The vulnerability in the “Regional Capital Renovation Program Management” platform, related to deficiencies in the authentication mechanism, allows a violator to select user account names.

The vulnerability in the “Regional Program Capital Renovation Management” platform is related to deficiencies in the authentication mechanism. Exploiting this vulnerability allows a malicious actor to select user accounts using specially crafted POST requests...

CVE-2018-19442

A Buffer Overflow in Network::AuthenticationClient::VerifySignature in /bin/astro in Neato Botvac Connected 2.2.0 allows a remote attacker to execute arbitrary code with root privileges via a crafted POST request to a vendors/neato/robots/robotserial/messages Neato cloud URI on the...

Buffer overflow

A Buffer Overflow in Network::AuthenticationClient::VerifySignature in /bin/astro in Neato Botvac Connected 2.2.0 allows a remote attacker to execute arbitrary code with root privileges via a crafted POST request to a vendors/neato/robots/robotserial/messages Neato cloud URI on the...

CVE-2019-9117

An issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a...

CVE-2019-3921

The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to a stack buffer overflow via crafted HTTP POST request sent by a remote, authenticated attacker to /GponForm/usbForm?script/. An attacker can leverage this vulnerability to potentially execute arbitrary cod...

TRENDnet TV-IP110WN and TV-IP121WN Buffer Overflow Vulnerability

The TRENDnet TV-IP110WN is a wireless Internet surveillance camera.The TRENDnet TV-IP121WN is an Internet camera solution for monitoring... A buffer overflow vulnerability exists in the TRENDnet TV-IP110WN and TV-IP121WN. Allows an attacker to hijack the control flow to any attacker-specified...

TRENDnet TEW-632BRP and TEW-673GRU Buffer Overflow Vulnerabilities

TRENDnet TEW-632BRP is a router.TRENDnet TEW-673GRU is a dual-band green router. A buffer overflow vulnerability exists in the TRENDnet TEW-632BRP and TEW-673GRU. This allows an attacker to hijack control flow by building a POST request payload via authentication to any attacker-specified locatio...

Vox TG790 ADSL Router Cross Site Request Forgery

Title: Vox TG790 ADSL Router - Cross-Site Request Forgery Add Admin Author: Cakes Exploit Date: 2018-08-01 Vendor: Vox Telecom Link: https://www.vox.co.za/ Firmware Version: 6.2.W.1 CVE: N/A Description Due to improper session management low privilege users are able to create administrator accoun...

CVE-2017-3223 Dahua IP camera products using firmware versions prior to V2.400.0000.14.R.20170713 include a version of the Sonia web interface that may be vulnerable to a stack buffer overflow

Dahua IP camera products using firmware versions prior to V2.400.0000.14.R.20170713 include a version of the Sonia web interface that may be vulnerable to a stack buffer overflow. Dahua IP camera products include an application known as Sonia /usr/bin/sonia that provides the web interface and oth...

LTB Self Service Password Information Disclosure Vulnerability

LTB aka LDAP Tool Box Self Service Password is a tool that supports changing and resetting passwords in the LDAP directory through a web interface. A security vulnerability exists in LTB Self Service Password because the program fails to properly handle the return value of ldapbind and does not...

CVE-2017-16251

The CVE-2017-16251 entry concerns Mitel ST’s conferencing component (GA28 and earlier). A vulnerability exists where an authenticated user can upload a malicious script to the Personal Library via a crafted POST request, potentially allowing arbitrary code execution within the application context...

The vulnerability of the web interface of the Sonia (/user/bin/sonia) application, a micro-programmed software for Dahua IP cameras, allows a intruder to trigger a service failure or execute arbitrary code.

The vulnerability of the web interface of the Sonia /user/bin/sonia application, a microprogramming-based IP camera from Dahua, arises due to operations that go beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure operations beyond memory...

CVE-2018-6644

SBLIM Small Footprint CIM Broker SFCB 1.4.9 has a null pointer DoS vulnerability via a crafted POST request to the /cimom URI...

CVE-2018-6644

SBLIM Small Footprint CIM Broker SFCB 1.4.9 has a null pointer DoS vulnerability via a crafted POST request to the /cimom URI...

Null pointer dereference

SBLIM Small Footprint CIM Broker SFCB 1.4.9 has a null pointer DoS vulnerability via a crafted POST request to the /cimom URI...

CVE-2018-6644

CVE-2018-6644 affects SBLIM Small Footprint CIM Broker (SFCB) 1.4.9. A NULL pointer dereference can occur when handling crafted HTTP POST requests to the /cimom URI, causing DoS by crashing a sblim-sfcb child process. Documented risk is a remote, network-exposed issue with potential partial avail...

CVE-2017-9543

register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1 allows remote attackers to reset arbitrary passwords via a crafted POST request to registresult.htm...

Design/Logic Flaw

register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1 allows remote attackers to reset arbitrary passwords via a crafted POST request to registresult.htm...

CVE-2017-9543

The CVE-2017-9543 entry concerns EFS Software Easy Chat Server (versions 2.0–3.1). The underlying issue is in the register.ghp handling, which allows a remote attacker to reset arbitrary user passwords by sending a crafted POST to registresult.htm. Reported impact includes the ability to change p...

CVE-2017-9139

There is a stack-based buffer overflow on some Tenda routers FH1202/F1202/F1200: versions before 1.2.0.20. Crafted POST requests to an unspecified URL result in DoS, interrupting the HTTP service used to login to the web UI of a router for 1 to 2 seconds...