TP-LINK AC1350 Denial of Service Vulnerability

The TP-LINK AC1350 is a router from China P&L TP-LINK. A security vulnerability exists in the TP-LINK AC1350, which can be exploited by an attacker to cause a denial of service in the device's web interface via a specially crafted HTTP POST request...

p-hero.com Cross Site Scripting vulnerability OBB-3884100

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Elspec G5 digital fault recorder security vulnerability

The Elspec G5 digital fault recorder is a digital fault recorder from Elspec, Israel, used to monitor and record fault events and waveform data in power systems. A security vulnerability exists in Elspec G5 version 1.1.4.15 and earlier, which stems from the presence of a hard-coded backdoor sessi...

CVE-2024-2642

A vulnerability was found in Ruijie RG-NBS2009G-P up to 20240305. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /EXCUSHELL. The manipulation of the argument Command1 leads to command injection. The attack can be launched remotely. The...

CVE-2024-2642 Ruijie RG-NBS2009G-P EXCU_SHELL command injection

A vulnerability was found in Ruijie RG-NBS2009G-P up to 20240305. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /EXCUSHELL. The manipulation of the argument Command1 leads to command injection. The attack can be launched remotely. The...

CVE-2024-2642 Ruijie RG-NBS2009G-P EXCU_SHELL command injection

A vulnerability was found in Ruijie RG-NBS2009G-P up to 20240305. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /EXCUSHELL. The manipulation of the argument Command1 leads to command injection. The attack can be launched remotely. The...

CVE-2024-2642

CVE-2024-2642 concerns Ruijie RG-NBS2009G-P devices (up to 20240305). Affected component: the /EXCU_SHELL file, where improper handling of the Command1 argument enables remote command injection. Sources across multiple documents confirm this vulnerability and indicate that the exploit has been pu...

CVE-2024-2641 Ruijie RG-NBS2009G-P Password passwdManage.htm improper authorization

A vulnerability was found in Ruijie RG-NBS2009G-P up to 20240305. It has been classified as critical. Affected is an unknown function of the file /system/passwdManage.htm of the component Password Handler. The manipulation leads to improper authorization. It is possible to launch the attack...

CVE-2024-2641

CVE-2024-2641 affects Ruijie RG-NBS2009G-P (up to 20240305). The vulnerability is in the Password Handler’s file /system/passwdManage.htm, described as an unknown function that enables improper authorization. The issue allows a remote attacker to trigger the flaw, and public exploitation has been...

CVE-2024-2641 Ruijie RG-NBS2009G-P Password passwdManage.htm improper authorization

A vulnerability was found in Ruijie RG-NBS2009G-P up to 20240305. It has been classified as critical. Affected is an unknown function of the file /system/passwdManage.htm of the component Password Handler. The manipulation leads to improper authorization. It is possible to launch the attack...

PT-2024-2343 · Ruijie · Ruijie Reyee Series Rg-Es200 +1

Name of the Vulnerable Software and Affected Versions: Ruijie RG-NBS2009G-P versions up to 20240305 Ruijie Reyee series RG-ES200 affected versions not specified Description: A vulnerability exists in Ruijie network devices that could allow a remote attacker to execute arbitrary code. The...

Ruijie Networks RG-NBS2009G-P Command Injection Vulnerability

The Ruijie Networks RG-NBS2009G-P is a network security product from China's Ruijie Networks that is commonly used as an enterprise-class network border firewall. The Ruijie Networks RG-NBS2009G-P suffers from a command injection vulnerability that originates from an unknown function in /EXCUSHEL...

PT-2024-21375 · Ruijie · Ruijie Rg-Nbs2009G-P Rgos

Name of the Vulnerable Software and Affected Versions: Ruijie RG-NBS2009G-P versions up to 20240305 Description: A critical vulnerability exists in Ruijie RG-NBS2009G-P. The issue affects an unknown function within the /system/passwdManage.htm file of the Password Handler component, leading to...

BIT-PILLOW-2020-5312

libImaging/PcxDecode.c in Pillow before 6.2.2 has a PCX P mode buffer overflow...

BIT-GOLANG-2022-28327

The generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows a panic via long scalar input...

CVE-2024-25615

An unauthenticated Denial-of-Service DoS vulnerability exists in the Spectrum service accessed via the PAPI protocol in ArubaOS 8.x. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected service...

PT-2024-18883 · Unknown · Sourcecodester Online Mobile Management Store

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Mobile Management Store version 1.0 Description: A vulnerability was found in the software, affecting an unknown functionality of the file "/?p=products". The manipulation of the search argument leads to cross-site...

p-lilas.net Improper Access Control vulnerability OBB-3860199

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

i-p-c.net Improper Access Control vulnerability OBB-3858391

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2024-23342 python-ecdsa vulnerable to Minerva attack on P-256

The ecdsa PyPI package is a pure Python implementation of ECC Elliptic Curve Cryptography with support for ECDSA Elliptic Curve Digital Signature Algorithm, EdDSA Edwards-curve Digital Signature Algorithm and ECDH Elliptic Curve Diffie-Hellman. Versions 0.18.0 and prior are vulnerable to the...