HexBrain
Sign in

Browse / Ubiquiti Inc.

Ubiquiti Inc.

98disclosed reports

See its reports on the map

What gets reported to Ubiquiti Inc.

Most upvoted reports

AllValidInformativeN/ADuplicate

  1. Privilege Escalation From user to SYSTEM via unauthenticated command execution Command Injection - Generic · critical
    553 votes
  2. Privilege-0 to Root Privilege Escalation on EdgeSwitchPrivilege Escalation · high
    82 votes
  3. Public Jenkins instance with /script enabledCode Injection · critical
    74 votes
  4. Remote Code Execution at http://tw.corp.ubnt.comCommand Injection - Generic · critical
    61 votes
  5. CORS Misconfiguration leading to Private Information DisclosureImproper Access Control - Generic · high
    57 votes
  6. Subdomain takeover on partners.ubnt.com due to non-used CloudFront DNS entryPrivilege Escalation
    57 votes
  7. Login as root without password on EdgeSwitchXImproper Authentication - Generic · medium
    56 votes
  8. Ability to log in as any user without authentication if █████████ is emptyImproper Authentication - Generic · critical
    54 votes
  9. Unrestricted File System Access via Twig Template Injection on dev-ucrm-billing-demo.ubnt.comImproper Access Control - Generic · high
    47 votes
  10. Read-Only user can execute arbitraty shell commands on AirOSCommand Injection - Generic
    44 votes
  11. View Only to Root Privilege Escalation on UniFi ProtectCommand Injection - Generic · high
    42 votes
  12. Firmware download/install vulnerable to CSRFCross-Site Request Forgery (CSRF) · high
    35 votes
  13. sqliSQL Injection · critical
    33 votes
  14. [dev-nightly.ubnt.com] Local File ReadingPath Traversal · high
    31 votes
  15. IDOR Causing Deletion of any accountInsecure Direct Object Reference (IDOR)
    30 votes
  16. Readonly to Root Privilege Escalation on EdgeSwitchCommand Injection - Generic · high
    27 votes
  17. [EdgeSwitch] Web GUI command injection as root with Privilege-1 and Privilege-15 usersCommand Injection - Generic · medium
    27 votes
  18. Directory traversal at https://nightly.ubnt.comPath Traversal · high
    26 votes
  19. Source code disclosure on https://107.23.69.180Information Disclosure
    25 votes
  20. Privilege Escalation using API->FeaturePrivilege Escalation · critical
    23 votes
  21. UniFi Video Server web interface Configuration Restore CSRF leading to full application compromiseCross-Site Request Forgery (CSRF) · high
    22 votes
  22. Stored XSS in community.ubnt.comCross-site Scripting (XSS) - Generic · high
    22 votes
  23. Read-Only user can execute arbitraty shell commands on AirOSCommand Injection - Generic
    22 votes
  24. Subdomain Takeover in http://assets.goubiquiti.com/Code Injection
    22 votes
  25. Exposed API-key allows to control nightly builds of firmwares (█████████ & ████████)Violation of Secure Design Principles · high
    21 votes
  26. Arbritrary file Upload on AirMaxPath Traversal
    21 votes
  27. Shell Injection via Web Management Console (dl-fw.cgi)Command Injection - Generic
    20 votes
  28. JetBrains .idea project directoryViolation of Secure Design Principles
    20 votes
  29. Web Server Predictable Session ID on EdgeSwitch Insufficient Session Expiration · high
    19 votes
  30. Subdomain Takeover (moderator.ubnt.com)Cross-site Scripting (XSS) - Generic · high
    19 votes
  31. Two Factor Authentication BypassImproper Restriction of Authentication Attempts · medium
    18 votes
  32. Wordpress directories/files visible to internetInformation Disclosure · medium
    18 votes
  33. Read-Only user can execute arbitraty shell commands on AirOSCommand Injection - Generic
    18 votes
  34. SNMP Community String Disclosure to ReadOnly Users on EdgeSwitchInformation Disclosure · high
    17 votes
  35. [nutty.ubnt.com] DOM Based XSS nuttyapp github-btn.htmlCross-site Scripting (XSS) - Generic · medium
    17 votes
  36. [account-global.ubnt.com] CRLF InjectionCRLF Injection · low
    17 votes
  37. Reflected XSSCross-site Scripting (XSS) - Reflected · high
    16 votes
  38. Stored XSS in dev-ucrm-billing-demo.ubnt.com In Client Custom Attribute Cross-site Scripting (XSS) - Stored · low
    16 votes
  39. Privilege Escalation: From operator to ubnt (and root) with non-interactive Session HijackingPrivilege Escalation · critical
    16 votes
  40. EdgeSwitch Command InjectionCommand Injection - Generic · medium
    15 votes
  41. Resource Consumption DOS on Edgemax v1.10.6Uncontrolled Resource Consumption · high
    15 votes
  42. CSRF: Replacing the router configuration backup having an 'operator' user and bypassing the "Referer:' whitelist protectionCross-Site Request Forgery (CSRF) · critical
    14 votes
  43. UBNT Amplification DDOS AttackUncontrolled Resource Consumption · critical
    14 votes
  44. Catch mails sent to an SMTP Server over SSL using an Evil SMTP ServerMan-in-the-Middle · high
    13 votes
  45. Bypass blocked profile protection on aircrm.ubnt.comPrivilege Escalation · medium
    13 votes
  46. Privilege escalation in the client impersonation functionalityPrivilege Escalation · high
    13 votes
  47. RCE in AirOS 6.2.0 Devices with CSRF bypassCommand Injection - Generic · high
