CVE-2022-40846

Summary of CVE-2022-40846 (Tenda AC1200 Router W15Ev2): A stored XSS vulnerability exists in the hostname field of the router’s web interface (firmware version 15.11.0.10(1576)). An attacker can inject JavaScript that is stored and later rendered by the application, enabling arbitrary script exec...

CVE-2021-40846

creationtimestamp| type| source ---|---|--- 2022-03-05 00:27:16+00:00| seen| https://t.me/cibsecurity/38478...

CVE-2021-40846

An issue was discovered in Rhinode Trading Paints through 2.0.36. TP Updater.exe uses cleartext HTTP to check, and request, updates. Thus, attackers can man-in-the-middle a victim to download a malicious binary in place of the real update, with no SSL errors or warnings...

CVE-2021-40846

CVE-2021-40846 affects Rhinode Trading Paints up to version 2.0.36, where TP Updater.exe checks for and requests updates over cleartext HTTP. This enables a man-in-the-middle to substitute a malicious binary for the legitimate update without SSL warnings. The connected sources corroborate the sam...

Google Android Media Framework Code Execution Vulnerability (CNVD-2019-40846)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. Media Framework is one of the multimedia development frameworks. A code execution vulnerability exists in Media framework in Android. An attacker can exploit this vulnerability to execu...