An issue was discovered on GL.iNet devices before 3.216. Through the software installation feature, it is possible to inject arbitrary parameters in a request to cause opkg to obtain a list of files in a specific directory, by using the regex feature in a package name.
Windows MSHTML Platform Security Feature Bypass Vulnerability
Windows OLE Remote Code Execution Vulnerability
Microsoft Access Denial of Service Vulnerability
Microsoft Word Security Feature Bypass Vulnerability
Win32k Elevation of Privilege Vulnerability
Visual Studio Code Information Disclosure Vulnerability
AV1 Video Extension Remote Code Execution Vulnerability
AV1 Video Extension Remote Code Execution Vulnerability
SysInternals Sysmon for Windows Elevation of Privilege Vulnerability