Tenda AC6 saveParentControlInfo function stack overflow vulnerability

The Tenda AC6 is a wireless router from the Chinese company Tenda. A stack overflow vulnerability exists in the Tenda AC6 saveParentControlInfo function, which can be exploited by an attacker to potentially cause arbitrary command execution...

Tenda AC6 PowerSaveSet Function Stack Overflow Vulnerability

The Tenda AC6 is a wireless router from the Chinese company Tenda. A stack overflow vulnerability exists in the Tenda AC6 PowerSaveSet function, which can be exploited by an attacker to cause arbitrary command execution...

Tenda AC6 SetVirtualServerCfg Function Stack Overflow Vulnerability

The Tenda AC6 is a wireless router from the Chinese company Tenda. A stack overflow vulnerability exists in the Tenda AC6 SetVirtualServerCfg function, which can be exploited by an attacker to cause arbitrary command execution...

Tenda AC6 Buffer Overflow Vulnerability

Tenda AC6 is a wireless router from Tenda, China. Tenda AC6 is vulnerable to a buffer overflow vulnerability, which stems from the deviceId parameter in the saveParentControlInfo function that does not properly validate data boundaries when performing operations on memory, and can be exploited by...

CVE-2021-40662

A Cross-Site Request Forgery CSRF in Chamilo LMS 1.11.14 allows attackers to execute arbitrary commands on victim hosts via user interaction with a crafted URL...

DEBIAN-CVE-2021-36100

Specially crafted string in OTRS system configuration can allow the execution of any system command...

UBUNTU-CVE-2021-36100

Specially crafted string in OTRS system configuration can allow the execution of any system command...

CVE-2022-24237: Improper Neutralization of Special Elements used in an OS Command

The snaptPowered2 component of Snapt Aria v12.8 was discovered to contain a command injection vulnerability. This vulnerability allows authenticated attackers to execute arbitrary commands...

Chamilo LMS Cross-Site Request Forgery Vulnerability

Chamilo LMS is an open source online learning and collaboration system from the Chamilo Association. Chamilo LMS version 1.11.14 is vulnerable to cross-site request forgery, which can be exploited by attackers to execute arbitrary commands on the victim host via user interaction with specially...

Kylin data processing platform Command Execution

The vulnerability of the Kylin data processing platform is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows an attacker to execute arbitrary commands...

NETGEAR DGND3700v2 Multiple Vulnerabilities (PSV-2021-0343) - Active Check

NETGEAR DGN3700v2 devices are prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Arbitrary Command Execution

guake is vulnerable to arbitrary command execution. An attacker can inject and execute malicious commands through the executecommand and executecommandbyuuid functions of dbusiface.py...

Command injection in guake

Guake is a drop-down terminal for GNOME. The package guake before 3.8.5 is vulnerable to Exposed Dangerous Method or Function due to the exposure of executecommand and executecommandbyuuid methods via the d-bus interface, which makes it possible for a malicious user to run an arbitrary command vi...

Tenda AC9 buffer error vulnerability

Tenda AC9 is a wireless router from Tenda, China.A stack overflow vulnerability exists in the Tenda AC9 saveparentcontrolinfo function, which can be exploited by attackers to cause arbitrary command execution...

Tenda AC9: Operating System Command Injection Vulnerability

Tenda AC9 is a wireless router from Tenda, China.A command injection vulnerability exists in Tenda AC9 version 15.03.2.21, which stems from the failure of the dosystemcmd parameter in the suba3550 function to properly filter the special elements of the construction snippet, which can be exploited...

Tenda AC9 buffer error vulnerability

Tenda AC9 is a wireless router from Tenda, China.Tenda AC9 version 15.03.2.21 is vulnerable to a buffer overflow vulnerability, which stems from the ntpserver parameter in the SetSysTimeCfg function that does not properly validate data boundaries when performing operations on memory, and can be...

Tenda AC6 buffer error vulnerability

The Tenda AC6 is a wireless router from the Chinese company Tenda. A stack overflow vulnerability exists in the Tenda AC6 setstaticroutecfg function, which can be exploited by an attacker to cause arbitrary command execution...

Tenda AC6 buffer error vulnerability

The Tenda AC6 is a wireless router from the Chinese company Tenda. A stack overflow vulnerability exists in the Tenda AC6 WifiBasicSet function, which can be exploited by an attacker to cause arbitrary command execution...

Tenda AC6 buffer error vulnerability

The Tenda AC6 is a wireless router. A stack overflow vulnerability exists in the Tenda AC6 openSchedWifi function, which can be exploited by an attacker to cause arbitrary command execution...

Tenda AC6 buffer error vulnerability

The Tenda AC6 is a wireless router from the Chinese company Tenda. A stack overflow vulnerability exists in the Tenda AC6 saveParentControlInfo function, which can be exploited by an attacker to cause arbitrary command execution...