Tormach PathPilot Controller 安全漏洞

Tormach PathPilot Controller is a series of controllers from Tormach USA. A security vulnerability exists in Tormach PathPilot Controller version v2.9.6. An attacker can exploit the vulnerability to access the G-code shared folder and view sensitive information...

CVE-2023-38291

An issue was discovered in a third-party component related to ro.boot.wifimacaddr, shipped on devices from multiple device manufacturers. Various software builds for the following TCL devices 30Z and 10L and Motorola devices Moto G Pure and Moto G Power leak the Wi-Fi MAC address to a system...

CVE-2024-22809

Incorrect access control in Tormach xsTECH CNC Router, PathPilot Controller v2.9.6 allows attackers to access the G code's shared folder and view sensitive information...

PT-2024-19570

Name of the Vulnerable Software and Affected Versions Tormach xsTECH CNC Router, PathPilot Controller version 2.9.6 Description The issue is related to incorrect access control, allowing attackers to access the G code's shared folder and view sensitive information. Recommendations For version...

CVE-2023-38291: Incorrect Default Permissions

An issue was discovered in a third-party component related to ro.boot.wifimacaddr, shipped on devices from multiple device manufacturers. Various software builds for the following TCL devices 30Z and 10L and Motorola devices Moto G Pure and Moto G Power leak the Wi-Fi MAC address to a system...

CVE-2024-22809

Incorrect access control in Tormach xsTECH CNC Router, PathPilot Controller v2.9.6 allows attackers to access the G code's shared folder and view sensitive information...

CVE-2024-30952: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in PESCMS-TEAM v2.3.6 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the domain input field under /youdoamin/?g=Team&m=Setting&a=action...

PrusaSlicer 安全漏洞

PrusaSlicer is a 3D printing data processing software. A security vulnerability exists in PrusaSlicer 2.6.1 and earlier versions, which stems from an arbitrary code execution vulnerability in the g-code export function...

g-api-python-tasks:fuzz_cloudtask_client: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6697305483837440 Project: g-api-python-tasks Fuzzing Engine: libFuzzer Fuzz Target: fuzzcloudtaskclient Job Type: libfuzzerasang-api-python-tasks Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer:...

PrusaSlicer 2.6.1 - Arbitrary code execution Vulnerability

Exploit Title: PrusaSlicer 2.6.1 - Arbitrary code execution on g-code export Exploit Author: Kamil Breński Vendor Homepage: https://www.prusa3d.com Software Link: https://github.com/prusa3d/PrusaSlicer Version: PrusaSlicer up to and including version 2.6.1 Tested on: Windows and Linux CVE:...

CVE-2024-3444: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in Wangshen SecGate 3600 up to 20240408. It has been classified as critical. This affects an unknown part of the file /?g=netprokeywordimportsave. The manipulation of the argument reqfile leads to unrestricted upload. It is possible to initiate the attack remotely. The...

The vulnerability of the formWifiBasicSet function in the microprogramming software for Tenda FH1203 allows a hacker to remotely influence the privacy, integrity, and accessibility of the protected information.

The vulnerability of the formWifiBasicSet function in the microprogramming software for Tenda FH1203 is related to the possibility of buffer overflow based on a stack. Exploiting this vulnerability can allow an attacker to influence the confidentiality, integrity, and accessibility of the protect...

CVE-2024-30632

Tenda FH1205 v2.0.0.7775 has a stack overflow vulnerability in the security5g parameter from formWifiBasicSet function...

CVE-2024-30586

Tenda FH1202 v1.2.0.14408 has a stack overflow vulnerability in the security5g parameter of the formWifiBasicSet function...

Tenda FH1203 安全漏洞

Tenda FH1203 is a dual-band wireless router from Tenda China, mainly used for home network coverage. The Tenda FH1203 suffers from a buffer overflow vulnerability that originates from the security5g parameter of the formWifiBasicSet method failing to properly validate the length size of the input...

WordPress Plugin WP Smart Import 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

PT-2024-23536 · Tenda · Tenda Fh1205

Name of the Vulnerable Software and Affected Versions: Tenda FH1205 version 2.0.0.7775 Description: The issue is a stack overflow vulnerability in the security 5g parameter from the formWifiBasicSet function. Recommendations: For Tenda FH1205 version 2.0.0.7775, as a temporary workaround, conside...

Shenzhen Libituo Technology LBT-T300-mini1 Security Breach

Shenzhen Libituo Technology LBT-T300-mini1 is a 5G industrial router from Shenzhen Libituo Technology China. A security vulnerability exists in the Shenzhen Libituo Technology LBT-T300-mini1 v1.2.9, which is caused by a buffer overflow in the lannetmask parameter via /apply.cgi...

PT-2024-19189 · Elspec · Elspec G5 Digital Fault Recorder

Name of the Vulnerable Software and Affected Versions: Elspec G5 digital fault recorder versions 1.1.4.15 and before Description: An issue was discovered in the system logs download mechanism, allowing directory traversal to occur. This could potentially expose system logs. If local network acces...

CVE-2024-2277

A vulnerability was found in Bdtask G-Prescription Gynaecology & OBS Consultation Software 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /Setting/changepasswordsave of the component Password Reset Handler. The manipulation leads to cross-site...