Tenda CH22 安全漏洞

Tenda CH22 is an enterprise-grade wireless router from Tenda. Tenda CH22 has a stack buffer overflow vulnerability, which originates from the parameter mitssidindex in the formWrlsafeset function in file /goform/AdvSetWrlsafeset that fails to correctly validate the length of the input data, which...

Tenda AC18 安全漏洞

Tenda AC18 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in July 2016, mainly for villas and large home users. Tenda AC18 has a stack buffer overflow vulnerability, which originates from the parameter upnpEn in the file /goform/SetUpnpCfg fails to correctly...

Tenda AC18 缓冲区错误漏洞

Tenda AC18 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in July 2016, mainly for villas and large home users. Tenda AC18 has a stack buffer overflow vulnerability, which stems from the failure of the wanSpeed parameter in the fromAdvSetMacMtuWan function to...

pwn2exploit

pwn & exploit 这是些前段时间研究二进制的一些心得 Paper. 本来是希望能够从底层原理到全局把控的层次去整理. 这里只完成了部分的Paper, 还有很多的Paper只写了概要点. 个人有几篇 paper 还是很有参考价值的 linux进程动态so注入.md 这篇文章介绍了如何在目前的ELF下进行动态so注入, 介绍 gnu.hash 的结构和相关算法, 具体的代码可以参考evilELF, 代码设计规范. PWN之堆内存管理.md 这篇文章是我在阅读了很多参考资料和glibc后写的, 其中对于glibc分配算法中的各种缓存的设计有比较好的讲述以及对分配和释放算法有比价好的阐...

TOTOLINK A3002R 安全漏洞

TOTOLINK A3002R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A3002R suffers from a stack buffer overflow vulnerability, which originates from the parameter subnet in the file /boafrm/formRoute failing to correctly validate the length and size of the input data, which...

D-Link DIR-619L 安全漏洞

The D-Link DIR-619L is a wireless router designed for home and small office environments, utilizing the IEEE 802.11n wireless standard with a maximum transmission rate of 300Mbps. A stack overflow vulnerability exists in the D-Link DIR-619L /goform/formdumpeasysetup, which originates from...

Tenda AC15 安全漏洞

The Tenda AC15 is a wireless router from Tenda. A stack overflow vulnerability exists in the Tenda AC15 SetOnlineDevName handling formSetDeviceName parameter, which can be exploited by a remote attacker to submit a special request that can crash the application or execute arbitrary code in the...

TOTOLINK N200RE 安全漏洞

The TOTOLINK N200RE is a wireless router for the SOHO market. The TOTOLINK N200RE suffers from a buffer overflow vulnerability that originates from a stack-based buffer overflow in the ip parameter of the setDiagnosisCfg function of /cgi-bin/cstecgi.cgi. No detailed vulnerability details are...

Tenda AC6 缓冲区错误漏洞

Tenda AC6 is a dual-band wireless router from Tenda that supports 2.4GHz and 5GHz bands with a maximum transmission rate of 1167Mbps. The Tenda AC6 suffers from a stack buffer overflow vulnerability, which originates from the fromDhcpListClient function resulting in a stack-based buffer overflow...

Tenda A15 缓冲区错误漏洞

Tenda A15 is a WiFi extender from Tenda China.A stack overflow vulnerability exists in the Tenda A15 wrlEn5g parameter, which is caused by incorrect boundary checking performed by /goform/WifiBasicSet. By sending an excessively long string using the wrlEn5g parameter, a remote attacker could...

Tenda AC15 缓冲区错误漏洞

The Tenda AC15 is a wireless router from the Chinese company Tenda. A stack overflow vulnerability exists in Tenda AC15 router version V15.03.05.19, which originates from the formSetQosBand method not size-checking the input data with request/goform/SetNetControlList, and can be exploited by an...

Tenda AX1803 缓冲区错误漏洞

Tenda AX1803 is a dual-band Gigabit WIFI6 router from Tenda China.Tenda AX1803 is vulnerable to a stack overflow vulnerability, which is caused by improper boundary checking of the formSetProvince function. An attacker could exploit this vulnerability to overflow the buffer and execute arbitrary...

Google Android 缓冲区错误漏洞

Google Android is a Linux-based open source operating system from Google, Inc. Google Android has an out-of-bounds read vulnerability, which stems from a lack of boundary checking and can result in an out-of-bounds read, which can be exploited by an attacker to cause local information leakage of...

Tenda AC9 缓冲区错误漏洞

Tenda AC9 is a wireless router. a stack overflow vulnerability exists in the Tenda AC9 SetStaticRouteCfg function. An attacker can exploit the vulnerability to obtain a stable root shell via a constructed payload...

Tenda AX1806 缓冲区错误漏洞

The Tenda AX1806 is a WiFi6 wireless router from Tenda, a Chinese company. A stack overflow vulnerability exists in the Tenda AX1806 saveParentControlInfo function, which can be exploited by an attacker to cause a Denial of Service DoS via the deviceId parameter...

Tenda AX1806 缓冲区错误漏洞

The Tenda AX1806 is a WiFi6 wireless router from Tenda, a Chinese company. A stack overflow vulnerability exists in the Tenda AX1806 saveParentControlInfo function, which can be exploited by an attacker to cause a Denial of Service DoS via the time parameter...

Adobe Acrobat和Adobe Reader 缓冲区错误漏洞

Adobe Reader also known as Acrobat Reader is a PDF document reader developed by Adobe. Adobe Acrobat is a PDF editor developed by Adobe. Adobe Acrobat/Reader is vulnerable to a stack buffer overflow. An attacker can exploit this vulnerability to execute arbitrary code...

Advantech WebAccess 缓冲区错误漏洞

Advantech WebAccess is Advantech's suite of HMI/SCADA software based on a browser architecture. A stack buffer overflow vulnerability exists in Advantech WebAccess 9.02 and earlier versions. The vulnerability stems from a lack of proper validation of the length of user-supplied data. An attacker...

Sophos UTM TCP栈内存泄漏拒绝服务漏洞

Sophos UTM提供一套集成的软件解决方案，是具有高性能的多合一防火墙。 Sophos UTM处理TCP栈存在错误，允许攻击者利用漏洞触发内存泄漏造成拒绝服务攻击。 0 Sophos UTM 9.x Sophos UTM 9.109已经修复该漏洞，建议用户下载更新： http://www.sophos.com...

CATIA V5 CATSysDemon.exe缓冲区溢出漏洞

CATIA是数字产品定义及生命周期管理使用的CAD、CAE、CAM应用集成软件包。 CATIA V5 6R2013及其他版本处理某些数据包时，CATSysDemon.exe内出错，恶意用户通过发送特制的数据包到TCP端口55555，利用此漏洞可造成栈缓冲区溢出。 0 3ds catia-v5 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.3ds.com/...