4440 matches found
TOTOLink T6 Command Injection Vulnerability (CNVD-2022-17105)
TOTOLink T6 is a wireless dual-band router from TotoLink, China.TOTOLink T6 V5.9c.4085B20190428 is vulnerable to command injection, which can be exploited by attackers to execute arbitrary commands via the QUERYSTRING parameter...
WordPress Blocked in China – Check if your site is available in the mainland plugin <= 1.0.2 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress Blocked in China – Check if your site is available in the mainland plugin versions = 1.0.2. Solution Update the WordPress Blocked in China – Check if your site is available in the mainland plugin to the latest available versio...
WordPress China Payments plugin <= 2.3.6 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress China Payments plugin versions = 2.3.6. Solution Update the WordPress China Payments plugin to the latest available version at least 3.0.0...
WordPress China Payments plugin <= 2.3.6 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress China Payments plugin versions = 2.3.6. Solution Update the WordPress China Payments plugin to the latest available version at least 3.0.0...
TOTOLink A3600R Command Injection Vulnerability
TOTOLink A3600R is a wireless router from TotoLink, China.TOTOLink A3600R V4.1.2cu.5182B20201102 is vulnerable to command injection, which can be exploited by attackers to execute arbitrary commands via the QUERYSTRING parameter...
TOTOLink A3100R Command Injection Vulnerability (CNVD-2022-17024)
Totolink A3100R is a series of wireless routers from Totolink China.A command injection vulnerability exists in Totolink A3100R V4.1.2cu.5050B20200504, which stems from the failure to properly filter special characters, commands, etc. in the QUERYSTRING parameter in the Main function. An attacker...
Tp-link TL-WR841N Buffer Overflow Vulnerability (CNVD-2022-17026)
Tp-link TL-WR841N is a wireless router from China Pulian Tp-link.The Tp-link TL-WR841N router is vulnerable to a buffer overflow vulnerability, which stems from a stack overflow found in the dm fillObjByStr function. An attacker could exploit this vulnerability to execute arbitrary code...
TOTOLink A810R Command Injection Vulnerability
TOTOLink A810R is a wireless dual-band router from TotoLink, China.TOTOLink A810R V4.1.2cu.5182B20201026 is vulnerable to command injection, which can be exploited by attackers to execute arbitrary commands via the QUERYSTRING parameter...
Tongda2000 SQL Injection Vulnerability (CNVD-2022-71115)
Tongda2000 is a web-based intelligent office system from Tongda, China. a SQL injection vulnerability exists in Tongda2000 v11.10, which stems from the product's failure to effectively filter the special characters in the DELETESTR parameter data in the changebox.php file. An attacker could use...
Tenda AC9 Stack Overflow Vulnerability
Tenda AC9 is a wireless router from Tenda, China. Tenda AC9 is vulnerable to a stack overflow vulnerability, which stems from the product's NPTR parameter failing to properly handle memory bounds. An attacker could exploit this vulnerability to cause a buffer overflow...
TOTOLink A860R Command Injection Vulnerability
TOTOLink A860R is a wireless router from TotoLink, China.TOTOLink A860R V4.1.2cu.5182B20201027 is vulnerable to command injection, which can be exploited by attackers to execute arbitrary commands via the QUERYSTRING parameter...
New "SockDetour" Fileless, Socketless Backdoor Targets U.S. Defense Contractors
Cybersecurity researchers have taken the wraps off a previously undocumented and stealthy custom malware called SockDetour that targeted U.S.-based defense contractors with the goal of being used as a secondary implant on compromised Windows hosts. "SockDetour is a backdoor that is designed to...
CVE-2022-25417
Tenda AC9 V15.03.2.21cn was discovered to contain a stack overflow via the function saveparentcontrolinfo...
D-Link Dir-823-Pro Command Injection Vulnerability (CNVD-2022-15178)
D-Link Dir-823-Pro is a dual-band smart wireless router from China Youxun D-Link. D-Link DIR-823-Pro v1.0.2 has a command injection vulnerability, which can be exploited by attackers to execute arbitrary commands via the ApCliKeyStr parameter...
D-Link DI-7200G Command Injection Vulnerability (CNVD-2022-15181)
D-Link Di-7200G is a gigabit enterprise router from China Youxun D-Link. D-Link DI-7200GV2.E1 v21.04.09E1 is vulnerable to command injection, which can be exploited by attackers to execute arbitrary commands via the cmd parameter...
D-Link Di-7200G Command Injection Vulnerability (CNVD-2022-15185)
D-Link Di-7200G is a gigabit enterprise router from China Youxun D-Link. D-Link DI-7200GV2.E1 v21.04.09E1 is vulnerable to command injection, which can be exploited by attackers to execute arbitrary commands via the name parameter...
D-Link Di-7200G Command Injection Vulnerability (CNVD-2022-15183)
D-Link Di-7200G is a gigabit enterprise router from China Youxun D-Link. D-Link DI-7200GV2.E1 v21.04.09E1 is vulnerable to command injection, which can be exploited by attackers to execute arbitrary commands via the urlen parameter...
TOTOLink T6 Command Injection Vulnerability (CNVD-2022-17117)
TOTOLink T6 is a wireless dual-band router from TotoLink, China. recvmeshinfosync function of TOTOLink T6 is vulnerable to command injection. An attacker can exploit this vulnerability to execute arbitrary commands via specially crafted MQTT packets...
D-Link DIR-882 Command Injection Vulnerability
The D-Link DIR-882 is a gigabit enterprise router from China Youxun D-Link. The D-Link DIR-882 suffers from a command injection vulnerability, which can be exploited by attackers to execute arbitrary commands via crafted HNAP1 POST requests...
