1385 matches found
CVE-2023-48881
A stored cross-site scripting XSS vulnerability in EyouCMS v1.6.4-UTF8-SP1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Field Title field at /login.php?m=admin&c=Field&a=arctypeadd&ajax=1&lang=cn...
apache-commons-lang:SerializationUtilsFuzzer: Security exception in jaz.Zer.reportFinding
Detailed Report: https://oss-fuzz.com/testcase?key=6206408512897024 Project: apache-commons-lang Fuzzing Engine: libFuzzer Fuzz Target: SerializationUtilsFuzzer Job Type: libfuzzerasanapache-commons-lang Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...
SUSE-SU-2023:4294-1 Security update for webkit2gtk3
This update for webkit2gtk3 ships missing Lang packages to SUSE Linux Enterprise 15 SP4 and SP5. Security fixes: - CVE-2023-41993: Fixed an issue where processing malicious web content could have lead to arbitrary code execution bsc1215661. - CVE-2023-39928: Fixed a use-after-free that could be...
CVE-2023-33559
A local file inclusion vulnerability via the lang parameter in OcoMon before v4.0.1 allows attackers to execute arbitrary code by supplying a crafted PHP file...
CVE-2023-33559: Inclusion of Functionality from Untrusted Control Sphere
A local file inclusion vulnerability via the lang parameter in OcoMon before v4.0.1 allows attackers to execute arbitrary code by supplying a crafted PHP file...
CVE-2023-45984
TOTOLINK X5000R V9.1.0u.6118B20201102 and TOTOLINK A7000R V9.1.0u.6115B20201022 was discovered to contain a stack overflow via the lang parameter in the function setLanguageCfg...
CVE-2023-45984
TOTOLINK X5000R V9.1.0u.6118B20201102 and TOTOLINK A7000R V9.1.0u.6115B20201022 was discovered to contain a stack overflow via the lang parameter in the function setLanguageCfg...
CVE-2023-45984: Out-of-bounds Write
TOTOLINK X5000R V9.1.0u.6118B20201102 and TOTOLINK A7000R V9.1.0u.6115B20201022 was discovered to contain a stack overflow via the lang parameter in the function setLanguageCfg...
CVE-2023-45984
The CVE-2023-45984 entry affects TOTOLINK X5000R (v9.1.0u.6118_B20201102) and TOTOLINK A7000R (v9.1.0u.6115_B20201022). All connected sources describe a stack overflow in setLanguageCfg() triggered via the lang parameter, exposing potential arbitrary code execution on affected routers. Public sum...
PT-2023-29780 · Totolink · Totolink X5000R +1
Name of the Vulnerable Software and Affected Versions: TOTOLINK X5000R version 9.1.0u.6118 B20201102 TOTOLINK A7000R version 9.1.0u.6115 B20201022 Description: A stack overflow issue was discovered via the lang parameter in the setLanguageCfg function. This issue affects the specified versions of...
Exploit for OS Command Injection in Opentsdb
opentsdbkeycmdinjection An exploit for OpenTSDB -l -p -...
CVE-2023-39617
CVE-2023-39617 affects TOTOLINK X5000R: versions V9.1.0cu.2089_B20211224 through V9.1.0cu.2350_B20230313 are vulnerable to remote code execution via the lang parameter in the setLanguageCfg function. Root cause described as failure to properly filter elements in the constructed snippet, enabling ...
CVE-2023-39617
TOTOLINK X5000RV9.1.0cu.2089B20211224 and X5000RV9.1.0cu.2350B20230313 were discovered to contain a remote code execution RCE vulnerability via the lang parameter in the setLanguageCfg function...
TOTOLINK X5000R 命令注入漏洞
TOTOLINK X5000R is a wireless router from TOTOLINK that supports Wi-Fi 6 technology with full coverage Mesh system and dual band transmission. The TOTOLINK X5000R suffers from a code execution vulnerability that stems from the lang parameter of the setLanguageCfg function failing to properly filt...
CVE-2023-39617: Improper Neutralization of Special Elements used in a Command
TOTOLINK X5000RV9.1.0cu.2089B20211224 and X5000RV9.1.0cu.2350B20230313 were discovered to contain a remote code execution RCE vulnerability via the lang parameter in the setLanguageCfg function...
CVE-2023-37475
CVE-2023-37475 affects the Go library hamba/avro, where a crafted string passed to Unmarshal() can trigger uncontrolled memory allocation, leading to denial of service. Root cause: the Unmarshal() path uses input data to size allocations, allowing memory exhaustion and potential crash. A fix is i...
CVE-2023-37475: Uncontrolled Resource Consumption
Hamba avro is a go lang encoder/decoder implementation of the avro codec specification. In affected versions a well-crafted string passed to avro's github.com/hamba/avro/v2.Unmarshal can throw a fatal error: runtime: out of memory which is unrecoverable and can cause denial of service of the...
TOTOLINK A3300R setLanguageCfg Method Code Execution Vulnerability
TOTOLINK A3300R is a dual-band wireless router manufactured by China's Gion Electronics TOTOLINK, mainly used for home and small network environments. A code execution vulnerability exists in the TOTOLINK A3300R. The vulnerability stems from the lang parameter of the setLanguageCfg method failing...
