1385 matches found
CVE-2022-36482
CVE-2022-36482 applies to TOTOLINK N350RT, version 9.3.5u.6139_B20201216, where a command injection flaw exists in the function setLanguageCfg exposed through the lang parameter . The vulnerability could allow arbitrary command execution with local access and could impact confidentiality, integri...
CVE-2022-36462
TOTOLINK A3700R V9.1.2u.6134_B20201202 is affected by a stack overflow in setLanguageCfg via the lang parameter. Root cause: improper handling of the lang input leading to stack overflow. Impact per CVSS is HIGH (local, no user interaction). No official patch details are provided in the sources; ...
CVE-2022-36462
TOTOLINK A3700R V9.1.2u.6134B20201202 was discovered to contain a stack overflow via the lang parameter in the function setLanguageCfg...
CVE-2022-36482: Out-of-bounds Write
TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a command injection vulnerability via the lang parameter in the function setLanguageCfg...
CVE-2022-37078: Out-of-bounds Write
TOTOLINK A7000R V9.1.0u.6115B20201022 was discovered to contain a command injection vulnerability via the lang parameter at /setting/setLanguageCfg...
CVE-2022-36462: Out-of-bounds Write
TOTOLINK A3700R V9.1.2u.6134B20201202 was discovered to contain a stack overflow via the lang parameter in the function setLanguageCfg...
OSV-2022-733 Security exception in jaz.Zer.<clinit>
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50374 Crash type: Security exception Crash state: jaz.Zer. java.base/java.lang.Class.forName0 java.base/java.lang.Class.forName...
CVE-2022-32148
Improper exposure of client IP addresses in net/http before Go 1.17.12 and Go 1.18.4 can be triggered by calling httputil.ReverseProxy.ServeHTTP with a Request.Header map containing a nil value for the X-Forwarded-For header, which causes ReverseProxy to set the client IP as the value of the...
[SECURITY] Fedora 35 Update: deepin-api-5.4.11-4.fc35
Go-lang bingding for dde-daemon...
lang-boden.de Cross Site Scripting vulnerability OBB-2747830
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
[SECURITY] Fedora 36 Update: golang-github-google-martian-3.1.0-9.fc36
Martian Proxy is a programmable HTTP proxy designed to be used for testing. Martian is a great tool to use if you want to: - Verify that all or some subset of requests are secure - Mock external services at the network layer - Inject headers, modify cookies or perform other mutations of HTTP...
The vulnerability of the /admin/general/change-lang component of the TrueConf Server software, which allows a hacker to redirect a user to any arbitrary URL address.
The vulnerability of the /admin/general/change-lang component of the TrueConf Server involves redirecting URLs to an unreliable website. Exploiting this vulnerability could allow a malicious actor to redirect users to any given URL address...
CVE-2017-20119 TrueConf Server change-lang redirect
A vulnerability classified as problematic has been found in TrueConf Server 4.3.7. This affects an unknown part of the file /admin/general/change-lang. The manipulation of the argument redirecturl leads to open redirect. It is possible to initiate the attack remotely. The exploit has been disclos...
CVE-2017-20119: URL Redirection to Untrusted Site
A vulnerability classified as problematic has been found in TrueConf Server 4.3.7. This affects an unknown part of the file /admin/general/change-lang. The manipulation of the argument redirecturl leads to open redirect. It is possible to initiate the attack remotely. The exploit has been disclos...
PT-2022-3296 · Trueconf · Trueconf Server
Name of the Vulnerable Software and Affected Versions: TrueConf Server version 4.3.7 Description: A problematic vulnerability has been found in TrueConf Server, affecting an unknown part of the file /admin/general/change-lang. The manipulation of the redirect url argument leads to an open redirec...
Malicious code in elm-lang (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f0e3e1a02b1f6ea6029804fcdfa5dabcc95222805d9c537c1ee5d75dd7d4b791 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-2705 Malicious code in elm-lang (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f0e3e1a02b1f6ea6029804fcdfa5dabcc95222805d9c537c1ee5d75dd7d4b791 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Joomla! Cross-site Scripting vulnerability
Cross-site scripting XSS vulnerability in libraries/idnaconvert/example.php in Joomla! 3.1.5 allows remote attackers to inject arbitrary web script or HTML via the lang parameter...
