Skip to content
OpenAdvisories

Vendor

Oray

10 known vulnerabilities.

2 results · Clear filters · Feed

  • High 8.4

    Oray Pugongying X5 Pro Dnsmasq crlf injection

    A vulnerability was found in Oray Pugongying X5 Pro 7.6.1. This affects an unknown part of the component Dnsmasq. Performing a manipulation results in crlf injection. Remote exploitation of the attack is possible. The exploit has been made public and could be…

  • High 7.2

    Oray Pugongying X5 Pro PPPoE WAN Setting upload_files plugin_init unrestricted upload

    A vulnerability has been found in Oray Pugongying X5 Pro 7.6.1. Affected by this issue is the function plugin_init of the file /tmp/upload_files of the component PPPoE WAN Setting Handler. Such manipulation of the argument pppd_options leads to unrestricted u…