Lucene search
+L

263 matches found

CNNVD
CNNVD
added 2024/05/03 12:00 a.m.15 views

D-Link DAP-1360 安全漏洞

The D-Link DAP-1360 is a router from China-based AUO D-Link. The D-Link DAP-1360 suffers from a stack buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code...

8.8CVSS7.8AI score0.01101EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/05/03 12:00 a.m.22 views

D-Link DAP-1360 安全漏洞

The D-Link DAP-1360 is a router from China-based AUO D-Link. The D-Link DAP-1360 suffers from a remote code execution vulnerability that can be exploited by an attacker to execute arbitrary code...

8.8CVSS8.5AI score0.01134EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/05/03 12:00 a.m.9 views

D-Link DAP-1360 安全漏洞

The D-Link DAP-1360 is a router from China-based AUO D-Link. The D-Link DAP-1360 suffers from a stack buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code...

8.8CVSS7.8AI score0.01038EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/05/03 12:00 a.m.9 views

D-Link DAP-1360 安全漏洞

The D-Link DAP-1360 is a router from China AUO D-Link. A security vulnerability exists in the D-Link DAP-1360 that stems from a webproc WEBDisplayPage directory traversal information disclosure vulnerability...

6.5CVSS5AI score0.01167EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/05/03 12:00 a.m.11 views

D-Link DAP-1360 安全漏洞

The D-Link DAP-1360 is a router from China-based AUO D-Link. The D-Link DAP-1360 stack buffer overflow vulnerability can be exploited by an attacker to execute arbitrary code...

8.8CVSS7.8AI score0.01101EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/05/03 12:00 a.m.11 views

D-Link DAP-1360 安全漏洞

The D-Link DAP-1360 is a router from China-based AUO D-Link. The D-Link DAP-1360 suffers from a hard-coded authentication bypass vulnerability that can be exploited by an attacker to bypass authentication...

8.8CVSS7.1AI score0.00916EPSS
SaveExploits0References3
Circl
Circl
added 2024/02/23 12:26 p.m.14 views

CVE-2024-1360

creationtimestamp| type| source ---|---|--- 2024-02-23 12:26:18+00:00| seen| https://t.me/ctinow/191676 2024-02-23 12:26:22+00:00| seen| https://t.me/ctinow/191680 2024-03-13 16:41:43+00:00| seen| https://t.me/ctinow/206874...

4.3CVSS6.2AI score0.00212EPSS
SaveExploits0References3
OSV
OSV
added 2024/02/23 11:15 a.m.9 views

CVE-2024-1360

The Colibri WP theme for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.94. This is due to missing or incorrect nonce validation on the colibriwpinstallplugin function. This makes it possible for unauthenticated attackers to install recommended...

4.3CVSS5.6AI score0.00212EPSS
SaveExploits0References2
NVD
NVD
added 2024/02/23 11:15 a.m.28 views

CVE-2024-1360

The Colibri WP theme for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.94. This is due to missing or incorrect nonce validation on the colibriwpinstallplugin function. This makes it possible for unauthenticated attackers to install recommended...

4.3CVSS4.2AI score0.00212EPSS
SaveExploits0References2
CVE
CVE
added 2024/02/23 11:03 a.m.99 views

CVE-2024-1360

CVE-2024-1360 affects the Colibri WP Theme for WordPress. The issue is a Cross-Site Request Forgery due to missing or incorrect nonce validation in the colibriwp_install_plugin() function, permitting unauthenticated attackers to cause a site admin to install requested plugins by tricking them int...

4.3CVSS5.1AI score0.00212EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2024/02/23 12:00 a.m.13 views

WordPress Colibri WP Theme <= 1.0.94 is vulnerable to Cross Site Request Forgery (CSRF)

Software Colibri WP Type Theme Vulnerable versions = 1.0.94 Fixed in 1.0.101 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-1360 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 6ff4c5ce12a4 Credits Lucio Sá Required...

4.3CVSS6.6AI score0.00212EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/05/22 12:00 a.m.11 views

The vulnerability of the webproc script in D-Link’s wireless access points DAP-2020 and DAP-1360 allows a hacker to execute arbitrary code.

The vulnerability of the webproc script in D-Link’s wireless access points DAP-2020 and DAP-1360 is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

7.5CVSS8AI score0.00931EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/05/22 12:00 a.m.10 views

The vulnerability of the WEB_DisplayPage() function in D-Link’s wireless access points DAP-2020 and DAP-1360 allows a hacker to execute arbitrary code.

The vulnerability of the WEBDisplayPage function in D-Link’s wireless access points DAP-2020 and DAP-1360 is related to buffer overflow in the stack. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

8.8CVSS8.3AI score0.01101EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/05/22 12:00 a.m.13 views

The vulnerability of the webproc script in D-Link’s wireless access points DAP-2020 and DAP-1360 allows a hacker to execute arbitrary code.

The vulnerability of the webproc script in D-Link’s wireless access points DAP-2020 and DAP-1360 is related to buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.8CVSS8.3AI score0.01101EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/05/22 12:00 a.m.12 views

The vulnerability of the UPGCGI_CheckAuth() function in D-Link’s wireless access points DAP-2020 and DAP-1360 allows a hacker to execute arbitrary code.

The vulnerability of the UPGCGICheckAuth function in D-Link’s wireless access points DAP-2020 and DAP-1360 is related to buffer overflow in the stack. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

8.8CVSS8.3AI score0.01134EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/05/05 12:00 a.m.11 views

The vulnerability of the request handler /cgi-bin/webproc in wireless access points from the microprogramming software D-Link DAP-2020 and DAP-1360 allows a hacker to execute arbitrary code.

The vulnerability of the request processor/cgi-bin/webproc in wireless access points from D-Link, models DAP-2020 and DAP-1360, relates to the possibility of buffer overflow based on a stack mechanism. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary code...

8.8CVSS8.3AI score0.01155EPSS
SaveExploits0References4
Zero Day Initiative
Zero Day Initiative
added 2023/05/04 12:00 a.m.30 views

D-Link DAP-1360 webproc var:menu Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling requests to the /cgi-bin/webproc endpoint. When parsing t...

8.8CVSS7.4AI score0.01155EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/05/04 12:00 a.m.41 views

D-Link DAP-1360 webproc var:sys_Token Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling requests to the /cgi-bin/webproc endpoint. When parsing t...

7.5CVSS7.4AI score0.00913EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/05/04 12:00 a.m.32 views

D-Link DAP-1360 webproc COMM_MakeCustomMsg Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of requests to the /cgi-bin/webproc endpoint. The issue...

8.8CVSS7.3AI score0.01038EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/05/04 12:00 a.m.24 views

D-Link DAP-1360 webproc var:page Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of requests to the /cgi-bin/webproc endpoint. When parsin...

8.8CVSS7.4AI score0.01101EPSS
SaveExploits0References1
Rows per page
Query Builder