Debian: Security Advisory (DSA-6144-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2007-6144

creationtimestamp| type| source ---|---|--- 2025-09-09 21:02:31+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lygmjg3thn22...

CVE-2025-6144

A vulnerability has been found in TOTOLINK EX1200T 4.1.2cu.5232B20210713 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /boafrm/formSysCmd of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer...

CVE-2025-6144

creationtimestamp| type| source ---|---|--- 2025-06-16 23:33:10+00:00| published-proof-of-concept| Telegram/gKGto3J9ZB8GJQGsyZa-VAheuPEP8fY1LtXcBqVk55gIY 2025-06-16 23:41:00+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18555 2025-06-17 01:18:41+00:00| seen|...

CVE-2025-6144

A vulnerability has been found in TOTOLINK EX1200T 4.1.2cu.5232B20210713 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /boafrm/formSysCmd of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer...

CVE-2025-6144 TOTOLINK EX1200T HTTP POST Request formSysCmd buffer overflow

A vulnerability has been found in TOTOLINK EX1200T 4.1.2cu.5232B20210713 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /boafrm/formSysCmd of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer...

CVE-2025-6144 TOTOLINK EX1200T HTTP POST Request formSysCmd buffer overflow

A vulnerability has been found in TOTOLINK EX1200T 4.1.2cu.5232B20210713 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /boafrm/formSysCmd of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer...

CVE-2025-6144

CVE-2025-6144 affects TOTOLINK EX1200T, specifically a buffer overflow in the /boafrm/formSysCmd endpoint of the HTTP POST Request Handler when processing the submit-url parameter. The issue is triggered by insufficient validation of the submitted data, allowing remote exploitation. Impact is des...

CVE-2023-6144

Dev blog v1.0 allows to exploit an account takeover through the "user" cookie. With this, an attacker can access any user's session just by knowing their username...

CVE-2023-6144

Dev Blog v1.0 is affected by CVE-2023-6144 via a security bypass allowing account takeover through the user cookie. An attacker can access any user’s session by knowing the username. The root cause is improper session cookie handling in a Node.js/Express + MongoDB setup. Public references describ...

CVE-2023-6144 Dev Blog v1.0 - ATO

Dev blog v1.0 allows to exploit an account takeover through the "user" cookie. With this, an attacker can access any user's session just by knowing their username...

Ubuntu 20.04 LTS / 22.04 LTS : LibreOffice vulnerabilities (USN-6144-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6144-1 advisory. It was discovered that LibreOffice did not properly validate the number of parameters passed to the formula interpreter, leading to an array...

Mageia: Security Advisory (MGASA-2018-0268)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-6144

A remote code execution vulnerability exists in the install functionality of OS4Ed openSIS 7.4. The username variable which is set at line 121 in install/Step5.php allows for injection of PHP code into the Data.php file that it writes. An attacker can send an HTTP request to trigger this...

CVE-2020-6144

A remote code execution vulnerability exists in the install functionality of OS4Ed openSIS 7.4. The username variable which is set at line 121 in install/Step5.php allows for injection of PHP code into the Data.php file that it writes. An attacker can send an HTTP request to trigger this...

CVE-2020-6144

OS4Ed openSIS 7.4 is affected by a remote code execution vulnerability in the installer. Multiple sources (NVD, Red Hat, CNVD, OSV, TALOS) describe that the install sequence writes Data.php during Step5.php, and the username field (line 121) can inject PHP code into that file, enabling arbitrary ...

CVE-2020-6144

A remote code execution vulnerability exists in the install functionality of OS4Ed openSIS 7.4. The username variable which is set at line 121 in install/Step5.php allows for injection of PHP code into the Data.php file that it writes. An attacker can send an HTTP request to trigger this...

OS4Ed openSIS install remote code execution vulnerability

Summary A remote code execution vulnerability exists in the install functionality of OS4Ed openSIS 7.4. A specially crafted HTTP request can lead to remote code execution. An attacker can send an HTTP request to trigger this vulnerability. Tested Versions OS4Ed openSIS 7.4 Product URLs...

CVE-2019-6144

CVE-2019-6144 affects Forcepoint One Endpoint (versions 19.04–19.08); a non-admin user can disable the endpoint and bypass DLP and Web protection. The description indicates loss of protection for those versions; no root-cause or remediation details are provided in the documents.

CVE-2018-6144

Off-by-one error in PDFium in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory write via a crafted PDF file...