HexBrain
Sign in

Browse / Ubiquiti Inc.

Ubiquiti Inc.

98disclosed reports

See its reports on the map

What gets reported to Ubiquiti Inc.

Most upvoted reports

AllValidInformativeN/ADuplicate

  1. Privilege Escalation From user to SYSTEM via unauthenticated command execution Command Injection - Generic · critical
    553 votes
  2. Privilege-0 to Root Privilege Escalation on EdgeSwitchPrivilege Escalation · high
    82 votes
  3. Public Jenkins instance with /script enabledCode Injection · critical
    74 votes
  4. Remote Code Execution at http://tw.corp.ubnt.comCommand Injection - Generic · critical
    61 votes
  5. CORS Misconfiguration leading to Private Information DisclosureImproper Access Control - Generic · high
    57 votes
  6. Subdomain takeover on partners.ubnt.com due to non-used CloudFront DNS entryPrivilege Escalation
    57 votes
  7. Login as root without password on EdgeSwitchXImproper Authentication - Generic · medium
    56 votes
  8. Authentication bypass on sso.ubnt.com via subdomain takeover of ping.ubnt.comDuplicateCross-Site Request Forgery (CSRF) · high
    55 votes
  9. Ability to log in as any user without authentication if █████████ is emptyImproper Authentication - Generic · critical
    54 votes
  10. Unrestricted File System Access via Twig Template Injection on dev-ucrm-billing-demo.ubnt.comImproper Access Control - Generic · high
    47 votes
  11. Read-Only user can execute arbitraty shell commands on AirOSCommand Injection - Generic
    44 votes
  12. View Only to Root Privilege Escalation on UniFi ProtectCommand Injection - Generic · high
    42 votes
  13. Firmware download/install vulnerable to CSRFCross-Site Request Forgery (CSRF) · high
    35 votes
  14. sqliSQL Injection · critical
    33 votes
  15. [dev-nightly.ubnt.com] Local File ReadingPath Traversal · high
    31 votes
  16. IDOR Causing Deletion of any accountInsecure Direct Object Reference (IDOR)
    30 votes
  17. Readonly to Root Privilege Escalation on EdgeSwitchCommand Injection - Generic · high
    27 votes
  18. [EdgeSwitch] Web GUI command injection as root with Privilege-1 and Privilege-15 usersCommand Injection - Generic · medium
    27 votes
  19. Directory traversal at https://nightly.ubnt.comPath Traversal · high
    26 votes
  20. Source code disclosure on https://107.23.69.180Information Disclosure
    25 votes
  21. Privilege Escalation using API->FeaturePrivilege Escalation · critical
    23 votes
  22. UniFi Video Server web interface Configuration Restore CSRF leading to full application compromiseCross-Site Request Forgery (CSRF) · high
    22 votes
  23. Stored XSS in community.ubnt.comCross-site Scripting (XSS) - Generic · high
    22 votes
  24. Read-Only user can execute arbitraty shell commands on AirOSCommand Injection - Generic
    22 votes
  25. Subdomain Takeover in http://assets.goubiquiti.com/Code Injection
    22 votes
  26. Exposed API-key allows to control nightly builds of firmwares (█████████ & ████████)Violation of Secure Design Principles · high
    21 votes
  27. Arbritrary file Upload on AirMaxPath Traversal
    21 votes
  28. Shell Injection via Web Management Console (dl-fw.cgi)Command Injection - Generic
    20 votes
  29. JetBrains .idea project directoryViolation of Secure Design Principles
    20 votes
  30. Web Server Predictable Session ID on EdgeSwitch Insufficient Session Expiration · high
    19 votes
  31. Subdomain Takeover (moderator.ubnt.com)Cross-site Scripting (XSS) - Generic · high
    19 votes
  32. Two Factor Authentication BypassImproper Restriction of Authentication Attempts · medium
    18 votes
