Lucene search
+L

38 matches found

attackerkb
attackerkb
•added 2026/07/04 7:15 p.m.•20 views

CVE-2026-14648

A security vulnerability has been detected in code-projects Online Voting System up to 0.x/1.0. This issue affects the function testinput of the file /authentication.php of the component Login. Such manipulation of the argument adminUserName/adminPassword leads to sql injection. It is possible to...

7.5CVSS6.8AI score0.00561EPSS
SaveExploits0References6Affected Software1
RedhatCVE
RedhatCVE
•added 2026/05/12 8:20 a.m.•20 views

CVE-2026-8260

A vulnerability was found in D-Link DCS-935L up to 1.10.01. The impacted element is the function SetDeviceSettings of the file /web/cgi-bin/hnap/hnapservice of the component HNAP Service. The manipulation of the argument AdminPassword results in buffer overflow. The attack can be executed remotel...

9CVSS7.6AI score0.01158EPSS
SaveExploits2References1
CNVD
CNVD
•added 2026/05/12 12:00 a.m.•16 views

D-Link DCS-935L buffer overflow vulnerability

The D-Link DCS-935L is a network camera designed for home and small office environments. By default, it provides device configuration options through a CGI interface. The D-Link DCS-935L has a buffer overflow vulnerability. This vulnerability stems from the SetDeviceSettings function in the HNAP...

9CVSS7.6AI score0.01158EPSS
SaveExploits2
NVD
NVD
•added 2026/05/11 2:16 a.m.•49 views

CVE-2026-8260

A vulnerability was found in D-Link DCS-935L up to 1.10.01. The impacted element is the function SetDeviceSettings of the file /web/cgi-bin/hnap/hnapservice of the component HNAP Service. The manipulation of the argument AdminPassword results in buffer overflow. The attack can be executed remotel...

9CVSS0.01158EPSS
SaveExploits2References5
CNNVD
CNNVD
•added 2026/05/11 12:00 a.m.•23 views

D-Link DCS-935L 缓冲区错误漏洞

The D-Link DCS-935L is a router produced by D-Link Corporation. Versions of the D-Link DCS-935L prior to 1.10.01 contain a buffer error vulnerability. This vulnerability stems from the operation of the AdminPassword parameter in the SetDeviceSettings function within the HNAP Service component,...

9CVSS7.7AI score0.01158EPSS
SaveExploits2References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2015-5951

Malware in sbrugna...

7.5CVSS6.1AI score0.04817EPSS
SaveExploits3References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2002-0262

Malware in sbrugna...

4.6CVSS6.4AI score0.00794EPSS
SaveExploits2References5
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2023-49152

Malicious code in bioql PyPI...

7.5CVSS7.6AI score0.00865EPSS
SaveExploits1References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/07/11 1:26 a.m.•10 views

Malicious code in sap-adminpassword (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9c43667a9522ba3b3de49573c1502b4dd542f26776a78833fd403c7cab6688c1 The OpenSSF Package Analysis project identified 'sap-adminpassword' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

7.1AI score
SaveExploits0
OSV
OSV
•added 2024/07/11 1:26 a.m.•15 views

MAL-2024-7513 Malicious code in sap-adminpassword (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9c43667a9522ba3b3de49573c1502b4dd542f26776a78833fd403c7cab6688c1 The OpenSSF Package Analysis project identified 'sap-adminpassword' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

7.3AI score
SaveExploits0
NVD
NVD
•added 2023/10/05 4:15 p.m.•31 views

CVE-2023-44829

D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the AdminPassword parameter in the SetDeviceSettings function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

7.5CVSS7.6AI score0.00865EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/05 12:00 a.m.•2 views

CVE-2023-44829: Buffer Copy without Checking Size of Input

D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the AdminPassword parameter in the SetDeviceSettings function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

7.5CVSS7.4AI score0.00865EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2023/10/05 12:00 a.m.•41 views

CVE-2023-44829

D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the AdminPassword parameter in the SetDeviceSettings function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

7.8AI score0.00865EPSS
SaveExploits1References2
CNVD
CNVD
•added 2018/11/27 12:00 a.m.•22 views

Buffalo TS5600D1206 Command Injection Vulnerability

The Buffalo TS5600D1206 is a network storage device from the Buffalo Group of Japan. A command injection vulnerability exists in the network.setauthsettings method in the Buffalo TS5600D1206 version 3.70-0.10, which can be exploited to execute system commands with the 'adminUsername' parameter an...

7.2CVSS7.7AI score0.02776EPSS
SaveExploits1References1
NVD
NVD
•added 2018/11/26 11:29 p.m.•29 views

CVE-2018-13320

System Command Injection in network.setauthsettings in Buffalo TS5600D1206 version 3.70-0.10 allows attackers to execute system commands via the adminUsername and adminPassword parameters...

7.2CVSS7.4AI score0.02776EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2018/11/26 12:00 a.m.•1 views

PT-2018-11744

Name of the Vulnerable Software and Affected Versions Buffalo TS5600D1206 version 3.70-0.10 Description The issue allows attackers to execute system commands via the adminUsername and adminPassword parameters in the network.set auth settings function. Recommendations For Buffalo TS5600D1206 versi...

7.2CVSS0.02776EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/11/26 12:00 a.m.•5 views

CVE-2018-13320: Improper Neutralization of Special Elements used in an OS Command

System Command Injection in network.setauthsettings in Buffalo TS5600D1206 version 3.70-0.10 allows attackers to execute system commands via the adminUsername and adminPassword parameters...

7.2CVSS7.5AI score0.02776EPSS
SaveExploits1References2
Packet Storm
Packet Storm
•added 2017/02/07 12:00 a.m.•35 views

Viral Pictures And Video Script 2.0.0 SQL Injection

Exploit Title: Flippy HotViral a Viral Pictures and Video Script v2.0.0 - SQL Injection Google Dork: N/A Date: 06.02.2017 Vendor Homepage: https://www.flippyscripts.com/ Software Buy: https://www.flippyscripts.com/flippy-hotviral-viral-funny-pictures-and-video-script/ Demo:...

0.7AI score
SaveExploits0
exploitpack
exploitpack
•added 2017/02/06 12:00 a.m.•20 views

Ultimate Viral Media Script 1.0 - id SQL Injection

Ultimate Viral Media Script 1.0 - id SQL Injection Exploit Title: Flippy eXtremeViral – Ultimate Viral Media Script v1.0 - SQL Injection Google Dork: N/A Date: 06.02.2017 Vendor Homepage: https://www.flippyscripts.com/ Software Buy:...

1.2AI score
SaveExploits0
NVD
NVD
•added 2015/09/28 2:59 a.m.•35 views

CVE-2015-6008

install.php in Web Reference Database aka refbase through 0.9.6 allows remote attackers to execute arbitrary commands via the adminPassword parameter, a different issue than CVE-2015-7381...

7.5CVSS7.4AI score0.04817EPSS
SaveExploits3References2
Rows per page
Query Builder