    12 votes
  48. Triggering RCE using XSS to bypass CSRF in PowerBeam M5 300Command Injection - Generic · high
    12 votes
  49. [dev-unifi-go.ubnt.com] Insecure CORS, Stealing CookiesInformation Exposure Through an Error Message · medium
    12 votes
  50. Subdomain takeover on https://cloudfront.ubnt.com/ due to non-used CloudFront DNS entryImproper Authentication - Generic · medium
    12 votes
  51. Stored XSS in unifi.ubnt.comCross-site Scripting (XSS) - Generic
    12 votes
  52. Open Redirect in unifi.ubnt.com [Controller Finder]Open Redirect
    12 votes
  53. UniFi Video Server - Broken access control on system configurationPrivilege Escalation · high
    12 votes
  54. UniFi Video Server web interface admin user Firmware Update path traversal leading to local system compromisePath Traversal · high
    11 votes
  55. UniFi Video Server web interface Configuration Restore path traversal leading to local system compromisePath Traversal · critical
    11 votes
  56. UniFi Video web interface Configuration Restore user privilege escalationPrivilege Escalation · high
    11 votes
  57. [scores.ubnt.com] DOM based XSS at form.htmlCross-site Scripting (XSS) - Generic
    11 votes
  58. Reflected XSS in scores.ubnt.comCross-site Scripting (XSS) - Generic
    11 votes
  59. Reflected File Download in community.ubnt.com/restapi/
    11 votes
  60. XW 6.2.0 firmware: 5 Reflected XSS issues in link.cgiCross-site Scripting (XSS) - Reflected · medium
    10 votes
  61. Unauthenticated request allows changing hostnameImproper Authentication - Generic · medium
    10 votes
  62. Reflected XSS in Nanostation Loco M2 - AirOS ver=6.1.7Cross-site Scripting (XSS) - Reflected · medium
    10 votes
  63. Stored XSS / Bypassing .htaccess protection in http://nodebb.ubnt.com/Cross-site Scripting (XSS) - Generic · high
    10 votes
  64. UniFi Video Server - Arbitrary file upload as SYSTEMPath Traversal · high
    10 votes
  65. CSRF in login form would led to account takeoverCross-Site Request Forgery (CSRF)
    10 votes
  66. UniFi Video v3.10.1 (Windows) Local Privileges Escalation to SYSTEM from arbitrary filedelete and DLL hijack vulnerabilities.Privilege Escalation · medium
    9 votes
  67. Stored XSS => community.ubnt.com Cross-site Scripting (XSS) - Stored · high
    9 votes
  68. HTML Injection on airlink.ubnt.comCode Injection · low
    9 votes
  69. Expired SSL certificateUse of a Key Past its Expiration Date · low
    9 votes
  70. 200 http code in 403 forbidden directories on main Ubnt.com domainForced Browsing
    9 votes
  71. Reflected cross-site scripting (XSS) vulnerability in scores.ubnt.com allows attackers to inject arbitrary web script via p parameter.Cross-site Scripting (XSS) - Generic · medium
    9 votes
  72. account.ubnt.com CSRFCross-Site Request Forgery (CSRF)
    9 votes
  73. Camera adoption DoS - UniFi ProtectUncontrolled Resource Consumption · high
    8 votes
  74. Code Execution in restricted CLI of EdgeSwitchCommand Injection - Generic · high
    8 votes
  75. CRLF Injection on openvpn.svc.ubnt.comCRLF Injection · medium
    8 votes
  76. XSSCross-site Scripting (XSS) - Reflected
    8 votes
  77. XSS on Nanostation Loco M2 AirmaxCross-site Scripting (XSS) - Generic · medium
    8 votes
  78. Reflected Xss in AirMax [Nanostation Loco M2]Cross-site Scripting (XSS) - Generic
    8 votes
  79. Unauthenticated Cross-Site Scripting in Web Management ConsoleCross-site Scripting (XSS) - Generic
    8 votes
  80. UniFi v3.2.10 Cross-Site Request Forgeries / Referer-Check BypassCross-Site Request Forgery (CSRF)
    8 votes
  81. Format String Vulnerability in the EdgeSwitch restricted CLIUse of Externally-Controlled Format String · high
    7 votes
  82. Command injection in the process of downloading the latest version of the cloud key firmware through the unifi management software.Command Injection - Generic · high
    7 votes
  83. Local File Disclosure (+XSS+CSRF) in AirOS 6.2.0 devicesCommand Injection - Generic · medium
    6 votes
  84. Authenticated RCE in ToughSwitchOS Command Injection · high
    6 votes
  85. Privilege Escalation with Session Hijacking Having a Non-privileged Valid UserPrivilege Escalation · critical
    6 votes
  86. Security: Publicly accessible x.509 Public and Private Key of Ubiquiti Networks.Business Logic Errors
    5 votes
  87. Auth bypass on directory.corp.ubnt.comImproper Authentication - Generic
    5 votes
  88. AirFibre products vulnerable to HTTP Header injectionImproper Authentication - Generic
    4 votes
  89. Can upload files without authentication on AirFibre 3.2Violation of Secure Design Principles · low
    4 votes
  90. Other Buffer Overflow in PHP of the AirMax ProductsMemory Corruption - Generic
    4 votes
  91. Buffer Overflow in PHP of the AirMax ProductsMemory Corruption - Generic
    4 votes
  92. UniFi Video v3.2.2 (Windows) Local Privileges Escalation due to weak default install directory ACLsPrivilege Escalation · high
    3 votes
  93. Yet another Buffer Overflow in PHP of the AirMax ProductsMemory Corruption - Generic
    3 votes
  94. 3x Reflected XSS vectors for services.cgi (XM.v6.1.6, build 32290)Cross-site Scripting (XSS) - Reflected · medium
    2 votes