12476 matches found
CVE-2025-26002
Telesquare TLR-2005KSH 1.1.4 is affected by an unauthorized stack overflow vulnerability when requesting the admin.cgi parameter with setSyncTimeHost...
CVE-2025-26010
Telesquare TLR-2005KSH 1.1.4 allows unauthorized password modification when requesting the admin.cgi parameter with setUserNamePassword...
Telesquare TLR-2005Ksh å®å šæŒæŽ
The Telesquare TLR-2005Ksh is a wireless router from the South Korean company Telesquare. A security vulnerability exists in Telesquare TLR-2005Ksh version 1.1.4 that originates from an unauthorized stack overflow when requesting the admin.cgi parameter setSyncTimeHost...
The vulnerability of the setWiFiScheduleCfg() function in the web/cgi-bin/cstecgi.cgi script of the TOTOLINK X5000R routerâs microprogramming software allows a perpetrator to execute arbitrary commands.
The vulnerability of the setWiFiScheduleCfg function in the web/cgi-bin/cstecgi.cgi script of the TOTOLINK X5000R routerâs microprogramming system is related to the failure to take measures to neutralize special elements used in the operating systemâs processing of the eMinute parameter. Exploiti...
VulnCheck KEV: CVE-2021-35402
A vulnerability is present in Prolink PRC2402M that could allow unauthenticated remote adversaries to inject commands due to improper checks on input supplied to 'liveapi.cgi'...
CVE-2025-2688: Improper Access Control
A vulnerability classified as problematic was found in TOTOLINK A3000RU up to 5.9c.5185. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/ExportSyslog.sh of the component Syslog Configuration File Handler. The manipulation leads to improper access controls. The atta...
CVE-2024-57440
D-Link DSL-3788 revA1 1.01R1B036EUEN is vulnerable to Buffer Overflow via the COMMMAKECustomMsg function of the webproc cgi...
[SECURITY] Fedora 40 Update: php-8.3.19-1.fc40
PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...
[SECURITY] Fedora 41 Update: php-8.3.19-1.fc41
PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...
CVE-2024-57440: Stack-based Buffer Overflow
D-Link DSL-3788 revA1 1.01R1B036EUEN is vulnerable to Buffer Overflow via the COMMMAKECustomMsg function of the webproc cgi...
CVE-2024-57440
The D-Link DSL-3788 modem (specifically revA1 version 1.01R1B036_EU_EN ) is vulnerable to a stack-based buffer overflow within the COMM_MAKECustomMsg function of the webproc cgi component. This vulnerability occurs because the function fails to properly validate the length of input data, which ca...
CBL Mariner 2.0 Security Update: ruby (CVE-2025-27219)
The version of ruby installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-27219 advisory. - In the CGI gem before 0.4.2 for Ruby, the CGI::Cookie.parse method in the CGI library contains a potential...
CVE-2024-57440
D-Link DSL-3788 revA1 1.01R1B036EUEN is vulnerable to Buffer Overflow via the COMMMAKECustomMsg function of the webproc cgi...
In the CGI gem before 0.4.2 for Ruby, the CGI::Cookie.parse method in the CGI library contains a potential Denial of Service (DoS) vulnerability. The method does not impose any limit on the length of the raw cookie value it processes. This oversight can lead to excessive resource consumption when parsing extremely large cookies.
...
In the CGI gem before 0.4.2 for Ruby, a Regular Expression Denial of Service (ReDoS) vulnerability exists in the Util#escapeElement method.
...
CVE-2021-32584: Improper Access Control
An improper access control CWE-284 vulnerability in FortiWLC version 8.6.0, version 8.5.3 and below, version 8.4.8 and below, version 8.3.3 and below, version 8.2.7 to 8.2.4, version 8.1.3 may allow an unauthenticated and remote attacker to access certain areas of the web management CGI...
PT-2025-11481
Name of the Vulnerable Software and Affected Versions FortiWLC versions 8.6.0 and below FortiWLC versions 8.5.3 and below FortiWLC versions 8.4.8 and below FortiWLC versions 8.3.3 and below FortiWLC versions 8.2.7 through 8.2.4 FortiWLC version 8.1.3 Description An improper access control issue m...
Exploit for OS Command Injection in Php
PHP-CGI Injector ð CVE-2024-4577 & CVE-2024-8926 Exploit To...
[SECURITY] Fedora 42 Update: man2html-1.6-39.g.fc42
man2html is a man page to HTML converter. This package contains CGI scripts that allow you to view, browse, and search man pages using a web server...
OESA-2025-1264 ruby security update
Ruby is a fast and easy interpreted scripting language for object-oriented programming. It has many functions for processing text Files and perform system management tasks such as Perl. Security Fixes: In the CGI gem before 0.4.2 for Ruby, the CGI::Cookie.parse method in the CGI library contains ...