D-Link DSL6740C 安全漏洞

The D-Link DSL6740C is a wireless VDSL router from China-based AUO D-Link. The D-Link DSL6740C suffers from a path traversal vulnerability that stems from the program failing to properly filter special elements in the path of a resource or file. An attacker could exploit this vulnerability to cau...

PT-2024-7246 · D Link · D-Link Dir-605L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-605L version 2.13B01 BETA Description: A critical issue has been found in the function formSetEasy Wizard of the file /goform/formSetEasy Wizard. The manipulation of the argument curTime leads to buffer overflow. This can be...

PT-2024-30199 · Beijing Digital China Cloud Technology Co. · Dcme-320

Name of the Vulnerable Software and Affected Versions: Beijing Digital China Cloud Technology Co., Ltd. DCME-320 version 7.4.12.60 Description: A command execution vulnerability is present in the DCME-320 device, which can be exploited to obtain device administrator privileges via the getVar...

Cross site scripting

A Cross-site scripting XSS vulnerability has been found on WIC1200, affecting version 1.1. An authenticated user could store a malicious javascript payload in the device model parameter via '/setup/diagsirlearn.asp', allowing the attacker to retrieve the session details of another user...

CVE-2024-0554 Cross-site scripting (XSS) vulnerability on WIC1200

A Cross-site scripting XSS vulnerability has been found on WIC1200, affecting version 1.1. An authenticated user could store a malicious javascript payload in the device model parameter via '/setup/diagsirlearn.asp', allowing the attacker to retrieve the session details of another user...

PT-2024-15653 · Wic1200 · Wic1200

Name of the Vulnerable Software and Affected Versions: WIC1200 version 1.1 Description: A Cross-site scripting XSS vulnerability has been found, allowing an authenticated user to store a malicious javascript payload in the device model parameter via "/setup/diags ir learn.asp". This enables the...

CVE-2023-52026

TOTOlink EX1800T V9.1.0cu.2112B20220316 was discovered to contain a remote command execution RCE vulnerability via the telnetenabled parameter of the setTelnetCfg interface...

NetProbe - Network Probe

NetProbe is a tool you can use to scan for devices on your network. The program sends ARP requests to any IP address on your network and lists the IP addresses, MAC addresses, manufacturers, and device models of the responding devices. Features Scan for devices on a specified IP address or subnet...

The vulnerability of the microprogramming software of the D-Link DAP-1325 wireless signal amplifier arises from incorrect neutralization of certain elements in the output data. This allows a hacker to execute arbitrary code.

The vulnerability of the microprogramming software of the D-Link DAP-1325 wireless signal amplifier is related to incorrect neutralization of certain elements in the output data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

SUSE CVE-2022-36648

The hardware emulation in the ofdpacmdaddl2flood of rocker device model in QEMU, as used in 7.0.0 and earlier, allows remote attackers to crash the host qemu and potentially execute code on the host via execute a malformed program in the guest OS. Note: This has been disputed by multiple third...

PT-2023-4857 · D Link · D-Link Dap-2622

Name of the Vulnerable Software and Affected Versions: D-Link DAP-2622 affected versions not specified Description: The issue is related to a buffer overflow in the DDP service of the D-Link DAP-2622 wireless access point's firmware. This can be exploited by a remote attacker to execute arbitrary...

CVE-2022-36648

The hardware emulation in the ofdpacmdaddl2flood of rocker device model in QEMU, as used in 7.0.0 and earlier, allows remote attackers to crash the host qemu and potentially execute code on the host via execute a malformed program in the guest OS. Note: This has been disputed by multiple third...

PT-2023-4550 · Qemu +2 · Qemu +2

Name of the Vulnerable Software and Affected Versions: QEMU versions 7.0.0 and earlier Description: The issue is related to errors in pointer dereferencing in the of dpa cmd add l2 flood module of the QEMU hardware emulator. Exploitation of this issue may allow a remote attacker to cause a denial...

QEMU 代码问题漏洞

QEMU Quick Emulator is a set of simulation processor software by Fabrice Bellard, a French individual developer. The software is fast and cross-platform. A code issue vulnerability exists in QEMU rocker device model 7.0.0 and earlier versions, which stems from a null pointer dereference issue in...

CVE-2022-36648

The hardware emulation in the ofdpacmdaddl2flood of rocker device model in QEMU, as used in 7.0.0 and earlier, allows remote attackers to crash the host qemu and potentially execute code on the host via execute a malformed program in the guest OS. Note: This has been disputed by multiple third...

PT-2023-4958 · D Link · D-Link Dir-868L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-868L version fw revA 1-12 eu multi 20170316 Description: The issue is caused by a buffer overflow on the stack. This can be exploited by a remote attacker to cause a buffer overflow via the acStack 50 parameter. Recommendations: Fo...

D-Link DIR882 缓冲区错误漏洞

The D-Link DIR882 is a dual-band wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR882 DIR882A1FW110B02 version that stems from the presence of a stack overflow, which can be exploited by an attacker to cause a denial of service DoS or execute arbitrary...

SUSE CVE-2008-5716

xend in Xen 3.3.0 does not properly restrict a guest VM's write access within the /local/domain xenstore directory tree, which allows guest OS users to cause a denial of service and possibly have unspecified other impact by writing to 1 console/tty, 2 console/limit, or 3 image/device-model-pid...

SUSE CVE-2015-2752

The XENDOMCTLmemorymapping hypercall in Xen 3.2.x through 4.5.x, when using a PCI passthrough device, is not preemptible, which allows local x86 HVM domain users to cause a denial of service host CPU consumption via a crafted request to the device model qemu-dm...

SUSE CVE-2015-8554

Buffer overflow in hw/pt-msi.c in Xen 4.6.x and earlier, when using the qemu-xen-traditional aka qemu-dm device model, allows local x86 HVM guest administrators to gain privileges by leveraging a system with access to a passed-through MSI-X capable physical PCI device and MSI-X table entries,...