Tenda AC9 Buffer Overflow Vulnerability (CNVD-2022-26242)

Tenda AC9 is a wireless router from Tenda, China.Tenda AC9 version 15.03.2.21 is vulnerable to a buffer overflow vulnerability, which stems from the list parameter in the SetVirtualServerCfg function that does not properly validate data boundaries when executing operations on memory, and can be...

Tenda AC6 openSchedWifi Function Stack Overflow Vulnerability

The Tenda AC6 is a wireless router. A stack overflow vulnerability exists in the Tenda AC6 openSchedWifi function, which can be exploited by an attacker to cause arbitrary command execution...

Tenda AC9 saveparentcontrolinfo function buffer overflow vulnerability

Tenda AC9 is a wireless router from Tenda, a Chinese company. A buffer overflow vulnerability exists in the Tenda AC9 saveparentcontrolinfo function, which can be exploited by an attacker to cause arbitrary command execution...

Tenda AC6 SetIpMacBind Function Stack Overflow Vulnerability

The Tenda AC6 is a wireless router from the Chinese company Tenda. A stack overflow vulnerability exists in the Tenda AC6 SetIpMacBind function, which can be exploited by an attacker to cause arbitrary command execution...

Tenda AC9 Buffer Overflow Vulnerability (CNVD-2022-26247)

Tenda AC9 is a wireless router from Tenda, China.Tenda AC9 version 15.03.2.21 is vulnerable to a buffer overflow vulnerability, which stems from the firewallCfg parameter in the SetFirewallCfg function that does not properly validate data boundaries when performing operations on memory, and can b...

Tenda AC6 saveParentControlInfo function stack overflow vulnerability

The Tenda AC6 is a wireless router from the Chinese company Tenda. A stack overflow vulnerability exists in the Tenda AC6 saveParentControlInfo function, which can be exploited by an attacker to potentially cause arbitrary command execution...

Tenda AC9 openSchedWifi Function Stack Overflow Vulnerability

Tenda AC9 is a wireless router from Tenda, a Chinese company. A stack overflow vulnerability exists in the Tenda AC9 openSchedWifi function, which can be exploited by an attacker to cause arbitrary command execution...

CVE-2021-40662

A Cross-Site Request Forgery CSRF in Chamilo LMS 1.11.14 allows attackers to execute arbitrary commands on victim hosts via user interaction with a crafted URL...

DEBIAN-CVE-2021-36100

Specially crafted string in OTRS system configuration can allow the execution of any system command...

UBUNTU-CVE-2021-36100

Specially crafted string in OTRS system configuration can allow the execution of any system command...

NETGEAR DGND3700v2 Multiple Vulnerabilities (PSV-2021-0343) - Active Check

NETGEAR DGN3700v2 devices are prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

The vulnerability of the Kylin data processing platform, related to the lack of measures for cleaning incoming data, allows a perpetrator to execute arbitrary commands.

The vulnerability of the Kylin data processing platform is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows an attacker to execute arbitrary commands...

Chamilo LMS 跨站请求伪造漏洞

Chamilo LMS is an open source online learning and collaboration system from the Chamilo Association. Chamilo LMS version 1.11.14 is vulnerable to cross-site request forgery, which can be exploited by attackers to execute arbitrary commands on the victim host via user interaction with specially...

Arbitrary Command Execution

guake is vulnerable to arbitrary command execution. An attacker can inject and execute malicious commands through the executecommand and executecommandbyuuid functions of dbusiface.py...

Command injection in guake

Guake is a drop-down terminal for GNOME. The package guake before 3.8.5 is vulnerable to Exposed Dangerous Method or Function due to the exposure of executecommand and executecommandbyuuid methods via the d-bus interface, which makes it possible for a malicious user to run an arbitrary command vi...

Tenda AC6 缓冲区错误漏洞

The Tenda AC6 is a wireless router. A stack overflow vulnerability exists in the Tenda AC6 openSchedWifi function, which can be exploited by an attacker to cause arbitrary command execution...

Tenda AC9 操作系统命令注入漏洞

Tenda AC9 is a wireless router from Tenda, China.A command injection vulnerability exists in Tenda AC9 version 15.03.2.21, which stems from the failure of the vlanid parameter in the SetIPTVCfg function to properly filter the special elements of the construction snippet, which can be exploited to...

Tenda AC6 缓冲区错误漏洞

The Tenda AC6 is a wireless router from the Chinese company Tenda. A stack overflow vulnerability exists in the Tenda AC6 setstaticroutecfg function, which can be exploited by an attacker to cause arbitrary command execution...

Tenda AC6 缓冲区错误漏洞

The Tenda AC6 is a wireless router. A buffer overflow vulnerability exists in Tenda AC6 v15.03.05.09multi, which can be exploited by an attacker to cause arbitrary command execution...

Tenda AC6 缓冲区错误漏洞

The Tenda AC6 is a wireless router from the Chinese company Tenda. A stack overflow vulnerability exists in the Tenda AC6 SetVirtualServerCfg function, which can be exploited by an attacker to cause arbitrary command execution...