TOTOLink T6 Command Injection Vulnerability (CNVD-2022-17118)

TOTOLink T6 is a wireless dual-band router from TotoLink, China.A command injection vulnerability exists in the meshSlaveDlfw function of TOTOLink T6. An attacker can exploit this vulnerability to execute arbitrary commands via specially crafted MQTT packets...

Tenda G1 and G3 Command Injection Vulnerability (CNVD-2022-16176)

The Tenda G1 and G3 are routers from the Chinese company Tenda. A command injection vulnerability exists in the Tenda G1 and G3, which can be exploited to execute arbitrary commands via the hostName parameter...

ASUS CMAX6000 Information Disclosure Vulnerability

The ASUS Cmax6000 is a 4x4 dual-band Wifi cable modem router from Asus China. A security vulnerability exists in ASUS CMAX6000 v1.02.00, which can be exploited by an attacker to recover encrypted data via a hard-coded key...

Tenda G1 and G3 Command Injection Vulnerability (CNVD-2022-16173)

The Tenda G1 and G3 are routers from the Chinese company Tenda. A command injection vulnerability exists in the Tenda G1 and G3 that can be exploited to execute arbitrary commands via the picname parameter...

Tenda AX3 Buffer Overflow Vulnerability (CNVD-2022-12736)

Tenda Ax3 is an Ax1800 Gigabit Port Dual Band Wifi 6 Wireless Router from Tenda, China. A buffer overflow vulnerability exists in Tenda AX3 v16.03.12.10CN, which can be exploited by an attacker to cause a denial of service DoS via the devName parameter...

sprinfall webcc 路径遍历漏洞

Webcc is a lightweight C++ Http client and server library based on Asio by the individual developer Chunting Gu in China. A security vulnerability exists in sprinfall webcc, which can be exploited to obtain arbitrary files from the server by traversing directories...

Tenda G1 and G3 Buffer Overflow Vulnerability (CNVD-2022-16179)

The Tenda G1 and G3 are routers from the Chinese company Tenda. A buffer overflow vulnerability exists in the Tenda G1 and G3, which can be exploited by an attacker to cause a denial of service via the manualTime parameter...

Reolink Rlc-410W Denial of Service Vulnerability (CNVD-2022-37405)

Reolink Rlc-410W is a Wifi security camera from Reolink China. The Reolink Rlc-410W suffers from a denial of service vulnerability that can be exploited by an attacker to cause a reboot via a compiled HTTP request...

Huawei PCManager Elevation of Privilege Vulnerability

Huawei PCManager is a set of computer management software from Huawei, China. An elevation of privilege vulnerability exists in Huawei PCManager, which originates from the module failing to properly validate external input. An attacker could exploit this vulnerability to escalate system privilege...

china-nuomigao.com Cross Site Scripting vulnerability OBB-2375073

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Tongda2000 SQL Injection Vulnerability

A SQL injection vulnerability exists in Tongda2000, a web-based intelligent office system from China Tongda, which originates from the dname parameter in the product's exportdata.php file that does not securely handle special characters in user input data. An attacker can execute malicious SQL...

Tenda Ax3 Buffer Overflow Vulnerability (CNVD-2022-11183)

Tenda Ax3 is an Ax1800 Gigabit port dual-band Wifi 6 wireless router from Tenda China. Tenda AX3 v16.03.12.10CN is vulnerable to a buffer overflow vulnerability, which can be exploited by attackers to cause a denial of service DoS via the rebootTime parameter...

zzcms authorization problem vulnerability

ZZCMS is a content management system CMS from the Zzcms team in China. zzcms suffers from a security vulnerability that stems from an incorrect access control vulnerability in zzcms 8.2, which could be exploited by attackers to allow malicious users to bypass authentication by changing the userna...

Tenda Router AX12 Buffer Overflow Vulnerability

Tenda Ax12 is a dual-band Gigabit Wifi 6 wireless router from Tenda, China.A security vulnerability exists in the Tenda Router AX12, which stems from a buffer overflow vulnerability in the sub 422CE4 function of the page goform setIPv6Status, which can be exploited by an attacker to cause a denia...

Tenda AC Series Router Buffer Overflow Vulnerability (CNVD-2022-15164)

Tenda AC11 is a router from Tenda, China. wifiBasicCfg module of Tenda AC Series Router AC11V02.03.01.104CN is vulnerable to a buffer overflow vulnerability, which can be exploited by attackers to cause a denial of service via specially crafted overflow data...

Tongda2000 SQL Injection Vulnerability

Tongda2000 is a web-based intelligent office system from China Tongda Tongda.A security vulnerability exists in Tongda2000 v11.10, which allows attackers to attack via the DEVICELIST parameter in /mobileseal/getseal.php. No detailed vulnerability details are available at this time...

ffjpeg Denial of Service Vulnerability (CNVD-2022-12798)

ffjpeg is a JPEG encoder/decoder by the individual developer Kai Chen in China. A rejection vulnerability exists in ffjpeg, which originates when the size information in the metadata of a bmp is out of range, it returns without allocating a memory buffer to pb-pdata and without exiting the progra...

Foxit PDF Reader and Foxit PDF Editor code issues vulnerability

Foxit PDF Reader and Foxit PDF Editor are both products of Foxit China, a PDF reader, and Foxit PDF Editor, a PDF editor. A security vulnerability exists in Foxit PDF Reader and Foxit PDF Editor, which stems from the fact that the products do not effectively handle the search path of DLL files. N...

Foxit PDF Reader and Foxit PDF Editor Stack Buffer Overflow Vulnerability

Foxit PDF Reader and Foxit PDF Editor are both products of Foxit China, a PDF reader and a PDF editor. A security vulnerability exists in Foxit PDF Reader and Foxit PDF Editor due to a failure to effectively restrict memory boundaries when handling XFA. An attacker could exploit this vulnerabilit...

Foxit PDF Reader Resource Management Error Vulnerability (CNVD-2022-22732)

Foxit PDF Reader is a PDF reader from Foxit China.A security vulnerability exists in Foxit PDF Reader, which stems from the lack of verification of the existence of an object before performing operations on it, and can be exploited by attackers to execute arbitrary code in the context of the...