TOTOLINK X2000R command injection vulnerability

The TOTOLINK X2000R contains a command injection vulnerability. This vulnerability stems from an OS command injection flaw in the boa formWsc targetAPSsid functionality; specially crafted HTTP requests can lead to arbitrary code execution. Attackers can exploit this by sending authenticated HTTP...

ASUS Armoury Crate permissions and access control issues

ASUS Armoury Crate V3.0.0 version to V6.5.10 and ASUS Armoury Crate SE V2.1.17 version to V2.2.17 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from uncontrolled search path elements. Local users can execute arbitrary code by replacing the...

TOTOLINK X2000R Buffer Error Vulnerability

The TOTOLINK X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327 version contains a buffer overflow vulnerability. This vulnerability stems from the improper handling of the vpnPassword parameter by the boa formFilter function. A stack-based buffer overflow may allow attackers to execute arbitrary co...

TOTOLINK X2000R Buffer Error Vulnerability

The TOTOLINK X2000R has a buffer overflow vulnerability. This vulnerability stems from the static network configuration feature of boa formIpv6Setup, where the staticdns1 parameter involves a stack buffer overflow. Attackers can exploit this vulnerability through authenticated HTTP requests,...

TOTOLINK X2000R buffer error vulnerability

The TOTOLINK X2000R contains a buffer error vulnerability. This vulnerability stems from a stack buffer overflow in the formMapDelDevice function of boa. A specially crafted HTTP request can lead to arbitrary code execution; attackers can exploit this flaw by sending authenticated HTTP requests...

Google Chrome buffer error vulnerability

Versions of Google Chrome prior to 156.0.8078.47 contain a buffer overflow vulnerability, which stems from memory corruption in CSS. This vulnerability could allow remote attackers to execute arbitrary code within a sandbox through a specially crafted HTML page...

Google Chrome Resource Management Error Vulnerability

Google Chrome versions prior to 156.0.8078.47 have a resource management vulnerability. This vulnerability stems from a problem with the Passwords component, where objects are reused after being released. This could allow remote attackers to execute arbitrary code within a sandbox through a...

TOTOLINK X2000R Command Injection Vulnerability

TOTOLINK X2000R has a command injection vulnerability. This vulnerability stems from the OS command injection present in the boa formWizard newPass function. Special HTTP requests may lead to arbitrary code execution...

TOTOLINK X2000R Buffer Error Vulnerability

The TOTOLINK X2000R has a buffer overflow vulnerability. This vulnerability stems from the improper handling of the staticgw parameter by the boa formIpv6Setup static network configuration function. A stack buffer overflow may allow attackers to execute arbitrary code through authenticated HTTP...

Advantech Adam-3600 buffer error vulnerability

The Advantech Adam-3600 versions prior to 2.8.5.0 have a buffer overflow vulnerability. This vulnerability stems from a stack buffer overflow in the log settings function, which could allow authenticated attackers to execute arbitrary code...

TOTOLINK X2000R Command Injection Vulnerability

The TOTOLINK X2000R has a command injection vulnerability. This vulnerability stems from the batchupg function, which allows for OS command injections. Attackers can trigger this vulnerability through specially crafted HTTP requests that have been authenticated, potentially leading to arbitrary...

TOTOLINK X2000R command injection vulnerability

The TOTOLINK X2000R has a command injection vulnerability. This vulnerability stems from OS command injection in the boa formMapDelDevice macstr function. Attackers can exploit it by sending specially crafted HTTP requests that have been authenticated, potentially leading to arbitrary code...

TOTOLINK X2000R Buffer Error Vulnerability

The TOTOLINK X2000R has a buffer overflow vulnerability. This vulnerability stems from a heap buffer overflow in the boa formUpload function. A specially crafted HTTP request can lead to arbitrary code execution...

Google Chrome Resource Management Error Vulnerability

Versions of Google Chrome prior to 156.0.8078.47 have a security vulnerability that stems from the reuse of freed resources in the GPU. This vulnerability could allow remote attackers to execute arbitrary code within a sandbox through a specially crafted HTML page...

Google Chrome buffer error vulnerability

Versions of Google Chrome prior to 156.0.8078.47 have a buffer overflow vulnerability. This vulnerability stems from memory corruption in ANGLE. A remote attacker can execute arbitrary code within a sandbox by using a specially crafted HTML page...

Google Chrome Resource Management Error Vulnerability

Google Chrome versions prior to 156.0.8078.47 have a resource management vulnerability. This vulnerability stems from reuse of resources after release in SiteIsolation. A remote attacker can execute arbitrary code within a sandbox by using a specially crafted HTML page...

Google Chrome Resource Management Error Vulnerability

Versions of Google Chrome prior to 156.0.8078.47 have a resource management vulnerability. This vulnerability stems from the Accessibility component’s ability to reuse resources after they are released, which could allow remote attackers to execute arbitrary code within a sandbox through a...

Apple Safari buffer error vulnerability

Versions of Apple's software prior to Safari 27, Apple's iOS before version 27, Apple's iPadOS before version 27, Apple's macOS Golden Gate before version 27, and Apple's visionOS before version 27 have a buffer error vulnerability. This vulnerability stems from a type confusion issue, and...

TOTOLINK X2000R Buffer Error Vulnerability

The TOTOLINK X2000R has a buffer overflow vulnerability. This vulnerability stems from an issue with the dhcpdns2 parameter in the boa formIpv6Setup dhcpdns function. A authenticated attacker can trigger this vulnerability through a specially crafted HTTP request, potentially leading to arbitrary...

TOTOLINK X2000R Buffer Error Vulnerability

The TOTOLINK X2000R has a buffer overflow vulnerability. This vulnerability stems from a stack buffer overflow in the boa formParentControl url function, which may allow authenticated attackers to execute arbitrary code by constructing specially crafted HTTP requests...