CVE-2024-50633

A Broken Object Level Authorization BOLA vulnerability in Indico through 3.3.5 allows attackers to read information by sending a crafted POST request to the component /api/principals. NOTE: this is disputed by the Supplier because the product intentionally lets all users retrieve certain...

CVE-2025-20088 Insufficient Input Validation on Post Props

Mattermost versions 10.2.x = 10.2.0, 9.11.x = 9.11.5, 10.0.x = 10.0.3, 10.1.x = 10.1.3 fail to properly validate post props which allows a malicious authenticated user to cause a crash via a malicious post...

CVE-2020-9085

There is a NULL pointer dereference vulnerability in some Huawei products. An attacker may send specially crafted POST messages to the affected products. Due to insufficient validation of some parameter in the message, successful exploit may cause some process abnormal. Vulnerability ID:...

CVE-2020-9085

There is a NULL pointer dereference vulnerability in some Huawei products. An attacker may send specially crafted POST messages to the affected products. Due to insufficient validation of some parameter in the message, successful exploit may cause some process abnormal. Vulnerability ID:...

CVE-2020-9085

There is a NULL pointer dereference vulnerability in some Huawei products. An attacker may send specially crafted POST messages to the affected products. Due to insufficient validation of some parameter in the message, successful exploit may cause some process abnormal. Vulnerability ID:...

PT-2024-10861 · Huawei · Huawei Products

Name of the Vulnerable Software and Affected Versions: Huawei products affected versions not specified Description: There is a NULL pointer dereference issue in some Huawei products. An attacker can send specially crafted POST messages to the affected products. Due to insufficient validation of...

CVE-2021-26102

A relative path traversal vulnerability CWE-23 in FortiWAN version 4.5.7 and below, 4.4 all versions may allow a remote non-authenticated attacker to delete files on the system by sending a crafted POST request. In particular, deleting specific configuration files will reset the Admin password to...

The vulnerability of the formSetDebugCfg function in the wireless access point software Tenda G3 allows a intruder to execute arbitrary commands.

The vulnerability of the formSetDebugCfg function in the Tenda G3 wireless access point software is related to incorrect filtering of values for parameters enable, level, and module. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands by sending a specially crafte...

Security update for python-aiohttp

This update for python-aiohttp fixes the following issues: CVE-2024-30251: Fixed infinite loop on specially crafted POST request bsc1223726. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you ca...

Security update for python-aiohttp

This update for python-aiohttp fixes the following issues: CVE-2024-30251: Fixed infinite loop on specially crafted POST request bsc1223726. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you ca...

BIT-MATTERMOST-2024-2447

Mattermost versions 8.1.x before 8.1.11, 9.3.x before 9.3.3, 9.4.x before 9.4.4, and 9.5.x before 9.5.2 fail to authenticate the source of certain types of post actions, allowing an authenticated attacker to create posts as other users via a crafted post action...

The vulnerability in the l2tp.cgi script of NETGEAR R7000P router software allows a hacker to induce a service failure.

The vulnerability of the l2tp.cgi script in the NETGEAR R7000P router’s microprogramming system is related to buffer overflows in the stack when processing the l2tpusernetmask parameter. Exploiting this vulnerability allows a malicious actor to cause service failure by sending a specially crafted...

The vulnerability in the genie_bpa.cgi script of Netgear router microprogramming systems such as R8500, XR300, R7000P, and R6400 v2 allows a hacker to cause a service failure.

The vulnerability in the geniebpa.cgi script of Netgear router microprogramming devices such as R8500, XR300, R7000P, and R6400 v2 lies in the copying of buffers without checking the size of the input data during the processing of the bpaserver parameter. Exploiting this vulnerability allows a...

The vulnerability in the openvpn.cgi script of Netgear R8500’s integrated routing software allows a hacker to induce a service failure.

The vulnerability in the openvpn.cgi microprogramming system of Netgear R8500 relates to the copying of buffers without checking the size of the input data during the processing of parameters openvpnserviceport and openvpnserviceporttun. Exploiting this vulnerability allows a malicious actor to...

eSoft Planner 安全漏洞

eSoft Planner is a scheduling software for managing sports facilities from eSoft Planner, Inc. A security vulnerability exists in eSoft Planner version 3.24.08271-USA that originates from an attacker being able to trigger a denial of service via a crafted POST request...

The vulnerability in the pptp.cgi script of the microprogramming software for Netgear routers such as R8500, XR300, R7000P, and R6400 v2 allows a hacker to induce a service failure.

The vulnerability in the pptp.cgi subroutine of Netgear’s router software models R8500, XR300, R7000P, and R6400 v2 lies in the copying of buffers without checking the size of the input data during the processing of the pptpuserip parameter. Exploiting this vulnerability allows a malicious actor ...

The vulnerability in the ipv6_fix.cgi script of NETGEAR R8500 router software allows a hacker to trigger a service failure.

The vulnerability in the ipv6fix.cgi script of NETGEAR R8500 router software is related to buffer overflows in the stack when processing the ipv6pridns parameter. Exploiting this vulnerability allows a remote attacker to trigger a Denial-of-Service attack by sending a specially crafted POST reque...

The vulnerability in the wireless.cgi script of NETGEAR R7000P router software allows a hacker to induce a service failure.

The vulnerability in the wireless.cg script of NETGEAR R7000P router software is related to buffer overflow when processing the RADIUSAddr%dwla parameter. Exploiting this vulnerability allows a malicious actor to trigger a Denial-of-Service attack by sending a specially crafted POST request...

The vulnerability in the ipv6_fix.cgi script of Netgear R8500 router software allows a attacker to trigger a service failure.

The vulnerability in the ipv6fix.cgi microprogram of Netgear R8500 routers stems from the copying of input buffers without checking their sizes during the processing of parameters ipv6wanipaddr, ipv6lanipaddr, ipv6wanlength, and ipv6lanlength. Exploiting this vulnerability allows a malicious acto...

The vulnerability in the usbISP_detail_edit.cgi script of Netgear R7000P router software allows a hacker to induce a service failure.

The vulnerability in the usbISPdetailedit.cgi script of Netgear R7000P router microprogramming software relates to the copying of buffers without checking the size of input data during the processing of the apn parameter. Exploiting this vulnerability allows a malicious actor to cause service...