The default configuration of AirDroid 1.0.4 beta uses a four-character alphanumeric password, which makes it easier for remote attackers to obtain access via a brute-force attack. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
Authentication Bypass
Airdroid
NVD
CVSS 2.0
7.5
EPSS
0.4%
Heap-based buffer overflow in the SoapServer service in Citrix Provisioning Services 5.0, 5.1, 5.6, 5.6 SP1, 6.0, and 6.1 allows remote attackers to execute arbitrary code via a crafted string. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity.
Buffer Overflow
RCE
Citrix
Provisioning Services
NVD
CVSS 2.0
7.5
EPSS
5.3%