45 matches found
CVE-2025-45846
ALFA AIP-W512 v3.2.2.2.3 is affected by CVE-2025-45846 due to an authenticated stack overflow in the torrentsindex parameter of the formBTClinetSetting function. The vulnerability target is the ALFA AIP-W512 router; the root cause is an input handling flaw in the torrentsindex parameter, enabling...
CVE-2025-45847
CVE-2025-45847 : ALFA AIP-W512 v3.2.2.2.3 is reported to contain an authenticated stack overflow in the targetAPMac parameter of the formWsc function. The NVD/NIST entry notes a network-attack surface with authenticated access and no indicated exploitation status in the provided sources, with a C...
CVE-2025-45847
ALFA AIP-W512 v3.2.2.2.3 was discovered to contain an authenticated stack overflow via the targetAPMac parameter in the formWsc function...
PT-2025-20396 · Alfa · Alfa Aip-W512
Name of the Vulnerable Software and Affected Versions: ALFA AIP-W512 version 3.2.2.2.3 Description: The issue is related to an authenticated stack overflow that can be triggered via the targetAPMac parameter in the formWsc function. Recommendations: For ALFA AIP-W512 version 3.2.2.2.3, consider...
CVE-2025-45846
ALFA AIP-W512 v3.2.2.2.3 was discovered to contain an authenticated stack overflow via the torrentsindex parameter in the formBTClinetSetting function...
CVE-2025-1440
The Advanced iFrame plugin for WordPress is vulnerable to unauthorized excessive creation of options on the aipmapurlcallback function in all versions up to, and including, 2024.5 due to insufficient restrictions. This makes it possible for unauthenticated attackers to update the...
CVE-2022-48728
In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Fix AIP early init panic An early failure in hfi1ipoibsetuprn can lead to the following panic: BUG: unable to handle kernel NULL pointer dereference at 00000000000001b0 PGD 0 P4D 0 Oops: 0002 1 SMP NOPTI Workqueue: event...
CVE-2022-48728
In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Fix AIP early init panic An early failure in hfi1ipoibsetuprn can lead to the following panic: BUG: unable to handle kernel NULL pointer dereference at 00000000000001b0 PGD 0 P4D 0 Oops: 0002 1 SMP NOPTI Workqueue: event...
CVE-2022-48728 IB/hfi1: Fix AIP early init panic
In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Fix AIP early init panic An early failure in hfi1ipoibsetuprn can lead to the following panic: BUG: unable to handle kernel NULL pointer dereference at 00000000000001b0 PGD 0 P4D 0 Oops: 0002 1 SMP NOPTI Workqueue: event...
CVE-2022-48728 IB/hfi1: Fix AIP early init panic
In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Fix AIP early init panic An early failure in hfi1ipoibsetuprn can lead to the following panic: BUG: unable to handle kernel NULL pointer dereference at 00000000000001b0 PGD 0 P4D 0 Oops: 0002 1 SMP NOPTI Workqueue: event...
CVE-2022-48728
In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Fix AIP early init panic An early failure in hfi1ipoibsetuprn can lead to the following panic: BUG: unable to handle kernel NULL pointer dereference at 00000000000001b0 PGD 0 P4D 0 Oops: 0002 1 SMP NOPTI Workqueue: event...
Exploit for Authentication Bypass by Spoofing in Apache Apisix
CVE-2022-24112-POC Apache APISIX 2.12.1 Rem...
GSD-2022-1000223 IB/hfi1: Fix AIP early init panic
IB/hfi1: Fix AIP early init panic This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.99 by commit 4a9bd1e6780fc59f81466ec3489d5ad535a37190, i...
Memory Corruption Vulnerability in Electronic Seal System of CommuniLink Wisdom Security Technology Co. Ltd (CNVD-2020-64622)
Ltd. was established in August 2007, the scope of business includes: technology development, technology consulting, technology services, technology transfer, technology training and so on. The electronic seal system of CommuniLink Wisdom Security Technology Co., Ltd. has a memory corruption...
Code injection
Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.0 before 7.08.10, 7.2 before 7.24.45, 8.0 before 8.04.44, 8.1 before 8.12.35, and 8.2 before 8.21.10 allows remote attackers to cause a denial of service device reload via a malformed TCP segment when certain NAT...
CVE-2010-0566
Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.0 before 7.08.10, 7.2 before 7.24.45, 8.0 before 8.04.44, 8.1 before 8.12.35, and 8.2 before 8.21.10 allows remote attackers to cause a denial of service device reload via a malformed TCP segment when certain NAT...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. MoBiC-21: AIP CAPTCHA bypass...
MoBiC-21: AIP CAPTCHA bypass
Здравствуйте 3APA3A! Сообщаю вам о найденной мною Insufficient Anti-automation уязвимости в капче AIP. Это капча плагин Auto-Input Protection AIP для ASP.NET. Данная капча уязвима для Advanced MustLive CAPTCHA bypass method. Insufficient Anti-automation: Эксплоит:...