TOTOLINK T6 FUN_0041880c Function Stack Overflow Vulnerability

TOTOLINK T6 is a wireless dual-band router from China Gion Electronics TOTOLINK.A stack overflow vulnerability exists in TOTOLINK T6 V4.1.9cu.5179B20201015 version, which stems from the desc parameter in the FUN0041880c function not checking its length for input data. A remote attacker can exploi...

Tenda M3 formSetStoreWeb function buffer overflow vulnerability

Tenda M3 is an access controller from Tenda, China. buffer overflow vulnerability exists in Tenda M3 V1.0.0.12, which stems from the ssidList, storeName, trademark parameters of the formSetStoreWeb function that do not check the length of the input data. An attacker can exploit this vulnerability...

TOTOLINK T6 FUN_00418540 Function Stack Overflow Vulnerability

TOTOLINK T6 is a wireless dual-band router from China Gion Electronics TOTOLINK.A stack overflow vulnerability exists in TOTOLINK T6 V4.1.9cu.5179B20201015 version, which stems from the url parameter in the FUN00418540 function not checking its length for input data. A remote attacker can exploit...

TOTOLINK T6 FUN_0041621c Function Stack Overflow Vulnerability

TOTOLINK T6 is a wireless dual-band router from China Gion Electronics TOTOLINK.A stack overflow vulnerability exists in TOTOLINK T6 V4.1.9cu.5179B20201015, which stems from the cloneMac parameter in the FUN0041621c function that does not check its length for input data. A remote attacker can...

Tenda M3 formSetAccessCodeInfo function stack overflow vulnerability

Tenda M3 is an access controller from Tenda, China. Tenda M3 V1.0.0.12 is vulnerable to a stack overflow vulnerability, which stems from the formSetAccessCodeInfo function info parameter not checking the length of the input data. An attacker could exploit this vulnerability to cause a denial of...

TOTOLINK T6 FUN_00413f80 Function Stack Overflow Vulnerability

TOTOLINK T6 is a wireless dual-band router from China Gion Electronics TOTOLINK. version V4.1.9cu.5179B20201015 of TOTOLINK T6 suffers from a buffer overflow vulnerability, which stems from the password parameter in the FUN00413f80 function not checking its length for input data. A remote attacke...

TOTOLINK T6 FUN_004133c4 function stack overflow vulnerability

TOTOLINK T6 is a wireless dual-band router from China Gion Electronics TOTOLINK.TOTOLINK T6 version V4.1.9cu.5179B20201015 is vulnerable to a stack overflow vulnerability, which originates from the desc, week, sTime, eTime parameters in the FUN004133c4 function for The input data is not checked f...

TOTOLINK T6 FUN_00413be4 function stack overflow vulnerability

TOTOLINK T6 is a wireless dual-band router from China Gion Electronics TOTOLINK.A stack overflow vulnerability exists in TOTOLINK T6 V4.1.9cu.5179B20201015 version, which stems from the desc parameter in the FUN00413be4 function not checking its length for input data. A remote attacker can exploi...

Tenda M3 formSetAPCfg function stack overflow vulnerability

Tenda M3 is an access controller from Tenda, China. Tenda M3 version V1.0.0.12 is vulnerable to a stack overflow vulnerability, which stems from the formSetAPCfg function op parameter not checking its length for input data. An attacker could exploit this vulnerability to cause a denial of service...

Tenda AX1806 fromSetRouteStatic function stack overflow vulnerability

Tenda AX1806 is a WiFi6 wireless router from Tenda, China. version V1.0.0.1 of Tenda AX1806 is vulnerable to a stack overflow vulnerability, which stems from the list parameter of the fromSetRouteStatic function not checking its length for input data. An attacker could exploit this vulnerability ...

TOTOLINK T6 FUN_0041af40 Function Stack Overflow Vulnerability

TOTOLINK T6 is a wireless dual-band router from China Gion Electronics TOTOLINK.A stack overflow vulnerability exists in TOTOLINK T6 V4.1.9cu.5179B20201015 version, which stems from the cloneMac parameter in the FUN0041af40 function not checking its length for input data. An attacker could exploi...

Advantech iView SQL Injection Vulnerability (CNVD-2023-16474)

Advantech Iview is a Simple Network Protocol SNMP based software from Advantech, China, for managing B B SmartWorx devices. information...

Robustel R1510 OS Command Injection Vulnerability

The Robustel R1510 is an industrial VPN router from Robustel China.The Robustel R1510 is vulnerable to an operating system command injection vulnerability, which stems from the fact that specially crafted network packets can be subject to a command injection vulnerability in the...

Robustel R1510 OS Command Injection Vulnerability (CNVD-2022-51423)

The Robustel R1510 is an industrial VPN router from Robustel China.The Robustel R1510 is vulnerable to an operating system command injection vulnerability, which stems from the fact that specially crafted network packets can be vulnerable to a command injection vulnerability in the...

Robustel R1510 Command Execution Vulnerability

Robustel R1510 is an industrial VPN router from Robustel China.The Robustel R1510 is vulnerable to a command execution vulnerability that could be exploited by an attacker to send specially crafted network requests leading to arbitrary command execution...

Robustel R1510 Input Validation Error Vulnerability

Robustel R1510 is an industrial VPN router from Robustel China.Robustel R1510 is vulnerable to an input validation error, which can be exploited by attackers to cause arbitrary file deletion by sending specially crafted network requests...

Huawei MindSpore Community numeric error vulnerability

Huawei MindSpore Community is an open source deep learning framework from Huawei China.A numerical error vulnerability exists in versions prior to Huawei MindSpore Community 1.3.0, which stems from the fact that when performing the initialization operation of the Split operator, if a dimension in...

ThinkPHP deserialization vulnerability

ThinkPHP is a PHP-based, open-source, lightweight web application development framework from China Top Thinking Information Technology. thinkPHP v6.0.12 version has a deserialization vulnerability, which originates from the component vendorleagueflysystem-cached- adaptersrcStorageAbstractCache.ph...

ZuoRAT is a sophisticated malware that mainly targets SOHO routers

Researchers have analysed a campaign leveraging infected SOHO routers to target predominantly North American and European networks of interest. The so-called ZuoRAT campaign, which very likely started in 2020, is so sophisticated that the researchers suspect that there is a state sponsored threat...

U.S. FCC Commissioner Asks Apple and Google to Remove TikTok from App Stores

One of the commissioners of the U.S. Federal Communications Commission FCC has renewed calls asking for Apple and Google to boot the popular video-sharing platform TikTok from their app stores citing "its pattern of surreptitious data practices." "It is clear that TikTok poses an unacceptable...