Multiple external config control vulnerabilities exists in the openvpn.cgi openvpn_server_setup() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A configuration injection vulnerability exists in the `open_port` POST parameter.

Hackviser Pentesting Tactics


Welcome to Pentesting Tactics – your go-to comprehensive reference guide for conducting thorough penetration testing, tailored for both newcomers and seasoned experts in the field. Our content is carefully curated to guide you directly to the crucial insights and strategies you need, spanning a wide range of pentesting areas. From diving deep into the intricacies of service and protocol pentesting to unraveling the complexities of web vulnerabilities, we provide comprehensive coverage.

Listed: