Lucene search
+L

1037 matches found

CNNVD
CNNVD
added 2022/05/18 12:00 a.m.10 views

TOTOLINK A3100R 缓冲区错误漏洞

TOTOLINK A3100R is a series of wireless routers from China Gion Electronics TOTOLINK.TOTOLINK A3100R setportforwarrules function has a buffer overflow vulnerabilityThe vulnerability can be exploited by an attacker to cause a denial of service DoS via a crafted POST request...

7.8CVSS6AI score0.01157EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/05/18 12:00 a.m.9 views

TOTOLINK A3100R 缓冲区错误漏洞

TOTOLINK A3100R is a series of wireless routers from China Gion Electronics TOTOLINK.TOTOLINK A3100R V4.1.2cu.5050B20200504 and V4.1.2cu.5247B20211129 is vulnerable to a buffer overflow vulnerability, which can be exploited by attackers to cause a denial of service DoS via a crafted POST request ...

7.8CVSS6AI score0.01157EPSS
SaveExploits1References2
Github Security Blog
Github Security Blog
added 2022/05/13 1:07 a.m.66 views

OpenStack Ironic Exposure of Sensitive Information to an Unauthorized Actor

The ironic-api service in OpenStack Ironic before 4.2.5 Liberty and 5.x before 5.1.2 Mitaka allows remote attackers to obtain sensitive information about a registered node by leveraging knowledge of the MAC address of a network card belonging to that node and sending a crafted POST request to the...

7.5CVSS6.7AI score0.0286EPSS
SaveExploits0References14Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/05/04 12:00 a.m.12 views

The vulnerability of the NanoSSL library in microprogramming software for ERS3500, ERS3600, ERS4900, and ERS5900 switches allows a hacker to execute arbitrary code.

The vulnerability of the NanoSSL library software for ERS3500, ERS3600, ERS4900, and ERS5900 switches is caused by buffer overflow in the dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted POST request...

10CVSS6.4AI score
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/05/04 12:00 a.m.13 views

The vulnerability of the NanoSSL library in microprogramming software for ERS3500, ERS3600, ERS4900, and ERS5900 switches allows a hacker to execute arbitrary code.

The vulnerability of the NanoSSL library software for ERS3500, ERS3600, ERS4900, and ERS5900 switches is caused by buffer overflow in the dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted POST request...

10CVSS6.4AI score
SaveExploits0References2
Packet Storm
Packet Storm
added 2022/04/05 12:00 a.m.271 views

Online Banquet Booking System 1.0 Cross Site Request Forgery

Exploit Title: Online Banquet Booking System - 'change admin credentials' Cross-Site Request Forgery CSRF Date: 04/04/2022 Exploit Author: Saud Alenazi Vendor Homepage: https://phpgurukul.com Software Link: https://phpgurukul.com/online-banquet-booking-system-using-php-and-mysql/ Version: 1.0...

7.4AI score
SaveExploits0
NVD
NVD
added 2022/03/25 9:15 p.m.13 views

CVE-2022-25523

TypesetterCMS v5.1 was discovered to contain a Cross-Site Request Forgery CSRF which is exploited via a crafted POST request...

8.8CVSS0.00553EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/03/25 9:15 p.m.7 views

CVE-2022-25523

TypesetterCMS v5.1 was discovered to contain a Cross-Site Request Forgery CSRF which is exploited via a crafted POST request...

8.8CVSS5.4AI score0.00553EPSS
SaveExploits1References4
Prion
Prion
added 2022/03/25 9:15 p.m.18 views

Cross site request forgery (csrf)

TypesetterCMS v5.1 was discovered to contain a Cross-Site Request Forgery CSRF which is exploited via a crafted POST request...

6.8CVSS8.7AI score0.00553EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2022/03/25 8:40 p.m.19 views

CVE-2022-25523

TypesetterCMS v5.1 was discovered to contain a Cross-Site Request Forgery CSRF which is exploited via a crafted POST request...

7.4AI score
SaveExploits0References4
CNNVD
CNNVD
added 2022/03/25 12:00 a.m.8 views

Typesetter 跨站请求伪造漏洞

Typesetter is a content management system CMS. A security vulnerability exists in TypesetterCMS v5.1, which can be exploited via a crafted POST request...

