1374 matches found
PT-2024-6506 · D Link · D-Link Dir-860L
Name of the Vulnerable Software and Affected Versions: D-Link DIR-860L version 2.03 Description: The issue is related to a buffer overflow vulnerability in the gena.cgi file of the D-Link DIR-860L router's firmware. This vulnerability is caused by the lack of length verification for the SID field...
PT-2024-7660 · Tenda · Tenda Fh1206
Name of the Vulnerable Software and Affected Versions: Tenda FH1206 version 02.03.01.35 Description: The issue is caused by a stack overflow in the fromNatlimit function via the page parameter. This allows attackers to cause a Denial of Service DoS via a crafted POST request to the affected API...
The vulnerability of the formModifyPppAuthWhiteMac function in the /goform/ModifyPppAuthWhiteMac file of the Tenda G3 wireless access point software allows a hacker to execute arbitrary code.
The vulnerability of the formModifyPppAuthWhiteMac function in the /goform/ModifyPppAuthWhiteMac file of the Tenda G3 wireless access point software is related to buffer overflow attacks. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending specially crafted POST...
PT-2024-5477 · Totolink · Totolink Ex1200T
Name of the Vulnerable Software and Affected Versions: TOTOLINK EX1200L version 9.3.5u.6146 B20201023 Description: The issue is caused by a buffer overflow on the stack when processing the http host parameter in the loginauth function of the /cgi-bin/cstecgi.cgi file. This can be exploited by a...
PT-2024-5386 · Totolink · Totolink Cp900L
Name of the Vulnerable Software and Affected Versions: TOTOLINK CP900 version 6.3c.566 Description: A critical issue has been found in the Telnet Service component, specifically affecting the setTelnetCfg function. The manipulation of the telnet enabled argument leads to command injection. This...
The vulnerability of the formSetRebootTimer function in the /goform/SetIpMacBind software of the Tenda AX1806 router allows a hacker to execute arbitrary code.
The vulnerability of the formSetRebootTimer function in the /goform/SetIpMacBind microprogramming system for the Tenda AX1806 router is related to a stack-based buffer overflow. Exploiting this vulnerability could allow an attacker to execute arbitrary code by sending a specially crafted POST...
The vulnerability of the hnap_main function in the D-LINK GO-RT-AC750 router software allows a hacker to cause a service failure.
The vulnerability of the hnapmain function in the D-LINK GO-RT-AC750 router’s software lies in the fact that the operation results are stored outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to cause a service failure by sending specially crafted POST reques...
CVE-2024-27489
An issue in the DelFile function of WMCMS v4.4 allows attackers to delete arbitrary files via a crafted POST request...
CVE-2024-27489
An issue in the DelFile function of WMCMS v4.4 allows attackers to delete arbitrary files via a crafted POST request...
The vulnerability of the fromNatlimit function (/goform/Natlimit) in the Tenda F1202 router microprogramming system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the fromNatlimit function /goform/Natlimit in the Tenda F1202 router microprogramming system is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected informatio...
PT-2024-21919 · Wmcms · Wmcms
Name of the Vulnerable Software and Affected Versions: WMCMS version 4.4 Description: An issue in the DelFile function allows attackers to delete arbitrary files via a crafted POST request. Recommendations: For WMCMS version 4.4, consider disabling the DelFile function until a patch is available ...
CVE-2024-27489
An issue in the DelFile function of WMCMS v4.4 allows attackers to delete arbitrary files via a crafted POST request...
The vulnerability of the fromwebExcptypemanFilter function (/goform/webExcptypemanFilter) in the Tenda F1202 router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the fromwebExcptypemanFilter function /goform/webExcptypemanFilter in the Tenda F1202 router software is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected...
CVE-2024-37769
Insecure permissions in 14Finger v1.1 allow attackers to escalate privileges from normal user to Administrator via a crafted POST request...
CVE-2024-37769
Insecure permissions in 14Finger v1.1 allow attackers to escalate privileges from normal user to Administrator via a crafted POST request...
CVE-2024-37769
Insecure permissions in 14Finger v1.1 allow attackers to escalate privileges from normal user to Administrator via a crafted POST request...
CVE-2024-37769
Insecure permissions in 14Finger v1.1 allow attackers to escalate privileges from normal user to Administrator via a crafted POST request...
PT-2024-27740 · 14Finger · 14Finger
Name of the Vulnerable Software and Affected Versions: 14Finger version 1.1 Description: Insecure permissions in the software allow attackers to escalate privileges from a normal user to Administrator via a crafted POST request. This issue can be exploited by sending a manipulated POST request to...
14Finger Security Vulnerability
14Finger is a full-featured Web fingerprint recognition and sharing platform by b1ackc4t individual developers. A security vulnerability exists in version 1.1 of 14Finger, which stems from a vulnerability that allows an attacker to elevate privileges from a regular user to an administrator via a...