Multiple TotoLink Product Command Injection Vulnerabilities (CNVD-2022-47972)

Totolink A830R/A3100R/A950RG/A800R/A3000RU/A810R products are one of the routers from Totolink China. Several TotoLink products have a command injection vulnerability, which can be exploited by attackers to execute arbitrary commands via crafted requests...

Multiple TotoLink Product Command Injection Vulnerabilities (CNVD-2022-47975)

Totolink A830R/A3100R/A950RG/A800R/A3000RU/A810R and other products are one of the routers from Totolink China. A command injection vulnerability exists in several TotoLink products. The vulnerability stems from the failure of the deviceName parameter and deviceMac parameter in the...

ARRIS TR3300 OS Command Injection Vulnerability

ARRIS TR3300 is an 802.11ac Wi-Fi router from ARRIS, Inc. ARRIS TR3300 v1.0.13 is vulnerable to an operating system command injection vulnerability that could be exploited by attackers to execute arbitrary commands via crafted requests...

CVE-2022-26991

Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a command injection vulnerability in the ntp function via the TimeZone parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

多款TOTOLINK产品操作系统命令注入漏洞

Totolink A830R/A3100R/A950RG/A800R/A3000RU/A810R products are one of the routers from Totolink China. Several TotoLink products have a command injection vulnerability, which can be exploited by attackers to execute arbitrary commands via crafted requests...

多款TotoLink产品操作系统命令注入漏洞

Totolink A830R/A3100R/A950RG/A800R/A3000RU/A810R products are one of the routers from Totolink China. Several TotoLink products have a command injection vulnerability, which can be exploited by attackers to execute arbitrary commands via crafted requests...

ARRIS TR3300 命令注入漏洞

ARRIS TR3300 is an 802.11ac Wi-Fi router from ARRIS, Inc. ARRIS TR3300 v1.0.13 is vulnerable to an operating system command injection vulnerability that could be exploited by attackers to execute arbitrary commands via crafted requests...

The vulnerability of the fgfmsd software from Fortinet’s FortiManager device management system and FortiAnalyzer network monitoring system allows a malicious individual to execute arbitrary code with root privileges.

The vulnerability of the fgfmsd software in the Fortinet FortiManager device management system and the FortiAnalyzer network monitoring system is related to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with root privileges b...

WordPress Link Library plugin arbitrary link deletion vulnerability

WordPress plugin is a WordPress application plugin. WordPress Link Library plugin versions prior to 7.2.8 have an arbitrary link removal vulnerability, which stems from unauthorized removal of links, and can be exploited by attackers to remove arbitrary links via carefully crafted requests...

CVE-2022-24281

A vulnerability has been identified in SINEC NMS All versions V1.0.3, SINEMA Server V14 All versions. A privileged authenticated attacker could execute arbitrary commands in the local database by sending specially crafted requests to the webserver of the affected application...

CVE-2022-24281

A vulnerability has been identified in SINEC NMS All versions V1.0.3, SINEMA Server V14 All versions. A privileged authenticated attacker could execute arbitrary commands in the local database by sending specially crafted requests to the webserver of the affected application...

Cisco TelePresence VCS < 14.0.5 Multiple Vulnerabilities (cisco-sa-expressway-filewrite-87Q5YRk)

According to its self-reported version, the instance of Cisco TelePresence VCS installed on the remote host contains vulnerabilities in its cluster database API and its web-based management interface due to insufficient input validation of user-supplied command arguments. An authenticated, remote...

Cisco Identity Services Engine RADIUS Service DoS (cisco-sa-ise-dos-JLh9TxBp)

According to its self-reported version, a denial of service DoS vulnerability exists in Cisco Identity Services Engine due to improper handling of RADIUS requests. An unauthenticated, remote attacker can exploit this issue, by sending crafted RADIUS requests, to cause the RADIUS service to stop...

D-Link Dir-X1860 安全漏洞

The D-Link Dir-X1860 is a dual-band router from D-Link, a Chinese company. The security vulnerability in the D-Link DIR-X1860 version 1.03 RevA1, which stems from the lack of effective information protection and filtering of information disclosure in the web interface, could be exploited by a...

The vulnerability of the copyString function in the Expat library, related to integer overflow, allows an attacker to cause a service failure.

The vulnerability of the copyString function in the Expat library is related to integer overflow. Exploiting this vulnerability could allow a malicious actor to cause a service failure by sending a specially crafted request...

CVE-2021-32586

An improper input validation vulnerability in the web server CGI facilities of FortiMail before 7.0.1 may allow an unauthenticated attacker to alter the environment of the underlying script interpreter via specifically crafted HTTP requests...

CVE-2022-25062

TP-LINK TL-WR840NESV6.20180709 was discovered to contain an integer overflow via the function dmcheckString. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted HTTP request...

ruby: Cookie prefix spoofing in CGI::Cookie.parse

A flaw was found in Ruby. RubyGems cgi gem could allow a remote attacker to conduct spoofing attacks caused by the mishandling of security prefixes in cookie names in the CGI::Cookie.parse function. By sending a specially-crafted request, an attacker could perform cookie prefix spoofing attacks...

Hashicorp Nomad 路径遍历漏洞

Hashicorp Nomad is a distributed, data center-aware cluster and application scheduler from Hashicorp, USA. The program supports the deployment of microservices, batch, containerized and non-containerized applications. HashiCorp Nomad suffers from a path traversal vulnerability that stems from an...

PT-2022-15502 · Sap · Sap Netweaver Application Server Java

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Application Server Java versions 7.22 through 7.53 Description: An unauthenticated attacker could submit a crafted HTTP server request which triggers improper shared memory buffer handling, allowing the malicious payload to be...