Close Menu
    DevStackTipsDevStackTips
    • Home
    • News & Updates
      1. Tech & Work
      2. View All

      How AI further empowers value stream management

      June 27, 2025

      12 Top ReactJS Development Companies in 2025

      June 27, 2025

      Not sure where to go with AI? Here’s your roadmap.

      June 27, 2025

      This week in AI dev tools: A2A donated to Linux Foundation, OpenAI adds Deep Research to API, and more (June 27, 2025)

      June 27, 2025

      With Gears of War: Reloaded on the way, which Xbox 360 game would you like to see get rebuilt next? — Weekend discussion 💬

      June 28, 2025

      Capcom’s finally giving Street Fighter 6 players the outfits they’ve wanted — when all else fails, send in swimsuits

      June 28, 2025

      After 14 years, Monster Hunter Wilds is bringing back underwater combat alongside “Lagiacrus” and another familiar monster — the impossible has happened

      June 28, 2025

      OpenAI may prematurely declare AGI to cut ties with Microsoft — despite Sam Altman admitting today’s tech isn’t built for it

      June 28, 2025
    • Development
      1. Algorithms & Data Structures
      2. Artificial Intelligence
      3. Back-End Development
      4. Databases
      5. Front-End Development
      6. Libraries & Frameworks
      7. Machine Learning
      8. Security
      9. Software Engineering
      10. Tools & IDEs
      11. Web Design
      12. Web Development
      13. Web Security
      14. Programming Languages
        • PHP
        • JavaScript
      Featured

      How Code Feedback MCP Enhances AI-Generated Code Quality

      June 28, 2025
      Recent

      How Code Feedback MCP Enhances AI-Generated Code Quality

      June 28, 2025

      PRSS Site Creator – Create Blogs and Websites from Your Desktop

      June 28, 2025

      Say hello to ECMAScript 2025

      June 27, 2025
    • Operating Systems
      1. Windows
      2. Linux
      3. macOS
      Featured

      With Gears of War: Reloaded on the way, which Xbox 360 game would you like to see get rebuilt next? — Weekend discussion 💬

      June 28, 2025
      Recent

      With Gears of War: Reloaded on the way, which Xbox 360 game would you like to see get rebuilt next? — Weekend discussion 💬

      June 28, 2025

      Jasmine – web launcher and session management application

      June 28, 2025

      Schulrechner – calculator you know from school

      June 28, 2025
    • Learning Resources
      • Books
      • Cheatsheets
      • Tutorials & Guides
    Home»Security»Common Vulnerabilities and Exposures (CVEs)»CVE-2024-54780 – Netgate pfSense CE OpenVPN Command Injection Vulnerability

    CVE-2024-54780 – Netgate pfSense CE OpenVPN Command Injection Vulnerability

    May 14, 2025

    CVE ID : CVE-2024-54780

    Published : May 14, 2025, 2:15 p.m. | 51 minutes ago

    Description : Netgate pfSense CE (prior to 2.8.0 beta release) and corresponding Plus builds are vulnerable to command injection in the OpenVPN widget due to improper sanitization of user-supplied input to the OpenVPN management interface. An authenticated attacker can exploit this vulnerability by injecting arbitrary OpenVPN management commands via the remipp parameter.

    Severity: 0.0 | NA

    Visit the link for more details, such as CVSS details, affected products, timeline, and more…

    Source: Read More

    Facebook Twitter Reddit Email Copy Link
    Previous ArticleCVE-2024-57273 – Netgate pfSense CE Cross-Site Scripting Vulnerability
    Next Article CVE-2024-54779 – Netgate pfSense CE Cross Site Scripting Vulnerability

    Related Posts

    Security

    Week in review: Backdoor found in SOHO devices running Linux, high-risk WinRAR RCE flaw patched

    June 29, 2025
    Common Vulnerabilities and Exposures (CVEs)

    CVE-2025-6849 – Simple Forum Cross-Site Scripting (XSS) Vulnerability

    June 29, 2025
    Leave A Reply Cancel Reply

    For security, use of Google's reCAPTCHA service is required which is subject to the Google Privacy Policy and Terms of Use.

    Continue Reading

    Forget Satya Nadella’s Windows Phone fumble, Bill Gates’ “greatest mistake of all time” cost Microsoft $400 billion

    News & Updates

    Xbox Game Pass gets Clair Obscur: Expedition 33, another Call of Duty game, Dredge, Towerborne, and more

    News & Updates

    Spelling Bee helps you learn new words

    Linux

    CVE-2025-4767 – Defog-ai Introspect Code Injection Vulnerability

    Common Vulnerabilities and Exposures (CVEs)

    Highlights

    Emergency patch for potential SAP zero-day that could grant full system control

    April 25, 2025

    Emergency patch for potential SAP zero-day that could grant full system control

    SAP’s latest out-of-band patch is for a perfect 10/10 bug in NetWeaver that experts suspect could have already been exploited as a zero-day.
    However, we can’t say for sure whether that’s the case beca …
    Read more

    Published Date:
    Apr 25, 2025 (2 hours, 44 minutes ago)

    Vulnerabilities has been mentioned in this article.

    CVE-2025-31324

    CVE-2017-9844

    CVE-2025-26413 – Apache Kvrocks Out-of-Range Index Denial of Service

    April 22, 2025

    CVE-2025-6131 – CodeAstro Food Ordering System Cross-Site Scripting Vulnerability

    June 16, 2025

    Windows 11 finally lets you remove Android/iPhone from Phone Link / Mobile devices

    May 13, 2025
    © DevStackTips 2025. All rights reserved.
    • Contact
    • Privacy Policy

    Type above and press Enter to search. Press Esc to cancel.