← All credits
Alex Williams from Pellera Technologies
136 vulnerability records and advisories credit this contributor.
CVE-2025-34243
Advantech WebAccess/VPN < 1.1.5 SQL Injection via AjaxFwRulesController.ajaxNetworkFwRulesAction()
CVE-2025-34242
Advantech WebAccess/VPN < 1.1.5 SQL Injection via AjaxNetworkController.ajaxAction()
CVE-2025-34241
Advantech WebAccess/VPN < 1.1.5 SQL Injection via AjaxDeviceController.ajaxDeviceAction()
CVE-2025-34240
Advantech WebAccess/VPN < 1.1.5 SQL Injection via AppManagementController.appUpgradeAction()
CVE-2025-34239
Advantech WebAccess/VPN < 1.1.5 Command Injection in AppManagementController.appUpgradeAction()
CVE-2025-34238
Advantech WebAccess/VPN < 1.1.5 Path Traversal via AjaxStandaloneVpnClientsController.ajaxDownloadRoadWarriorConfigFileAction()
CVE-2025-34237
Advantech WebAccess/VPN < 1.1.5 Stored XSS via StandaloneVpnClientsController.addStandaloneVpnClientAction()
CVE-2025-34236
Advantech WebAccess/VPN < 1.1.5 Stored XSS via NetworksController.addNetworkAction()
CVE-2025-34302
IPFire < v2.29 Stored XSS via Service Creation
CVE-2025-34314
IPFire < v2.29 Stored XSS via Time Constraint Rule URL Filter