Yet another Buffer Overflow in PHP of the AirMax Products #74025 Valid Memory Corruption – 2016-04-07 – 3 Buffer Overflow in PHP of the AirMax Products #73491 Valid Memory Corruption – 2016-04-01 – 4 Other Buffer Overflow in PHP of the AirMax Products #74004 Valid Memory Corruption – 2016-04-07 – 4 Auth bypass on directory.corp.ubnt.com #116504 Valid Authentication – 2016-06-02 – 5 UniFi v3.2.10 Cross-Site Request Forgeries / Referer-Check Bypass #52635 Valid Cross-Site Request Forgery – 2016-01-07 – 8 Reflected Xss in AirMax [Nanostation Loco M2] #149287 Valid Cross-site Scripting – 2016-12-12 – 8 account.ubnt.com CSRF #101909 Valid Cross-Site Request Forgery – 2016-12-05 – 9 CSRF in login form would led to account takeover #50703 Valid Cross-Site Request Forgery – 2016-06-20 – 10 Reflected XSS in scores.ubnt.com #130889 Valid Cross-site Scripting – 2016-08-11 – 11 Open Redirect in unifi.ubnt.com [Controller Finder] #141355 Valid Open Redirect – 2016-09-01 – 12 Stored XSS in unifi.ubnt.com #142084 Valid Cross-site Scripting – 2016-11-26 – 12 Read-Only user can execute arbitraty shell commands on AirOS #119317 Valid Command and Code Injection – 2016-08-05 – 18 Shell Injection via Web Management Console (dl-fw.cgi) #121940 Valid Command and Code Injection – 2016-10-15 – 20 Arbritrary file Upload on AirMax #73480 Valid File and Path Handling – 2016-02-13 – 21 Subdomain Takeover in http://assets.goubiquiti.com/ #109699 Valid Command and Code Injection – 2016-02-14 – 22 Read-Only user can execute arbitraty shell commands on AirOS #128750 Valid Command and Code Injection – 2016-08-05 – 22 Source code disclosure on https://107.23.69.180 #136891 Valid Information Disclosure – 2016-06-20 – 25 IDOR Causing Deletion of any account #156537 Valid No weakness recorded – 2016-11-29 – 30 Read-Only user can execute arbitraty shell commands on AirOS #139398 Valid Command and Code Injection – 2016-08-05 – 44 Authentication bypass on sso.ubnt.com via subdomain takeover of ping.ubnt.com #172137 Duplicate Cross-Site Request Forgery – 2016-11-29 – 55 Subdomain takeover on partners.ubnt.com due to non-used CloudFront DNS entry #145224 Valid Access Control – 2016-11-27 – 57