地图
浏览
CVE
测试载荷
绕过技巧
API
接入 AI
关于
POJIA
破甲
查找
接入 AI
模型控制台
地图 / Command injection in the process of downloading the latest version of the cloud key firmware through the unifi management software.
Command injection in the process of downloading the latest version of the cloud key firmware through the unifi management software.
代码执行
/
命令注入(通用)
/ #183458
厂商
Ubiquiti Inc.
严重程度
中危
· CVSS 8.3
赏金
—
弱点
命令注入(通用)
研究员
@dblack
披露日期
2017-12-11
资产
—
CVE
—
该报告还没有中文解读。
时间线
2016-11-19
报告提交
2017-12-11
公开披露
阅读 HackerOne 原文 ↗
作者 @dblack · 版权归作者与 Ubiquiti Inc. 所有
同类报告
H1514 Remote Code Execution on kitcrm using bulk customer update of Priority Products
Shopify · 2020-02-06
Remote Code Execution on www.semrush.com/my_reports on Logo upload
Semrush · 2019-06-24
Git flag injection - local file overwrite to remote code execution
GitLab · 2019-12-19 · $12,000
Privilege Escalation From user to SYSTEM via unauthenticated command execution
Ubiquiti Inc. · 2019-11-08
BAD Code !
Paragon Initiative Enterprises · 2016-11-04
Local files could be overwritten in GitLab, leading to remote command execution
GitLab · 2019-07-17 · $12,000