2568 matches found
DSA-5406-1 texlive-bin - security update
Bulletin has no description...
CVE-2023-31729
TOTOLINK A3300R v17.0.0cu.557 is vulnerable to Command Injection via /cgi-bin/cstecgi.cgi...
CVE-2023-31729
TOTOLINK A3300R v17.0.0cu.557 is vulnerable to Command Injection via /cgi-bin/cstecgi.cgi...
CVE-2023-31729
TOTOLINK A3300R v17.0.0cu.557 is vulnerable to Command Injection via /cgi-bin/cstecgi.cgi...
Edimax Technology N300 命令注入漏洞
The Edimax Technology N300 is a wireless router from China's Xunzhou Technology Edimax Technology. A security vulnerability exists in the Edimax Technology N300 BR-6428NSv4 version, which originates from an attacker being able to execute arbitrary code without any restriction via the setWAN...
PT-2023-23557 · Edimax · Edimax Wireless Router N300
Name of the Vulnerable Software and Affected Versions: Edimax Wireless Router N300 Firmware BR-6428NS v4 Description: A Command Injection issue allows an attacker to execute arbitrary code via the setWAN function in /bin/webs without limitations. Recommendations: For Edimax Wireless Router N300...
Tenda AC23 Command Injection Vulnerability
Tenda AC23 is a dual-band Gigabit wireless router from Tenda China. Tenda AC23 suffers from a command injection vulnerability, which stems from the parameter v2 of the file /bin/ate failing to correctly filter construct command special characters, commands, etc. An attacker can exploit this...
Edimax Technology N300 命令注入漏洞
The Edimax Technology N300 is a wireless router from China's Xunzhou Technology Edimax Technology. A security vulnerability exists in the Edimax Technology N300 BR-6428NSv4 version, which stems from the presence of a command injection vulnerability that allows an attacker to execute arbitrary cod...
Tenda AC23 命令注入漏洞
Tenda AC23 is a dual-band Gigabit wireless router from Tenda China. Tenda AC23 suffers from a command injection vulnerability, which stems from the parameter v2 of the file /bin/ate failing to correctly filter construct command special characters, commands, etc. An attacker can exploit this...
CVE-2023-2520
A vulnerability was found in Caton Prime 2.1.2.51.e8d7225049202303031001 and classified as critical. This issue affects some unknown processing of the file cgi-bin/toolsping.cgi?action=Command of the component Ping Handler. The manipulation of the argument Destination leads to command injection...
CVE-2023-2520
Caton Prime 2.1.2.51.e8d7225049(202303031001) contains a command injection in the Ping Handler, via manipulation of the Destination argument in cgi-bin/tools_ping.cgi?action=Command. This allows remote exploitation and affects the Ping Handler component; impact is high (as per CVE-2023-2520). No ...
D-Link DAP-1360 webproc var:menu Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling requests to the /cgi-bin/webproc endpoint. When parsing t...
D-Link DAP-1360 Multiple Parameters Stack-Based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the /cgi-bin/webproc endpoint. When parsing the errorpage and nextpage...
D-Link DAP-1360 webproc WEB_DisplayPage Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of requests to the /cgi-bin/webproc endpoint. When parsin...
D-Link DAP-1360 webproc Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling requests to the /cgi-bin/webproc endpoint. The issue...
D-Link DAP-1360 webproc Heap-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of requests to the /cgi-bin/webproc endpoint. The issue...
CVE-2023-2384
CVE-2023-2384 affects Netgear SRX5308 Web Management Interface, specifically the file scgi-bin/platform.cgi?page=dmz_setup.htm. The vulnerability arises from insufficient input validation on the dhcp.SecDnsIPByte2 parameter, enabling remote cross-site scripting. Multiple sources confirm versions ...
CVE-2023-2381
CVE-2023-2381 affects Netgear SRX5308 Web Management Interface up to firmware 4.3.5-3. The vulnerability is a cross-site scripting flaw in the BandWidthProfile.ProfileName parameter within scgi-bin/platform.cgi?page=bandwidth_profile.htm, exploitable remotely and reportedly disclosed. Public refe...