CVE-2018-17064: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered on D-Link DIR-816 A2 1.10 B05 devices. An HTTP request parameter is used in command string construction within the handler function of the /goform/sylogapply route. This could lead to command injection via the syslogIp parameter after /goform/clearlog is invoked...

CVE-2018-13787: Undefined Security Weakness

Certain Supermicro X11S, X10, X9, X8SI, K1SP, C9X299, C7, B1, A2, and A1 products have a misconfigured Descriptor Region, allowing OS programs to modify firmware...

Stack overflow

Stack-based buffer overflow in the websRedirect function in GoAhead on D-Link DIR-816 A2 CN routers with firmware version 1.10B05 allows unauthenticated remote attackers to execute arbitrary code via a request with a long HTTP Host header...

CVE-2018-11013

Affected product: D-Link DIR-816 A2 routers running firmware 1.10B05. The vulnerability is a stack-based buffer overflow in the GoAhead websRedirect function that can be triggered by a long HTTP Host header, allowing unauthenticated remote code execution. Multiple sources (CNVD and NVD entries) c...

CVE-2018-11013

Stack-based buffer overflow in the websRedirect function in GoAhead on D-Link DIR-816 A2 CN routers with firmware version 1.10B05 allows unauthenticated remote attackers to execute arbitrary code via a request with a long HTTP Host header...

CVE-2018-11013: Out-of-bounds Write

Stack-based buffer overflow in the websRedirect function in GoAhead on D-Link DIR-816 A2 CN routers with firmware version 1.10B05 allows unauthenticated remote attackers to execute arbitrary code via a request with a long HTTP Host header...

CVE-2017-7278

Unspecified vulnerability in ASSA ABLOY APTUS Styra Porttelefonkort 4400 before A2 has unknown impact and attack vectors...

CVE-2017-7278

Unspecified vulnerability in ASSA ABLOY APTUS Styra Porttelefonkort 4400 before A2 has unknown impact and attack vectors...

CVE-2017-7278: Undefined Security Weakness

Unspecified vulnerability in ASSA ABLOY APTUS Styra Porttelefonkort 4400 before A2 has unknown impact and attack vectors...

New Relic: Broken Authentication and session management OWASP A2

@honc reported an issue with session expiration. We determined that this report was invalid, and it was self-closed by the researcher. Insufficient Session Expiration vulnerability...

CVE-2014-6433: Improper Control of Generation of Code

gpExec in GoPro HERO 3+ allows remote attackers to execute arbitrary files via a the 1 a1 or 2 a2 parameter in a start action...

CVE-2014-6434: Improper Neutralization of Special Elements used in an OS Command

gpExec in GoPro HERO 3+ allows remote attackers to execute arbitrary commands via a the 1 a1 or 2 a2 parameter in a restart action...

PT-2014-7218

Name of the Vulnerable Software and Affected Versions GoPro HERO 3+ affected versions not specified Description The issue allows remote attackers to execute arbitrary files. This is achieved via the a1 or a2 parameter in a start action. No information is provided about the estimated number of...

PT-2014-7219

Name of the Vulnerable Software and Affected Versions GoPro HERO 3+ affected versions not specified Description The issue allows remote attackers to execute arbitrary commands. This can be achieved via the a1 or a2 parameter in a restart action. Recommendations At the moment, there is no...

Stack overflow

Stack-based buffer overflow in A2 Media Player Pro 2.51 allows remote attackers to execute arbitrary code via a long string in a 1 .m3u or 2 .m3l playlist file...

CVE-2009-4549

Stack-based buffer overflow in A2 Media Player Pro 2.51 allows remote attackers to execute arbitrary code via a long string in a 1 .m3u or 2 .m3l playlist file...

CVE-2009-4549

CVE-2009-4549 : A stack-based buffer overflow in A2 Media Player Pro 2.51 allows remote attackers to execute arbitrary code via a long string in a playlist file (.m3u or .m3l). The vulnerability is triggered during playlist parsing, enabling potential code execution without user interaction. Publ...

CVE-2009-4549: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in A2 Media Player Pro 2.51 allows remote attackers to execute arbitrary code via a long string in a 1 .m3u or 2 .m3l playlist file...

A2 Media Player Pro 2.51 (.m3u /m3l) Universal Local BOF Exploit (SEH)

Exploit for unknown platform in category local exploits ====================================================================== A2 Media Player Pro 2.51 .m3u /m3l Universal Local BOF Exploit SEH ====================================================================== !/usr/bin/perl by hack4love A2...

A2 Media Player Pro 2.51 - .m3u .m3l Universal Local Buffer Overflow (SEH)

A2 Media Player Pro 2.51 - .m3u .m3l Universal Local Buffer Overflow SEH !/usr/bin/perl by hack4love [email protected] A2 Media Player ProV2.51.m3u /m3lUniversal Local Buffer Exploit SEH easy this work sooooooooo good Thanks for WwW.Sec-ArT.CoM/cc team and 3asfh.net team AND special THANKS FO...