CVE-2019-11368

Stored XSS was discovered in AUO Solar Data Recorder before 1.3.0 via the protect/config.htm addr parameter...

CVE-2019-11368

AU Optronics Solar Data Recorder prior to version 1.3.0 is affected by CVE-2019-11368: a stored XSS vulnerability in the web interface reachable via the protect/config.htm addr parameter. The issue permits script execution within the context of an authenticated user (stored in the application's b...

CVE-2019-11368: Improper Neutralization of Input During Web Page Generation

Stored XSS was discovered in AUO Solar Data Recorder before 1.3.0 via the protect/config.htm addr parameter...

PT-2019-12261

Name of the Vulnerable Software and Affected Versions AUO Solar Data Recorder versions prior to 1.3.0 Description A Stored XSS issue was found in the software. The issue is related to the addr parameter in the "protect/config.htm" endpoint. Recommendations For versions prior to 1.3.0, update to...

PT-2019-12824

Name of the Vulnerable Software and Affected Versions Tiny C Compiler aka TinyCC or TCC version 0.9.27 Description An issue in Tiny C Compiler allows a one-byte out-of-bounds write in the gsym addr function due to mishandling of section switches by tccasm.c when compiling a crafted source file...

PT-2018-14234

Name of the Vulnerable Software and Affected Versions DASAN H660GW devices affected versions not specified Description The issue concerns the Port Forwarding functionality, which allows remote attackers to execute arbitrary code. This is achieved by using shell metacharacters in the Addr paramete...

PT-2018-1333

Name of the Vulnerable Software and Affected Versions D-Link DIR-629-B1 affected versions not specified Description The issue is caused by a buffer overflow in the weblogin log function. This can be exploited by a remote attacker using a specially crafted request to the session.cgi?ACTION=logout...

PT-2018-4011 · D Link · D-Link Dsl-3782

Name of the Vulnerable Software and Affected Versions: D-Link DSL-3782 version EU v. 1.01 Description: The issue concerns a buffer overflow in the diagnostics functionality of the affected device. This allows authenticated remote attackers to execute arbitrary code by sending a long Addr value to...

NIS bootparamd Domain Name Disclosure

This module discloses the NIS domain name from bootparamd. You must know a client address from the target's bootparams file. Hint: try hosts within the same network range as the target. This module requires Metasploit: https://metasploit.com/download Current source:...

PT-2017-13745

Name of the Vulnerable Software and Affected Versions Android for MSM versions affected versions not specified Firefox OS for MSM versions affected versions not specified QRD Android versions affected versions not specified Description A buffer overrun issue occurs when processing the QCA NL80211...

PT-2017-13091

Name of the Vulnerable Software and Affected Versions TP-Link WR940N WiFi routers with hardware version 4 Description The issue concerns multiple stack-based buffer overflows that allow remote authenticated users to execute arbitrary code. This can be achieved via the ping addr parameter to...

ShopsN v2.0 official version of the front-end UserController.class.php file SQL injection vulnerability

ShopsN is a free e-commerce open source system. ShopsN v2.0 official version of the front-end UserController.class.php file SQL injection vulnerability . As the system fails to effectively filter the addrdel function. A remote attacker can exploit the vulnerability to obtain sensitive database...

openSUSE Security Update : the Linux Kernel (openSUSE-2017-734) (Stack Clash)

The openSUSE Leap 42.2 kernel was updated to 4.4.73 to receive security and bugfixes. The following security bugs were fixed : - CVE-2017-1000364: An issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack guard page is not sufficiently large and can be 'jumped'...

SQL Injection Vulnerability in addr_edite Method of ShopSn V2.0 Mall System

ShopsN Mall system is a product of Shanghai Yiso Network Technology Co., Ltd, an enterprise-class commercial standard full-featured allow free commercial use of the open source online store full network system. A SQL injection vulnerability exists in the userid parameter in the addredite method o...

PT-2017-18262

Name of the Vulnerable Software and Affected Versions RIOT versions prior to 2017-04-25 Description The issue is related to a stack-based buffer overflow in the ipv6 addr from str function, which can be triggered by a malformed IPv6 address. This could allow local attackers, and potentially remot...

LG Cross-Site Scripting Vulnerability

LG Looking Glass is a set of web applications written in Perl for connecting to a router or console. LG suffers from a cross-site scripting vulnerability. It allows an attacker to inject arbitrary web script or HTML via the "addr" parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in lg.cgi in Cougar LG 1.9 allows remote attackers to inject arbitrary web script or HTML via the "addr" parameter...

CVE-2014-3926

Cross-site scripting XSS vulnerability in lg.cgi in Cougar LG 1.9 allows remote attackers to inject arbitrary web script or HTML via the "addr" parameter...

CVE-2014-3926

CVE-2014-3926 is an XSS vulnerability in lg.cgi used by Cougar LG 1.9 (LG Looking Glass web apps). The issue arises from accepting the addr parameter without proper sanitization, enabling remote attackers to inject arbitrary web script or HTML. Connected documents (e.g., CNVD-2017-03337) describe...

CVE-2014-3926

Cross-site scripting XSS vulnerability in lg.cgi in Cougar LG 1.9 allows remote attackers to inject arbitrary web script or HTML via the "addr" parameter...