Giles-one

3 exploits Active since Aug 2024
CVE-2024-41285 WRITEUP CRITICAL WORKING POC
FAST FW300R v1.3.13 Build 141023 Rel.61347n - Buffer Overflow via Crafted File Path
A stack overflow in FAST FW300R v1.3.13 Build 141023 Rel.61347n allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via a crafted file path.
CVSS 9.8
CVE-2024-48073 WRITEUP CRITICAL WRITEUP
sunniwell HT3300 <1.0.0.B022.2 - Command Injection
sunniwell HT3300 before 1.0.0.B022.2 is vulnerable to Insecure Permissions. The /usr/local/bin/update program, which is responsible for updating the software in the HT3300 device, is given the execution mode of sudo NOPASSWD. This program is vulnerable to a command injection vulnerability, which could allow an attacker to pass commands to this program via command line arguments to gain elevated root privileges.
CVSS 9.8
CVE-2024-48074 WRITEUP HIGH WORKING POC
DrayTek Vigor2960 Firmware 1.4.4 - Authenticated Remote Code Execution via table Parameter in doPPPoE Function
An authorized RCE vulnerability exists in the DrayTek Vigor2960 router version 1.4.4, where an attacker can place a malicious command into the table parameter of the doPPPoE function in the cgi-bin/mainfunction.cgi route, and finally the command is executed by the system function.
CVSS 8.0