dt-bat.fr Cross Site Scripting vulnerability OBB-2851593

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2022-7377

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to an off-by-one error in the unflatten dt nodes function, which can lead to an overflow of the nps buffer. This was discovered by the Linux Verification Center usin...

Dingtian-DT-R002 3.1.276A - Authentication Bypass Exploit

Exploit Title: Dingtian-DT-R002 3.1.276A - Authentication Bypass Exploit Author: Victor Hanna Trustwave SpiderLabs Author Github Page: https://9lyph.github.io/CVE-2022-29593/ Vendor Homepage: https://www.dingtian-tech.com/enus/relay4.html Software Link:...

Dingtian-DT-R002 3.1.276A Authentication Bypass

Exploit Title: Dingtian-DT-R002 3.1.276A - Authentication Bypass Google Dork: NA Date: 13th July 2022 Exploit Author: Victor Hanna Trustwave SpiderLabs Author Github Page: https://9lyph.github.io/CVE-2022-29593/ Vendor Homepage: https://www.dingtian-tech.com/enus/relay4.html Software Link:...

Dingtian-DT-R002 3.1.276A - Authentication Bypass

Exploit Title: Dingtian-DT-R002 3.1.276A - Authentication Bypass Google Dork: NA Date: 13th July 2022 Exploit Author: Victor Hanna Trustwave SpiderLabs Author Github Page: https://9lyph.github.io/CVE-2022-29593/ Vendor Homepage: https://www.dingtian-tech.com/enus/relay4.html Software Link:...

CVE-2022-29593

relaycgi.cgi on Dingtian DT-R002 2CH relay devices with firmware 3.1.276A allows an attacker to replay HTTP post requests without the need for authentication or a valid signed/authorized request...

CVE-2022-29593

relaycgi.cgi on Dingtian DT-R002 2CH relay devices with firmware 3.1.276A allows an attacker to replay HTTP post requests without the need for authentication or a valid signed/authorized request...

Cross site request forgery (csrf)

relaycgi.cgi on Dingtian DT-R002 2CH relay devices with firmware 3.1.276A allows an attacker to replay HTTP post requests without the need for authentication or a valid signed/authorized request...

CVE-2022-29593

relaycgi.cgi on Dingtian DT-R002 2CH relay devices with firmware 3.1.276A allows an attacker to replay HTTP post requests without the need for authentication or a valid signed/authorized request...

CVE-2022-29593

relaycgi.cgi on Dingtian DT-R002 2CH relay devices with firmware 3.1.276A allows an attacker to replay HTTP post requests without the need for authentication or a valid signed/authorized request...

CVE-2022-29593

CVE-2022-29593 affects Dingtian DT-R002 2CH relay devices (firmware 3.1.276A). The vulnerability is in the relay_cgi.cgi component, allowing an attacker to replay HTTP POST requests without authentication, effectively causing an authentication bypass. Affected product/version: Dingtian DT-R002 2C...

CVE-2022-29593: Authentication Bypass by Capture-replay

relaycgi.cgi on Dingtian DT-R002 2CH relay devices with firmware 3.1.276A allows an attacker to replay HTTP post requests without the need for authentication or a valid signed/authorized request...

PT-2025-26037

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A refcount leak bug has been identified in the Linux kernel, specifically in the ASoC: mt6359 component. The issue arises in the mt6359 parse dt and mt6359 accdet parse dt functions, whe...

PT-2022-32342

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.318 Description A refcount leak was discovered in the pfuze parse regulators dt function. The issue was introduced in version v3.12 and is fixed in version v4.9.318. The actual impact and attack plausibility...

PT-2022-32047

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.12 through 5.4.197 Description A refcount leak was discovered in the pfuze parse regulators dt function. The issue was introduced in version v3.12 and is fixed in version v5.4.198. The actual impact and attack...

PT-2022-32171

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.247 Description A refcount leak was discovered in the pfuze parse regulators dt function. The issue was introduced in version v3.12 and is fixed in Linux Kernel version v4.19.247. The actual impact and atta...

PT-2022-31893

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.121 Description The issue is related to a possible null pointer dereference in the cadence nand dt probe function. This problem was introduced in version v5.5 and is fixed in Linux Kernel version v5.10.121...

PT-2022-31683

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.46 Description The issue is related to a possible null pointer dereference in the cadence nand dt probe function. This problem was introduced in version v5.5 and is fixed in Linux Kernel version v5.15.46. T...

PT-2022-31662

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.46 Description A refcount leak was discovered in the pfuze parse regulators dt function. The issue was introduced in version v3.12 and is fixed in version v5.15.46. The actual impact and attack plausibility...

PT-2022-31387

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.14 Description The issue is related to a possible null pointer dereference in the cadence nand dt probe function. This problem was introduced in version v5.5 and is fixed in version v5.17.14. The actual...