CVE-2023-2509

A Cross-Site Scripting(XSS) vulnerability was found on ADM, LooksGood and SoundsGood Apps. An attacker can exploit this vulnerability to inject malicious scripts into the target applications to access any cookies or sensitive information retained by the browser and used with that application. Affected products and versions include: ADM 4.0.6.REG2, 4.1.0 and below as well as ADM 4.2.1.RGE2 and below, LooksGood 2.0.0.R129 and below and SoundsGood 2.3.0.r1027 and below.

• CWE-79
• CWE-79

• https://www.asustor.com/security/security_advisory_detail?id=22Vendor Advisory
• https://www.asustor.com/security/security_advisory_detail?id=22Vendor Advisory

Published

May 17, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-25084Multiple buffer overflow vulnerabilities exist in the vtysh_…7.2
• CVE-2023-25085Multiple buffer overflow vulnerabilities exist in the vtysh_…7.2
• CVE-2023-25086Multiple buffer overflow vulnerabilities exist in the vtysh_…7.2
• CVE-2023-25087Multiple buffer overflow vulnerabilities exist in the vtysh_…7.2
• CVE-2023-25088Multiple buffer overflow vulnerabilities exist in the vtysh_…7.2
• CVE-2023-25089Multiple buffer overflow vulnerabilities exist in the vtysh_…7.2
• CVE-2023-25090Multiple buffer overflow vulnerabilities exist in the vtysh_…7.2
• CVE-2023-25091Multiple buffer overflow vulnerabilities exist in the vtysh_…7.2
• CVE-2023-25092Multiple buffer overflow vulnerabilities exist in the vtysh_…7.2
• CVE-2023-25093Multiple buffer overflow vulnerabilities exist in the vtysh_…7.2
• CVE-2023-25094Multiple buffer overflow vulnerabilities exist in the vtysh_…7.2
• CVE-2023-25095Multiple buffer overflow vulnerabilities exist in the vtysh_…7.2