  33. Wordpress directories/files visible to internetInformation Disclosure · medium
    18 votes
  34. Read-Only user can execute arbitraty shell commands on AirOSCommand Injection - Generic
    18 votes
  35. SNMP Community String Disclosure to ReadOnly Users on EdgeSwitchInformation Disclosure · high
    17 votes
  36. [nutty.ubnt.com] DOM Based XSS nuttyapp github-btn.htmlCross-site Scripting (XSS) - Generic · medium
    17 votes
  37. [account-global.ubnt.com] CRLF InjectionCRLF Injection · low
    17 votes
  38. Reflected XSSCross-site Scripting (XSS) - Reflected · high
    16 votes
  39. Stored XSS in dev-ucrm-billing-demo.ubnt.com In Client Custom Attribute Cross-site Scripting (XSS) - Stored · low
    16 votes
  40. Privilege Escalation: From operator to ubnt (and root) with non-interactive Session HijackingPrivilege Escalation · critical
    16 votes
  41. EdgeSwitch Command InjectionCommand Injection - Generic · medium
    15 votes
  42. Resource Consumption DOS on Edgemax v1.10.6Uncontrolled Resource Consumption · high
    15 votes
  43. CSRF: Replacing the router configuration backup having an 'operator' user and bypassing the "Referer:' whitelist protectionCross-Site Request Forgery (CSRF) · critical
    14 votes
  44. UBNT Amplification DDOS AttackUncontrolled Resource Consumption · critical
    14 votes
  45. Catch mails sent to an SMTP Server over SSL using an Evil SMTP ServerMan-in-the-Middle · high
    13 votes
  46. Bypass blocked profile protection on aircrm.ubnt.comPrivilege Escalation · medium
    13 votes
  47. Privilege escalation in the client impersonation functionalityPrivilege Escalation · high
    13 votes
  48. RCE in AirOS 6.2.0 Devices with CSRF bypassCommand Injection - Generic · high
    12 votes
  49. Triggering RCE using XSS to bypass CSRF in PowerBeam M5 300Command Injection - Generic · high
    12 votes
  50. [dev-unifi-go.ubnt.com] Insecure CORS, Stealing CookiesInformation Exposure Through an Error Message · medium
    12 votes
  51. Subdomain takeover on https://cloudfront.ubnt.com/ due to non-used CloudFront DNS entryImproper Authentication - Generic · medium
    12 votes
  52. Stored XSS in unifi.ubnt.comCross-site Scripting (XSS) - Generic
    12 votes
  53. Open Redirect in unifi.ubnt.com [Controller Finder]Open Redirect
    12 votes
  54. UniFi Video Server - Broken access control on system configurationPrivilege Escalation · high
    12 votes
  55. UniFi Video Server web interface admin user Firmware Update path traversal leading to local system compromisePath Traversal · high
    11 votes
  56. UniFi Video Server web interface Configuration Restore path traversal leading to local system compromisePath Traversal · critical
    11 votes
  57. UniFi Video web interface Configuration Restore user privilege escalationPrivilege Escalation · high
    11 votes
  58. [scores.ubnt.com] DOM based XSS at form.htmlCross-site Scripting (XSS) - Generic
    11 votes
  59. Reflected XSS in scores.ubnt.comCross-site Scripting (XSS) - Generic
    11 votes
  60. Reflected File Download in community.ubnt.com/restapi/
    11 votes
  61. XW 6.2.0 firmware: 5 Reflected XSS issues in link.cgiCross-site Scripting (XSS) - Reflected · medium
    10 votes
  62. Unauthenticated request allows changing hostnameImproper Authentication - Generic · medium
    10 votes
  63. Reflected XSS in Nanostation Loco M2 - AirOS ver=6.1.7Cross-site Scripting (XSS) - Reflected · medium
    10 votes
  64. Stored XSS / Bypassing .htaccess protection in http://nodebb.ubnt.com/Cross-site Scripting (XSS) - Generic · high
    10 votes
  65. UniFi Video Server - Arbitrary file upload as SYSTEMPath Traversal · high
    10 votes
