CVE-2022-41482

Tenda AC1200 USAC6V2.0RTLV15.03.06.51multiTDE01 was discovered to contain a buffer overflow in the 0x47c5dc function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

Buffer overflow

Tenda AC1200 USAC6V2.0RTLV15.03.06.51multiTDE01 was discovered to contain a buffer overflow in the 0x47de1c function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

Buffer overflow

Tenda AC1200 USAC6V2.0RTLV15.03.06.51multiTDE01 was discovered to contain a buffer overflow in the 0x4a12cc function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

Tenda AC1900 安全漏洞

Tenda AC1900 is a series of routers from Tenda China. A security vulnerability exists in the Tenda AC1900 AP500USV1180320Beta, which originates from a buffer overflow in the 0x32384 function, and can be exploited by an attacker to cause a denial of service DoS via a crafted request...

CVE-2022-35135

Boodskap IoT Platform v4.4.9-02 allows attackers to escalate privileges via a crafted request sent to /api/user/upsert/...

Tenda AC1200 安全漏洞

Tenda AC1200 is a wireless router from Tenda China. A security vulnerability exists in the Tenda AC1200 USAC6V2.0RTLV15.03.06.51multiTDE01, which originates from a buffer overflow in the 0x47ce00 function, which can be exploited by an attacker to trigger a denial of service DoS via a crafted...

CVE-2022-41484

Tenda AC1900 AP500USV1180320Beta was discovered to contain a buffer overflow in the 0x32384 function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

CVE-2022-41483

Tenda AC1200 USAC6V2.0RTLV15.03.06.51multiTDE01 was discovered to contain a buffer overflow in the 0x4a12cc function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

Tenda AC1200 安全漏洞

The Tenda AC1200 is a wireless router from Tenda China. A security vulnerability exists in the Tenda AC1200 USAC6V2.0RTLV15.03.06.51multiTDE01, which originates from a buffer overflow in the 0x47c5dc function, which can be exploited by an attacker to trigger a denial of service DoS via a crafted...

CVE-2022-35135

Boodskap IoT Platform v4.4.9-02 allows attackers to escalate privileges via a crafted request sent to /api/user/upsert/...

Boodskap IoT Platform 授权问题漏洞

Boodskap IoT Platform is an IoT platform from Boodskap. A security vulnerability exists in Boodskap IoT Platform version v4.4.9-02, which can be exploited by an attacker to elevate privileges via a crafted request sent to the...

Tenda AC1200 安全漏洞

Tenda AC1200 is a wireless router from Tenda China. A security vulnerability exists in the Tenda AC1200 USAC6V2.0RTLV15.03.06.51multiTDE01, which originates from a buffer overflow in the 0x475dc function, and can be exploited by an attacker to cause a denial of service DoS via a crafted request...

Tenda AC1200 安全漏洞

The Tenda AC1200 is a wireless router from Tenda China. A security vulnerability exists in the Tenda AC1200 USAC6V2.0RTLV15.03.06.51multiTDE01, which originates from a buffer overflow in the 0x47de1c function, which can be exploited by an attacker to trigger a denial of service DoS via a crafted...

AliExpress Dropshipping and Fulfilment for WooCommerce < 1.1.1 - Unauthenticated Sensitive Data Exposure

The plugin disclose sensitive information to unauthenticated users via a crafted request...

ruby: Cookie prefix spoofing in CGI::Cookie.parse

A flaw was found in Ruby. RubyGems cgi gem could allow a remote attacker to conduct spoofing attacks caused by the mishandling of security prefixes in cookie names in the CGI::Cookie.parse function. By sending a specially-crafted request, an attacker could perform cookie prefix spoofing attacks...

PT-2022-5374 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the implementation of the Microsoft Security Support Provider Interface SSPI in the Windows operating system, which is associated with access control weaknesses...

PT-2022-22086 · Nocodb · Nocodb

Name of the Vulnerable Software and Affected Versions: NocoDB versions prior to 0.92.0 Description: The issue allows actors to cause a Denial of Service DoS by inserting large characters into the input field New Project on the create field via a crafted HTTP request. Recommendations: For versions...

The vulnerability of the OGNL expression transformation class implementation in the Apache Struts software platform allows a hacker to execute arbitrary code.

The vulnerability of the OGNL expression transformation class implementation in the Apache Struts software framework is related to improper code generation management. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially crafted request...

Google Pixel 安全漏洞

Google Android is a Linux-based open-source operating system from the US company Google. Google Android suffers from a denial-of-service vulnerability, which is caused by a flaw in messaging. By sending a specially crafted request, an attacker can exploit this vulnerability to cause a denial of...

The vulnerability of the Apache Struts software platform, related to improper code generation management, allows attackers to execute arbitrary code.

The vulnerability of the Apache Struts software framework is related to improper code generation during the processing of the includeParams attribute. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially crafted request...