CVE-2024-30973

An issue in V-SOL G/EPON ONU HG323AC-B with firmware version V2.0.08-210715 allows an attacker to execute arbtirary code and obtain sensitive information via crafted POST request to /boaform/getASPdata/formFirewall, /boaform/getASPdata/formAcc...

The vulnerability of the sub_42CB94() function (/goform/SetVirtualServerCfg) in the Tenda TX9 Pro router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the sub42CB94 function /goform/SetVirtualServerCfg of the Tenda TX9 Pro router software is related to the operation of writing data beyond the buffer in memory when processing the list parameter. Exploiting this vulnerability allows an attacker to compromise the...

The vulnerability of the formOfflineSet (/goform/setStaOffline) function in the Tenda i21 router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formOfflineSet /goform/setStaOffline function in the Tenda i21 router microprogramming software is related to buffer overflow during the processing of the GO/ssidIndex parameter. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity...

V-SOL G/EPON ONU HG323AC-B 安全漏洞

The V-SOL G/EPON ONU HG323AC-B is a dual-band EasyMesh router from China's CoreTech V-SOL. A security vulnerability exists in the V-SOL G/EPON ONU HG323AC-B version V2.0.08-210715. An attacker can exploit the vulnerability to execute arbitrary code and obtain sensitive information via a specially...

CVE-2024-30973

An issue in V-SOL G/EPON ONU HG323AC-B with firmware version V2.0.08-210715 allows an attacker to execute arbtirary code and obtain sensitive information via crafted POST request to /boaform/getASPdata/formFirewall, /boaform/getASPdata/formAcc...

The vulnerability of the formWifiMacFilterGet function in Tenda i21 router microprogramming software allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formWifiMacFilterGet function in Tenda i21 router microprogramming software is related to buffer overflow in the stack when processing the index parameter. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of...

The vulnerability of the formSetUplinkInfo function (/goform/setUplinkInfo) in the Tenda i21 router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formSetUplinkInfo /goform/setUplinkInfo function in the Tenda i21 router microprogramming software is related to buffer overflow during the processing of the pingHostIp2 parameter. Exploiting this vulnerability allows an attacker to compromise the confidentiality,...

The vulnerability of the formSetAutoPing function in the Tenda i21 router microprogramming software allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formSetAutoPing function in Tenda i21 router microprogramming software is related to buffer overflows in the stack when processing the ping1/ping2 parameter. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and...

Improper Access Control

Postorius is vulnerable to Improper Access Control. The vulnerability is due to insufficient validation which allows any logged-in user to send a crafted POST request to unsubscribe any user from a mailing list as well as verify if the address was subscribed in the first place...

The vulnerability of function R7WebsSecurityHandler (/goform/execCommand) in the Tenda AC8 router’s microprogramming system, which allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of function R7WebsSecurityHandler /goform/execCommand in the Tenda AC8 router’s microprogramming system is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability of the fromAddressNat function (ip/goform/addressNat) in the microprogramming software for Tenda FH1206 allows a attacker to trigger a service failure or execute arbitrary code.

The vulnerability of the fromAddressNat function in the ip/goform/addressNat format in the microprogrammed software for Tenda FH1206 is related to buffer overflows in the stack during the processing of the mitInterface parameter. Exploiting this vulnerability can allow an attacker to cause servic...

The vulnerability of the fromAddressNat function (ip/goform/addressNat) in the microprogrammable routing device Tenda FH1206 allows a attacker to trigger a service failure or execute arbitrary code.

The vulnerability of the fromAddressNat function in the ip/goform/addressNat format in the microprogrammed routing software Tenda FH1206 is related to buffer overflows in the stack during the processing of the page parameter. Exploiting this vulnerability can allow an attacker to cause service...

CVE-2024-31502

CVE-2024-31502 affects Insurance Management System v1.0.0 and earlier. The issue is a permissions problem in the /admin/core/new_staff endpoint that allows a remote attacker to escalate privileges via a crafted POST request. The CVE entry provides a high-severity score (CVSS 3.1: AV:N/AC:L/PR:L/U...

CVE-2024-31502

An issue in Insurance Management System v.1.0.0 and before allows a remote attacker to escalate privileges via a crafted POST request to /admin/core/newstaff...

CVE-2024-22633

Setor Informatica Sistema Inteligente para Laboratorios S.I.L. 388 was discovered to contain a remote code execution RCE vulnerability via the hprinter parameter. This vulnerability is triggered via a crafted POST request...

CVE-2024-22633

Setor Informatica Sistema Inteligente para Laboratorios S.I.L. 388 was discovered to contain a remote code execution RCE vulnerability via the hprinter parameter. This vulnerability is triggered via a crafted POST request...

CVE-2024-22632

Setor Informatica Sistema Inteligente para Laboratorios S.I.L. 388 was discovered to contain a remote code execution RCE vulnerability via the hmsg parameter. This vulnerability is triggered via a crafted POST request...

CVE-2024-22633

CVE-2024-22633 affects Setor Informatica Sistema Inteligente para Laboratórios (S.I.L.) 388, with a remote code execution (RCE) via the hprinter parameter triggered by a crafted POST request. The vulnerability is described as critical (CVSS 3.1: 9.8, NETWORK, no user interaction, LOCAL/NEIGHBORHO...

PuneethReddyHC Event Management 安全漏洞

PuneethReddyHC Event Management is an application by Puneeth Reddy H C Individual Developer. Helps users to register for events organized in university festivals with simple logic and security. A security vulnerability exists in PuneethReddyHC Event Management version 1.0, which stems from the...

The vulnerability of the fromAdvSetMacMtuWan function (/goform/AdvSetMacMtuWan) in the Tenda AC8 router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the fromAdvSetMacMtuWan function /goform/AdvSetMacMtuWan of the Tenda AC8 router software is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information b...