Web

Cisco NDFC insufficiently validates command arguments, letting an authenticated attacker with network-admin privileges inject arguments that corrupt files or crash containers.

Improper authorization and insufficient argument validation in the Cisco NDFC REST API and web UI let an authenticated, low-privileged attacker execute arbitrary commands on …

A specific REST API endpoint in Cisco NDFC enforces authorization improperly, letting an authenticated, low-privileged attacker read sensitive information.

A REST API endpoint in Cisco NDFC lacks authorization checks, letting an authenticated, low-privileged attacker read or write files on the device.

A specific REST API endpoint in Cisco NDFC lacks authorization checks, letting an authenticated, low-privileged attacker upload or delete files in certain containers.

A User repr formatted attacker-controlled data twice, so a Python format string injected into the username walked the object graph to RCE.

A cookie-driven object merge gave prototype pollution. Polluting a subscribed flag unlocked the gated quote that held the flag.

A file upload/download app whose /download/ endpoint had a plain path traversal, enough to read a flag off the filesystem.

A public S3 bucket with versioning left old copies of a page readable, and a retrieved image hid the rest behind steghide.

An Express backend ran the needle HTTP library in a way that turned a JSON field into an implicit file upload, which dropped a Python file the server then executed.