  66. CSRF in login form would led to account takeoverCross-Site Request Forgery (CSRF)
    10 votes
  67. UniFi Video v3.10.1 (Windows) Local Privileges Escalation to SYSTEM from arbitrary filedelete and DLL hijack vulnerabilities.Privilege Escalation · medium
    9 votes
  68. Stored XSS => community.ubnt.com Cross-site Scripting (XSS) - Stored · high
    9 votes
  69. HTML Injection on airlink.ubnt.comCode Injection · low
    9 votes
  70. Expired SSL certificateUse of a Key Past its Expiration Date · low
    9 votes
  71. 200 http code in 403 forbidden directories on main Ubnt.com domainForced Browsing
    9 votes
  72. XSS via SVG fileDuplicateCross-site Scripting (XSS) - Generic · medium
    9 votes
  73. Reflected cross-site scripting (XSS) vulnerability in scores.ubnt.com allows attackers to inject arbitrary web script via p parameter.Cross-site Scripting (XSS) - Generic · medium
    9 votes
  74. account.ubnt.com CSRFCross-Site Request Forgery (CSRF)
    9 votes
  75. Camera adoption DoS - UniFi ProtectUncontrolled Resource Consumption · high
    8 votes
  76. Code Execution in restricted CLI of EdgeSwitchCommand Injection - Generic · high
    8 votes
  77. CRLF Injection on openvpn.svc.ubnt.comCRLF Injection · medium
    8 votes
  78. XSSCross-site Scripting (XSS) - Reflected
    8 votes
  79. Content Spoofing or Text Injection in (403 forbidden page injection) and Nginx version disclosure via response headerInformativeViolation of Secure Design Principles · low
    8 votes
  80. XSS on Nanostation Loco M2 AirmaxCross-site Scripting (XSS) - Generic · medium
    8 votes
  81. Reflected Xss in AirMax [Nanostation Loco M2]Cross-site Scripting (XSS) - Generic
    8 votes
  82. Unauthenticated Cross-Site Scripting in Web Management ConsoleCross-site Scripting (XSS) - Generic
    8 votes
  83. UniFi v3.2.10 Cross-Site Request Forgeries / Referer-Check BypassCross-Site Request Forgery (CSRF)
    8 votes
  84. Format String Vulnerability in the EdgeSwitch restricted CLIUse of Externally-Controlled Format String · high
    7 votes
  85. Command injection in the process of downloading the latest version of the cloud key firmware through the unifi management software.Command Injection - Generic · high
    7 votes
  86. Local File Disclosure (+XSS+CSRF) in AirOS 6.2.0 devicesCommand Injection - Generic · medium
    6 votes
  87. Authenticated RCE in ToughSwitchOS Command Injection · high
    6 votes
  88. Privilege Escalation with Session Hijacking Having a Non-privileged Valid UserPrivilege Escalation · critical
    6 votes
  89. Security: Publicly accessible x.509 Public and Private Key of Ubiquiti Networks.Business Logic Errors
    5 votes
  90. Auth bypass on directory.corp.ubnt.comImproper Authentication - Generic
    5 votes
  91. Weak credentials for nutty.ubnt.comInformativeImproper Authentication - Generic · medium
    4 votes
  92. AirFibre products vulnerable to HTTP Header injectionImproper Authentication - Generic
    4 votes
  93. Can upload files without authentication on AirFibre 3.2Violation of Secure Design Principles · low
    4 votes
  94. Other Buffer Overflow in PHP of the AirMax ProductsMemory Corruption - Generic
    4 votes
  95. Buffer Overflow in PHP of the AirMax ProductsMemory Corruption - Generic
    4 votes
  96. UniFi Video v3.2.2 (Windows) Local Privileges Escalation due to weak default install directory ACLsPrivilege Escalation · high
    3 votes
  97. Yet another Buffer Overflow in PHP of the AirMax ProductsMemory Corruption - Generic
    3 votes
  98. 3x Reflected XSS vectors for services.cgi (XM.v6.1.6, build 32290)Cross-site Scripting (XSS) - Reflected · medium
    2 votes