2557 matches found
CVE-2023-27806
H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the ipqoslanipdellist interface at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted payload...
CVE-2023-27805
H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the EditSTList interface at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted payload...
CVE-2023-27802
H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the EditvsList parameter at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted payload...
CVE-2023-27804
H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the DelvsList interface at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted payload...
CVE-2023-27805
CVE-2023-27805 concerns the H3C Magic R100 router (firmware for R100V100R005.bin). The vulnerability is a stack overflow in the EditSTList interface at /goform/aspForm, allowing a crafted payload to trigger a Denial of Service. The publicly documented impact is availability loss (DoS); no explici...
H3C Magic R100 缓冲区错误漏洞
The H3C Magic R100 is a router from China's Xinhua San H3C. A security vulnerability exists in the H3C Magic R100 R100V100R005.bin version, which originates from a discovery containing a stack overflow via the EdittriggerList interface of /goform/aspForm. An attacker exploits the vulnerability to...
CVE-2023-27810
H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the ipqoslanipeditlist interface at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted payload...
Schneider Electric v1.0 - Directory traversal & Broken Authentication
Exploit Title: Schneider Electric v1.0 - Directory traversal & Broken Authentication Google Dork: inurl:/scada-vis Date: 3/11/2023 Exploit Author: parsa rezaie khiabanloo Vendor Homepage: https://www.se.com/ Version: all-versions Tested on: Windows/Linux/Android Attacker can using these dorks and...
CVE-2023-27807
H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the Delstlist interface at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted payload...
CVE-2023-27801
CVE-2023-27801 affects H3C Magic R100 family (R100V100R005.bin). The vulnerability is a stack overflow in the DelDNSHnList interface exposed via /goform/aspForm, leading to Denial of Service. The provided sources consistently describe the same root cause and impact (availability loss) without det...
CVE-2023-27803
CVE-2023-27803 affects H3C Magic R100 firmware (R100V100R005.bin). A stack overflow via the EdittriggerList interface at /goform/aspForm allows a crafted payload to cause a Denial of Service. Public documents reference this description, and one PT-Security entry recommends disabling the API endpo...
CVE-2023-27804
CVE-2023-27804 affects H3C Magic R100 (R100V100R005.bin) with a stack overflow via the DelvsList interface at “/goform/aspForm”, leading to a potential Denial of Service . Exploitation requires a crafted payload; impact is limited to availability (no confidentiality/integrity impact stated). The ...
CVE-2023-27802
CVE-2023-27802 affects the H3C Magic R100 router (R100V100R005.bin). A stack overflow via the EditvsList parameter at /goform/aspForm is reported, enabling a Denial of Service through a crafted payload. The connected sources consistently identify the affected product and endpoint; no public fix/v...
CVE-2023-27806
CVE-2023-27806 affects H3C Magic R100/R100V100R005.bin via the ipqos_lanip_dellist interface at /goform/aspForm, causing a stack overflow that can lead to Denial of Service. The provided documents consistently describe a DoS outcome from a crafted payload but do not include concrete exploitation ...
CVE-2023-27808
CVE-2023-27808 describes a stack overflow in H3C Magic R100 router component at the DeltriggerList interface (/goform/aspForm) of the R100V100R005.bin, enabling a crafted payload to trigger a Denial of Service. Affected product: H3C Magic R100 (R100V100R005.bin). Underlying cause: stack overflow ...
Linux/x86 - Polymorphic linux x86 Shellcode (92 Bytes)
Exploit Title: Polymorphic linux x86 nc -lvve/bin/sh -p13377 shellcode 92 Bytes Exploit Author: Eduardo Silva Tested on: Linux x8664 SMP Debian 4.19.260-1 SLAE/Student ID: PA-31319 Webpage: https://0xnibbles.github.io/ Description: This shellcode is a polymorphic version of...
TOTOLINK A7100RU 命令注入漏洞
The TOTOLINK A7100RU is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A7100RU suffers from a command injection vulnerability that stems from the enabled parameter of cgi-bin/cstecgi.cgi failing to properly filter constructed command special characters, commands, etc., whi...
Amazon Linux 2023 : golang, golang-bin, golang-misc (ALAS2023-2023-048)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-048 advisory. A vulnerability was found in archive/zip of the Go standard library. Applications written in Go can panic or potentially exhaust system memory when parsing malformed ZIP files. CVE-2021-33196 A...
Debian: Security Advisory (DLA-217-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
