Malwared vulnerabilities
We track 1 vulnerability in Malwared products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 26, 2024.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Malwared vulnerabilities
- 9.8 Critical severity
byob: Improper Limitation of a Pathname to a Restricted Directory
An arbitrary file write issue in the exfiltration endpoint in BYOB (Build Your Own Botnet) 2.0 allows attackers to overwrite SQLite databases and bypass authentication via an unauthenticated HTTP request with a crafted parameter. This occurs in file_add in api