Taocms SQL Injection Vulnerability (CNVD-2022-33838)

Taocms is a micro Cms content management system in China. a SQL injection vulnerability exists in Taocms v3.0.2, which stems from the lack of validation of external input SQL statements in the id parameter in includeModelCategory.php, and can be exploited by attackers to execute illegal SQL...

Tenda AC6 SetIpMacBind Function Stack Overflow Vulnerability

The Tenda AC6 is a wireless router from the Chinese company Tenda. A stack overflow vulnerability exists in the Tenda AC6 SetIpMacBind function, which can be exploited by an attacker to cause arbitrary command execution...

TaoCMS arbitrary file reading vulnerability

Taocms is a micro Cms content management system in China.TaoCMS has an arbitrary file reading vulnerability that can be exploited by attackers via admin.php?action=file & ctrl=download & path=... /... /1.txt to read any file...

TaoCMS arbitrary file download vulnerability

Taocms is a micro Cms Content Management System in China. TaoCMS has an arbitrary file download vulnerability, no details of the vulnerability are provided at this time...

Multiple TotoLink Product Command Injection Vulnerabilities (CNVD-2022-47973)

Totolink A830R/A3100R/A950RG/A800R/A3000RU/A810R products are one of the routers from Totolink China. Several TotoLink products have a command injection vulnerability, which can be exploited by attackers to execute arbitrary commands via crafted requests...

Totolink X5000R Command Injection Vulnerability

Totolink X5000R is a router from China-based Jion Electronics Totolink. a command injection vulnerability exists in Totolink X5000R v9.1.0u.6118B20201102, which stems from a failure of the tz parameter in the setNtpCfg function to properly filter the special element of the constructed command. An...

Multiple TotoLink Product Command Injection Vulnerabilities (CNVD-2022-47974)

Totolink A830R/A3100R/A950RG/A800R/A3000RU/A810R products are one of the routers from Totolink China. A command injection vulnerability exists in several TotoLink products. The vulnerability stems from the failure of the hosttime parameter in the NTPSyncWithHost function to properly filter the...

Suspected DarkHotel APT Activity Update

Suspected DarkHotel APT activity update One Hotel to rule them all, One Hotel to find them, One Hotel to bring them all and in the darkness bind them. By John Fokker · March 17, 2022 This story was also written by Thibault Seret Introduction: Our advanced threat research team has discovered a...

Multiple TotoLink Product Command Injection Vulnerabilities (CNVD-2022-47971)

Totolink A830R/A3100R/A950RG/A800R/A3000RU/A810R products are one of the routers from Totolink China. Several TotoLink products have a command injection vulnerability, which can be exploited by attackers to execute arbitrary commands via crafted requests...

Multiple TotoLink Product Command Injection Vulnerabilities (CNVD-2022-47968)

Totolink A830R/A3100R/A950RG/A800R/A3000RU/A810R products are one of the routers from Totolink China. Several TotoLink products have a command injection vulnerability, which can be exploited by attackers to execute arbitrary commands via crafted requests...

Multiple TotoLink Product Command Injection Vulnerabilities (CNVD-2022-47970)

Totolink A830R/A3100R/A950RG/A800R/A3000RU/A810R products are one of the routers from Totolink China. Several TotoLink products have a command injection vulnerability, which can be exploited by attackers to execute arbitrary commands via crafted requests...

post-loader 跨站脚本漏洞

post-loader is a Webpack loader for China EGOIST individual developers. It is used to write blog posts in Markdown. A cross-site scripting vulnerability exists in post-loader, which stems from the use of the markdown parser in an insecure manner, so that any javascript code in a markdown input fi...

Multiple TotoLink Product Command Injection Vulnerabilities (CNVD-2022-47972)

Totolink A830R/A3100R/A950RG/A800R/A3000RU/A810R products are one of the routers from Totolink China. Several TotoLink products have a command injection vulnerability, which can be exploited by attackers to execute arbitrary commands via crafted requests...

Suspected DarkHotel APT Activity Update

Suspected DarkHotel APT activity update One Hotel to rule them all, One Hotel to find them, One Hotel to bring them all and in the darkness bind them. By John Fokker · March 17, 2022 This story was also written by Thibault Seret Introduction: Our advanced threat research team has discovered a...

Multiple TotoLink Product Command Injection Vulnerabilities (CNVD-2022-47975)

Totolink A830R/A3100R/A950RG/A800R/A3000RU/A810R and other products are one of the routers from Totolink China. A command injection vulnerability exists in several TotoLink products. The vulnerability stems from the failure of the deviceName parameter and deviceMac parameter in the...

Totolink X5000R and TotoLink A7000R Command Injection Vulnerability (CNVD-2022-21814)

Totolink X5000R is a router from Totolink China.TotoLink A7000R is a wireless router from TotoLink China. A security vulnerability exists in the X5000R V9.1.0u.6118B20201102 and A7000R V9.1.0u.6115B20201022 of Totolink routers, which can be exploited by an attacker to execute arbitrary commands v...

Totolink X5000R and TotoLink A7000R Command Injection Vulnerability (CNVD-2022-21813)

Totolink X5000R is a router from Totolink, China.TotoLink A7000R is a wireless router from TotoLink, China.Totolink routers X5000R V9.1.0u.6118B20201102 and A7000R V9.1.0u.6115 B20201022 contain a security vulnerability that could be exploited by attackers to execute arbitrary commands via crafte...

Totolink X5000R and TotoLink A7000R Command Injection Vulnerability

Totolink X5000R is a router from Totolink, China.TotoLink A7000R is a wireless router from TotoLink, China.Totolink routers X5000R V9.1.0u.6118B20201102 and A7000R V9.1.0u.6115 B20201022 contain a security vulnerability that allows attackers to execute arbitrary commands via crafted requests...

Xiaomi Router AX3600 Command Injection Vulnerability (CNVD-2022-47336)

Xiaomi router AX3600 is a router from Xiaomi, China.A command injection vulnerability exists prior to Xiaomi Router AX3600 1.0.67, which stems from a lack of inspection of incoming data and can be exploited by attackers to execute code...

Tenda Ax3 Buffer Overflow Vulnerability (CNVD-2022-21179)

Tenda Ax3 is an Ax1800 Gigabit Port Dual Band Wifi 6 Wireless Router from Tenda, China. A security vulnerability exists in Tenda Ax3 v16.03.12.10CN, which originates from a stack overflow in the function fromSetSysTime. An attacker can exploit this vulnerability to cause a Denial of Service DoS v...