CVE-2024-2640 Watu Quiz < 3.4.1.2 - Author+ Stored XSS

The Watu Quiz WordPress plugin before 3.4.1.2 does not sanitise and escape some of its settings, which could allow users such as authors if they've been authorized by admins to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

CVE-2024-2640 Watu Quiz < 3.4.1.2 - Author+ Stored XSS

The Watu Quiz WordPress plugin before 3.4.1.2 does not sanitise and escape some of its settings, which could allow users such as authors if they've been authorized by admins to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

CVE-2024-2640

The CVE concerns the WordPress Watu Quiz plugin prior to version 3.4.1.2, where certain settings are not properly sanitised/escaped. This could allow stored XSS by users such as authors (if authorised by admins) even when unfiltered_html is disallowed. Publicly documented details across Red Hat, ...

D-Link DIR-2640 Authentication Bypass Vulnerability (CNVD-2024-33408)

The D-Link DIR-2640 is a high power Wi-Fi router from China's AUO D-Link. The D-Link DIR-2640 suffers from an authentication bypass vulnerability that can be exploited by an attacker to bypass authentication...

D-Link DIR-2640 Authentication Bypass Vulnerability

The D-Link DIR-2640 is a high power Wi-Fi router manufactured by the Chinese company AUO D-Link, which is mainly used to provide wireless network connectivity. The D-Link DIR-2640 suffers from an authentication bypass vulnerability that stems from the HNAP PrivateLogin authentication bypass...

Remote Code Execution Vulnerability in D-Link DIR-2640

The D-Link DIR-2640 is a high power Wi-Fi router from China's AUO D-Link. The D-Link DIR-2640 suffers from a remote code execution vulnerability that can be exploited by an attacker to execute arbitrary code...

WordPress Watu Quiz Plugin < 3.4.1.2 is vulnerable to Cross Site Scripting (XSS)

Software Watu Quiz Type Plugin Vulnerable versions 3.4.1.2 Fixed in 3.4.1.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-2640 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 617bfa58ba67 Credits Eunho Kim Required privilege...

D-Link DIR-2640 Stack Buffer Overflow Remote Code Execution Vulnerability

The D-Link DIR-2640 is a high power Wi-Fi router manufactured by the Chinese company AUO D-Link, which is mainly used to provide wireless network connectivity. The D-Link DIR-2640 suffers from a stack buffer overflow remote code execution vulnerability that stems from a stack-based buffer overflo...

D-Link DIR-2640 Command Injection Vulnerability

The D-Link DIR-2640 is a high-power Wi-Fi router from Taiwan, China's AUO D-Link that supports the AC2600 WiFi standard with dual-band 2.4GHz and 5GHz network transmission. The D-Link DIR-2640 suffers from a command injection vulnerability, which stems from the DestNetwork command injection remot...

D-Link DIR-2640 Command Injection Remote Code Execution Vulnerability

The D-Link DIR-2640 is a high power Wi-Fi router manufactured by the Chinese company AUO D-Link, which is mainly used to provide wireless network connectivity. The D-Link DIR-2640 suffers from a command injection remote code execution vulnerability that stems from the PrefixLen command injection...

The vulnerability of the prog.cgi file in D-Link DIR-2640 router microprogramming software allows a hacker to execute arbitrary code in the root context.

The vulnerability of the prog.cgi file in D-Link DIR-2640 router microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code in the root context by sending specially crafted HNAP requests to TCP ports 80 an...

D-Link DIR-2640 Buffer Overflow Vulnerability

The D-Link DIR-2640 is a high power Wi-Fi router from China's AUO D-Link. The D-Link DIR-2640 suffers from a buffer overflow vulnerability that originates from a program's failure to properly validate the length and size of input data, which can be exploited by an attacker to execute arbitrary co...

(0Day) D-Link DIR-2640 HTTP Referer Stack-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2640-US routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within prog.cgi, which handles HNAP requests made to the lighttpd webserve...

CVE-2024-5293

D-Link DIR-2640 HTTP Referer Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2640-US routers. Authentication is not required to exploit this vulnerability. The...

CVE-2024-5293

CVE-2024-5293 affects the D-Link DIR-2640-US router. The vulnerability resides in the prog.cgi handling HNAP requests to the lighttpd webserver (ports 80/443), where the length of user-supplied data is not properly validated before copying to a fixed-size stack-based buffer. This causes a stack-b...

CVE-2024-5293 D-Link DIR-2640 HTTP Referer Stack-Based Buffer Overflow Remote Code Execution Vulnerability

D-Link DIR-2640 HTTP Referer Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2640-US routers. Authentication is not required to exploit this vulnerability. The...

D-Link DIR-2640 安全漏洞

The D-Link DIR-2640 is a high power Wi-Fi router from China's AUO D-Link. The D-Link DIR-2640 suffers from a buffer overflow vulnerability that originates from a program's failure to properly validate the length and size of input data, which can be exploited by an attacker to execute arbitrary co...

Exploit for Incorrect Authorization in Canonical Ubuntu_Linux

Ubuntu Privilege Escalation: CVE-2023-2640 and CVE-2023-32629...

RHEL 5 : pidgin (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - pidgin: Out-of-bounds write in purplemarkupunescapeentity triggered by invalid XML CVE-2017-2640 - A deni...

CVE-2023-32150

D-Link DIR-2640 PrefixLen Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2640 routers. Although authentication is required to exploit this vulnerability, the existing...