8.8CVSS7.9AI score0.00553EPSS
SaveExploits1References4
CISA KEV Catalog
CISA KEV Catalog
added 2022/03/25 12:00 a.m.36 views

phpMyAdmin Remote Code Execution Vulnerability

Setup script used to generate configuration can be fooled using a crafted POST request to include arbitrary PHP code in generated configuration file...

9.8CVSS2.1AI score0.96565EPSS
SaveIn wildExploits17
CNVD
CNVD
added 2022/03/14 12:00 a.m.62 views

TP-Link TL-WR886N Buffer Overflow Vulnerability (CNVD-2022-20072)

TP-Link TL-WR886N is a wireless router from China Pulink.A buffer overflow vulnerability exists in TP-Link TL-WR886N 20190826 version 2.3.8, which stems from the /cloudconfig/routerpost/upgradeinfo function when executing operations on memory that do not properly validate data boundaries, an...

10CVSS7.5AI score0.02576EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/03/14 12:00 a.m.37 views

TP-Link TL-WR886N Buffer Overflow Vulnerability (CNVD-2022-20076)

TP-Link TL-WR886N is a wireless router from China Pulink.A buffer overflow vulnerability exists in TP-Link TL-WR886N 20190826 2.3.8, which stems from a failure to properly validate data boundaries when executing operations on memory in the /cloudconfig/routerpost/login function. An authenticated...

10CVSS5.6AI score0.02576EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/03/14 12:00 a.m.70 views

TP-Link TL-WR886N Buffer Overflow Vulnerability (CNVD-2022-20075)

TP-Link TL-WR886N is a wireless router from China Pulink.A buffer overflow vulnerability exists in TP-Link TL-WR886N 20190826 2.3.8, which originates from the /cloudconfig/routerpost/modifyaccountpwd function on memory execution An authenticated attacker could use this vulnerability to execute...

10CVSS6AI score0.02576EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/03/14 12:00 a.m.34 views

TP-Link TL-WR886N Buffer Overflow Vulnerability (CNVD-2022-20077)

A buffer overflow vulnerability exists in TP-LINK TL-WR886N 20190826 version 2.3.8, which originates from the /cloudconfig/routerpost/getresetpwd veirfycode function does not properly validate data boundaries when performing operations on memory, and an authenticated attacker can use this...

10CVSS7.8AI score0.02576EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/03/14 12:00 a.m.58 views

TP-Link TL-WR886N Buffer Overflow Vulnerability (CNVD-2022-20073)

A buffer overflow vulnerability exists in TP-Link TL-WR886N 20190826 version 2.3.8, which originates from the /cloudconfig/routerpost/resetcloudpwd function when executing operations on memory An authenticated attacker could use this vulnerability to execute arbitrary code on the system via a...

10CVSS7.6AI score0.02576EPSS
SaveExploits1References1
NVD
NVD
added 2022/03/10 5:44 p.m.18 views

CVE-2021-44632

A Buffer Overflow vulnerability exists in TP-LINK WR-886N 20190826 2.3.8 in the /cloudconfig/routerpost/upgradeinfo feature, which allows malicious users to execute arbitrary code on the system via a crafted post request...

10CVSS0.02576EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/03/10 5:44 p.m.4 views

CVE-2021-44630

A Buffer Overflow vulnerability exists in TP-LINK WR-886N 20190826 2.3.8 in the /cloudconfig/routerpost/modifyaccountpwd feature, which allows malicious users to execute arbitrary code on the system via a crafted post request...

10CVSS7.7AI score0.02576EPSS
SaveExploits1References2
OSV
OSV
added 2022/03/10 5:44 p.m.8 views

CVE-2021-44631

A Buffer Overflow vulnerability exists in TP-LINK WR-886N 20190826 2.3.8 in the /cloudconfig/routerpost/resetcloudpwd feature, which allows malicous users to execute arbitrary code on the system via a crafted post request...

9.8CVSS7.6AI score0.02576EPSS
SaveExploits1References1
Rows per page
Query Builder