/security/advisory/typo3-ext-sa-2022-001
CVE ID: CVE-2022-24981 State: PUBLISHED Published: 2022-02-16T21:03:40 Last Updated: 2024-08-03T04:29:01.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reflected cross-site scripting (XSS) vulnerability in forms generated by JQueryForm.com before 2022-02-05 allows remote attackers to inject arbitrary web script or HTML via the redirect parameter to admin.php. Additional Analyst Notes: - CVE Program Container: References: - https://JQueryForm.com - https://www.nou-systems.com/cyber-security - https://gist.github.com/pb-nsi/4d0a1ede76d4e97083b3435f820bf560
CVE ID: CVE-2022-24982 State: PUBLISHED Published: 2022-02-16T21:04:02 Last Updated: 2024-08-03T04:29:01.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: Forms generated by JQueryForm.com before 2022-02-05 allows a remote authenticated attacker to access the cleartext credentials of all other form users. admin.php contains a hidden base64-encoded string with these credentials. Additional Analyst Notes: - CVE Program Container: References: - https://JQueryForm.com - https://www.nou-systems.com/cyber-security - https://gist.github.com/pb-nsi/4d0a1ede76d4e97083b3435f820bf560
CVE ID: CVE-2022-24983 State: PUBLISHED Published: 2022-02-16T21:04:34 Last Updated: 2024-08-03T04:29:01.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: Forms generated by JQueryForm.com before 2022-02-05 allow remote attackers to obtain the URI to any uploaded file by capturing the POST response. When chained with CVE-2022-24984, this could lead to unauthenticated remote code execution on the underlying web server. This occurs because the Unique ID field is contained in the POST response upon submitting a form. Additional Analyst Notes: - CVE Program Container: References: - https://JQueryForm.com - https://www.nou-systems.com/cyber-security - https://gist.github.com/pb-nsi/
ner: References: - https://JQueryForm.com - https://www.nou-systems.com/cyber-security - https://gist.github.com/pb-nsi/4d0a1ede76d4e97083b3435f820bf560
CVE ID: CVE-2022-24984 State: PUBLISHED Published: 2022-02-16T21:05:03 Last Updated: 2024-08-03T04:29:01.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: Forms generated by JQueryForm.com before 2022-02-05 (if file-upload capability is enabled) allow remote unauthenticated attackers to upload executable files and achieve remote code execution. This occurs because file-extension checks occur on the client side, and because not all executable content (e.g., .phtml or .php.bak) is blocked. Additional Analyst Notes: - CVE Program Container: References: - https://JQueryForm.com - https://www.nou-systems.com/cyber-security - https://gist.github.com/pb-nsi/4d0a1ede76d4e97083b3435f820
JQueryForm.com - https://www.nou-systems.com/cyber-security - https://gist.github.com/pb-nsi/4d0a1ede76d4e97083b3435f820bf560
CVE ID: CVE-2022-24985 State: PUBLISHED Published: 2022-02-16T21:05:25 Last Updated: 2024-08-03T04:29:01.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: Forms generated by JQueryForm.com before 2022-02-05 allows a remote authenticated attacker to bypass authentication and access the administrative section of other forms hosted on the same web server. This is relevant only when an organization hosts more than one of these forms on their server. Additional Analyst Notes: - CVE Program Container: References: - https://JQueryForm.com - https://www.nou-systems.com/cyber-security - https://gist.github.com/pb-nsi/4d0a1ede76d4e97083b3435f820bf560
CVE ID: CVE-2022-24986 State: PUBLISHED Published: 2022-02-26T04:06:21 Last Updated: 2024-08-03T04:29:01.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: KDE KCron through 21.12.2 uses a temporary file in /tmp when saving, but reuses the filename during an editing session. Thus, someone watching it be created the first time could potentially intercept the file the following time, enabling that person to run unauthorized commands. Additional Analyst Notes: - CVE Program Container: References: - https://apps.kde.org/kcron/ - http://www.openwall.com/lists/oss-security/2022/02/25/3
CVE ID: CVE-2022-24988 State: PUBLISHED Published: 2022-02-14T19:23:00 Last Updated: 2024-08-03T04:29:01.648Z Vendors: n/a Products: n/a Problem Types: n/a Description: In galois_2p8 before 0.1.2, PrimitivePolynomialField::new has an off-by-one buffer overflow for a vector. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/djsweet/galois_2p8/blob/master/CHANGELOG.md
CVE ID: CVE-2022-24989 State: PUBLISHED Published: 2023-08-20T00:00:00 Last Updated: 2024-10-08T14:30:47.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: TerraMaster NAS through 4.2.30 allows remote WAN attackers to execute arbitrary code as root via the raidtype and diskstring parameters for PHP Object Instantiation to the api.php?mobile/createRaid URI. (Shell metacharacters can be placed in raidtype because popen is used without any sanitization.) The credentials from CVE-2022-24990 exploitation can be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://forum.terra-master.com/en/viewforum.php?f=28 - https://github.com/0xf4n
: - CISA ADP Vulnrichment: References: - https://forum.terra-master.com/en/viewforum.php?f=28 - https://github.com/0xf4n9x/CVE-2022-24990 - https://packetstormsecurity.com/files/172904 - https://attackerkb.com/topics/h8YKVKx21t/cve-2022-24990 - https://octagon.net/blog/2022/03/07/cve-2022-24990-terrmaster-tos-unauthenticated-remote-command-execution-via-php-object-instantiation
CVE ID: CVE-2022-24990 State: PUBLISHED Published: 2023-02-07T00:00:00.000Z Last Updated: 2025-10-21T23:15:27.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: TerraMaster NAS 4.2.29 and earlier allows remote attackers to discover the administrative password by sending "User-Agent: TNAS" to module/api.php?mobile/webNasIPS and then reading the PWD field in the response. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://forum.terra-master.com/en/viewforum.php?f=28 - https://www.broadcom.com/support/security-center/attacksignatures/detail?asid=33732 - https://github.com/0xf4n9x/CVE-2022-24990 - https://octagon.net/blog/2022/03/07/cve
attacksignatures/detail?asid=33732 - https://github.com/0xf4n9x/CVE-2022-24990 - https://octagon.net/blog/2022/03/07/cve-2022-24990-terrmaster-tos-unauthenticated-remote-command-execution-via-php-object-instantiation/ - http://packetstormsecurity.com/files/172904/TerraMaster-TOS-4.2.29-Remote-Code-Execution.html