CVE-2022-43970

The CVE-2022-43970 entry refers to a stack-based buffer overflow in the httpd binary of Linksys WRT54GL Wireless-G Broadband Router (firmware ≤ 4.30.18.006). The Start_EPI function handles untrusted input, enabling an authenticated administrator to execute arbitrary commands as root on the underl...

CVE-2022-43970 Buffer overflow in Linksys WRT54GL

A buffer overflow vulnerability exists in Linksys WRT54GL Wireless-G Broadband Router with firmware = 4.30.18.006. A stack-based buffer overflow in the StartEPI function within the httpd binary allows an authenticated attacker with administrator privileges to execute arbitrary commands on the...

CVE-2021-43970

creationtimestamp| type| source ---|---|--- 2022-03-18 06:56:35+00:00| seen| https://t.me/cibsecurity/38652...

CVE-2021-43970

The CVE-2021-43970 entry describes an arbitrary file upload vulnerability in Quicklert for Digium 10.0.0 (1043), exploitable via a crafted .mp3;.jsp filename that begins with audio data bytes in albumimages.jsp. An authenticated, low-privilege attacker can upload such a file and execute remote co...