140 matches found
The vulnerability of the built-in boa server (/boafrm/formParentControl) of the TOTOLINK A3002RU router’s microprogramming software allows a intruder to cause a service failure.
The vulnerability of the built-in boa server /boafrm/formParentControl of the TOTOLINK A3002RU router’s microprogramming software is related to the issue of the operation exceeding the buffer in memory when processing the submit-url parameter. Exploiting this vulnerability allows a malicious acto...
The vulnerability of the built-in web server boa (/boafrm/formFilter) of the TOTOLINK N300RH router’s microprogramming software allows a hacker to cause a service failure.
The vulnerability of the built-in web server boa /boafrm/formFilter of the TOTOLINK N300RH router software is related to improper cleaning or release of resources during the processing of the url parameter. Exploiting this vulnerability allows a malicious actor to cause service failures by sendin...
The vulnerability of the built-in web server boa (/boafrm/formPortFw) of the TOTOLINK N300RH router’s microprogramming software allows a hacker to induce a service failure.
The vulnerability of the built-in web server boa /boafrm/formPortFw of the TOTOLINK N300RH router’s microprogramming software is related to the issue of the operation exceeding the buffer in memory when processing the servicetype parameter. Exploiting this vulnerability allows a malicious actor t...
The vulnerability of the built-in web server boa (/boa/formWSC) in TOTOLINK N150RT router’s microprogramming software allows a intruder to execute arbitrary commands.
The vulnerability of the built-in web server boa /boa/formWSC of TOTOLINK N150RT routers is related to the failure to take measures to neutralize special elements used in the operating system’s commands when processing the targetAPSsid parameter. Exploiting this vulnerability allows a remote...
The vulnerability of the built-in web server boa (/boafrm/formWlanRedirect) of the TOTOLINK X15 router’s microprogramming software allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the built-in web server boa /boafrm/formWlanRedirect of the TOTOLINK X15 router’s microprogramming software is related to the copying of buffers without checking the size of input data during the processing of the redirect-url parameter. Exploiting this vulnerability allows a...
The vulnerability in the built-in web server boa (/boafrm/formSaveConfig) of the TOTOLINK X15 router’s microprogramming software allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the built-in web server boa /boafrm/formSaveConfig of the TOTOLINK X15 router’s microprogramming software lies in the copying of buffers without checking the size of input data during the processing of the submit-url parameter. Exploiting this vulnerability allows a malicious...
The vulnerability of the built-in web server boa (/boafrm/formWsc) of TOTOLINK EX1200T router microprogramming software allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the built-in web server boa /boafrm/formWsc of TOTOLINK EX1200T routers is caused by buffer overflow. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information by sending a specially...
The vulnerability in the built-in web server boa (/boafrm/formReflashClientTbl) of TOTOLINK X15 router microprogramming software allows a perpetrator to execute arbitrary commands or cause a service failure.
The vulnerability of the built-in web server software boa /boafrm/formReflashClientTbl of TOTOLINK X15 routers is related to the issue where the operation exceeds the buffer limits in memory when processing the submit-url parameter. Exploiting this vulnerability allows a remote attacker to execut...
The vulnerability of the built-in web server boa (/boafrm/formWsc) of TOTOLINK X15 router’s microprogramming software allows a intruder to execute arbitrary commands or cause a service failure.
The vulnerability of the built-in web server boa /boafrm/formWsc of TOTOLINK X15 routers is related to the issue where the operation’s output goes beyond the buffer in memory when processing the submit-url parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary...
The vulnerability of the built-in web server boa (/boafrm/formIpQoS) of TOTOLINK X15 router’s microprogramming software allows a intruder to execute arbitrary commands or cause a service failure.
The vulnerability of the built-in web server boa /boafrm/formIpQoS of TOTOLINK X15 router software is related to the issue of the operation exceeding the buffer in memory when processing the mac parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands or cau...
The vulnerability in the built-in web server boa (/boafrm/formWirelessTbl) of TOTOLINK X15 router microprogramming software allows a intruder to execute arbitrary commands or cause a service failure.
The vulnerability of the built-in web server boa /boafrm/formWirelessTbl of TOTOLINK X15 router microprogramming software is related to the issue where the operation results are written out of the buffer into memory when processing the submit-url parameter. Exploiting this vulnerability allows a...
The vulnerability of the built-in web server boa (/boafrm/formPortFw) of TOTOLINK X15 router’s microprogramming software allows a perpetrator to execute arbitrary commands or cause service interruptions.
The vulnerability of the built-in web server boa /boafrm/formPortFw of TOTOLINK X15 router microprogramming software is related to the issue of the operation exceeding the buffer in memory when processing the servicetype parameter. Exploiting this vulnerability allows a remote attacker to execute...
CVE-2022-45956
Boa Web Server versions 0.94.13 through 0.94.14 fail to validate the correct security constraint on the HEAD HTTP method allowing everyone to bypass the Basic Authorization mechanism...
Exploit for CVE-2024-35106
NEXTU FLETA Wifi6 Router DOS, Potential RCE POC This document...
CVE-2024-47924
Boa web server – CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2024-47924 Boa web server – CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Boa web server – CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2024-47924 Boa web server – CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Boa web server – CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2024-47924
CVE-2024-47924 affects the Boa web server with a Cross-site Scripting (CWE-79) vulnerability caused by improper neutralization of input during web page generation. The available documents confirm the issue but do not provide affected versions, exploit details, or a published fix. Several sources ...
PT-2024-32900 · Unknown · Boa Web Server
Name of the Vulnerable Software and Affected Versions: Boa web server affected versions not specified Description: The issue is related to improper neutralization of input during web page generation, which can lead to cross-site scripting. This allows attackers to inject malicious scripts into we...