CVE-2025-56427

A directory traversal vulnerability exists in ComposioHQ version 0.7.20 . The flaw stems from improper handling of file paths within the _download_file_or_dir function, which allows a remote attacker to access and obtain sensitive information from files outside the intended directory. To remediat...

Exploit for CVE-2024-32019

The ndsudo vulnerability allows an attacker to gain root permiss...

The vulnerability of the sub_432F60 function in D-Link DIR-882 wireless router software allows a hacker to execute arbitrary commands.

The vulnerability of the sub432F60 function in D-Link DIR-882 wireless routers is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the soapcgi_main() function in D-Link DIR-816L router microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the soapcgimain function in D-Link DIR-816L router microprogramming software allows a hacker to execute arbitrary code...

The vulnerability in the web interface of the D-Link DIR-1260 router’s microprogramming software allows a hacker to execute arbitrary commands with root privileges.

The vulnerability in the web interface of the D-Link DIR-1260 router operating system exists due to the lack of measures taken to neutralize special elements used in the operating system’s commands when processing the SetDest/Dest/Target parameter. Exploiting this vulnerability allows a remote...

The vulnerability of the /tmp/new_qos.rule file in D-link DIR-823G router microprogramming software allows a attacker to execute arbitrary commands.

The vulnerability of the /tmp/newqos.rule file in D-link DIR-823G router microprogramming software is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the SetDynamicDNSSettings function in D-link DIR-878A1 router microprogramming software allows a hacker to execute arbitrary commands.

The vulnerability of the SetDynamicDNSSettings function in D-link DIR-878A1 router microprogramming software is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the sub_4438A4() function in D-Link DIR-882 wireless router software allows a hacker to execute arbitrary commands.

The vulnerability of sub4438A4 in D-Link DIR-882 wireless router microprogramming software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of function sub_4455BC in D-Link DIR-882 wireless router software allows a hacker to execute arbitrary commands.

The vulnerability of sub4455BC in D-Link DIR-882 wireless router microprogramming software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...

The vulnerability of the Common.getHomeDir() function in the multi-platform web solution for creating Scada systems, Scada-LTS, allows a attacker to perform cross-site scripting (XSS) attacks.

The vulnerability of the Common.getHomeDir function in the multi-platform web solution for creating Scada systems in Scada-LTS is related to an incorrect restriction on the path name of the directory. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting XSS attac...

The vulnerability of D-Link DIR-823G A1 router’s microprogramming software, related to buffer overflow, allows a hacker to trigger a service failure.

The vulnerability of D-Link DIR-823G A1 router microprogramming software is related to an overflow in the buffer of the FillMacCloneMac parameter at the end point /EXCUSHELL. Exploiting this vulnerability can allow a remote attacker to trigger a Denial-of-Service attack using fake input data...

The vulnerability of D-link DIR-816A2 router microprogramming software, related to buffer overflow in the stack, allows a hacker to execute arbitrary code.

The vulnerability of D-link DIR-816A2 router microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

EUVD-2025-199936

A vulnerability was identified in Scada-LTS up to 2.7.8.1. Affected is the function Common.getHomeDir of the file br/org/scadabr/vo/exporter/ZIPProjectManager.java of the component Project Import. Such manipulation leads to path traversal. The attack may be launched remotely. The exploit is...

CVE-2025-13791

The CVE-2025-13791 issue affects Scada-LTS up to version 2.7.8.1, specifically the Common.getHomeDir function in br/org/scadabr/vo/exporter/ZIPProjectManager.java of the Project Import component. The vulnerability enables path traversal, with the attack potentially executable remotely. Public exp...

CVE-2025-13791 Scada-LTS Project Import ZIPProjectManager.java Common.getHomeDir path traversal

A vulnerability was identified in Scada-LTS up to 2.7.8.1. Affected is the function Common.getHomeDir of the file br/org/scadabr/vo/exporter/ZIPProjectManager.java of the component Project Import. Such manipulation leads to path traversal. The attack may be launched remotely. The exploit is...

CVE-2025-13791 Scada-LTS Project Import ZIPProjectManager.java Common.getHomeDir path traversal

A vulnerability was identified in Scada-LTS up to 2.7.8.1. Affected is the function Common.getHomeDir of the file br/org/scadabr/vo/exporter/ZIPProjectManager.java of the component Project Import. Such manipulation leads to path traversal. The attack may be launched remotely. The exploit is...

Scada-LTS 路径遍历漏洞

Scada-LTS is an open source, web-based, multi-platform solution from Scada-LTS Open Source. A path traversal vulnerability exists in Scada-LTS version 2.7.8.1 and earlier, which stems from a path traversal issue in the Common.getHomeDir function in the file...

The vulnerability of the SetWLanRadioSettings function in D-Link DIR-823G A1 router microprogramming software, which allows a hacker to cause a service failure.

The vulnerability of the SetWLanRadioSettings function in D-Link DIR-823G A1 router microprogramming software is related to pointer aliasing errors. Exploiting this vulnerability can allow a malicious actor to trigger a service failure through specially crafted HTTP requests...

The vulnerabilities of the sub_458E40() and sub_463560() functions in the embedded web server of D-Link’s router microprogramming systems DIR-822K and DWR-M920 allow attackers to execute arbitrary code or cause service interruptions.

The vulnerability of the sub458E40 and sub463560 functions in the embedded web server of D-Link’s router microprogramming systems DIR-822K and DWR-M920 relates to the escape of operations from the buffer in memory when processing the submit-url parameter. Exploiting this vulnerability allows an...

The vulnerability in the gena.cgi script of D-Link DIR-852 router software allows a hacker to escalate their privileges and execute arbitrary commands.

The vulnerability in the gena.cgi script of D-Link DIR-852 router software is related to incorrect elimination of certain special elements. Exploiting this vulnerability allows an attacker to enhance their privileges and execute arbitrary commands...