Exploit for Stack-based Buffer Overflow in Tenda Ac10_Firmware

🗓️ 25 Mar 2024 14:34:26Reported by SchnaidrType

PHP EXIF memory corruption CVE-2019-9641 enables remote code execution via image upload.

Reporter	Title	Published	Views	Family All 134
IBM Security Bulletins	Security Bulletin: IBM BladeCenter Advanced Management Module (AMM) is affected by vulnerabiltiies in PHP.	27 Jan 202016:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Flex System Chassis Management Module (CMM) is affected by vulnerabilities in PHP	7 Dec 202322:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM API Connect Developer Portal is affected by multiple PHP vulnerabilities (CVE-2019-9641 CVE-2019-9637 CVE-2019-9639 CVE-2019-9638)	3 Apr 201923:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security QRadar EDR Software has multiple vulnerabilities	15 Apr 202502:43	–	ibm
AlpineLinux	CVE-2019-9641	8 Mar 201923:00	–	alpinelinux
BDU FSTEC	The vulnerability of the exif component in the PHP programming language interpreter allows attackers to execute arbitrary PHP code.	19 Apr 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the fromSetSysTime() function (/goform/SetSysTimeCfg) in the Tenda AC10 router’s microprogramming software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.	27 Mar 202400:00	–	bdu_fstec
Circl	CVE-2019-9641	5 Apr 202304:57	–	circl
Circl	CVE-2024-29197	25 Mar 202411:55	–	circl
CloudLinux	php: Fix of 5 CVEs	25 Apr 202608:46	–	cloudlinux