62 matches found
Tenda AC8 /goform/openSchedWifi Stack Overflow Code Execution Vulnerability
Tenda AC8 is a dual-band Gigabit wireless router from Tenda, designed for fiber optic homes up to 1000 megabytes, supporting dual-band concurrent transmission rates up to 1167Mbps, and equipped with full Gigabit ports 1 WAN port + 3 LAN ports to meet the needs of 100-1000 megabytes broadband...
CVE-2023-40892
Tenda AC8 v4 USAC8V4.0siV16.03.34.06cn was discovered to contain a stack overflow via parameter schedStartTime and schedEndTime at /goform/openSchedWifi...
PT-2023-27686
Name of the Vulnerable Software and Affected Versions Tenda AC8 version US AC8V4.0si V16.03.34.06 cn Description A stack overflow issue was discovered via parameters schedStartTime and schedEndTime at the "/goform/openSchedWifi" endpoint. Recommendations For Tenda AC8 version US AC8V4.0si...
An edge case in amplifier allows user to stake after end time, causing reward to be locked in the contract
Lines of code Vulnerability details Proof of Concept Observe that if nobody has staked after the period has ended, it's still possible for a single user to stake even though the period has ended. if firstStakeTime == 0 firstStakeTime = block.timestamp; else requireblock.timestamp if...
SUSE CVE-2013-4168
Cross-site scripting XSS vulnerability in SmokePing 2.6.9 in the start and end time fields...
Improper String/Integer Input Validation Leads to the Crashing of Site
Description If you give the string input in the Start/End time field, then the application will stop working. Proof of Concept 1. Go to "Settings-General-Reconnection" 2. Change activated to "on" 3. On every input fields place any string for example put: "test" 4. Click on save and refresh 5. The...
There isn't an end time on FixedPrice and LPDA sales, and the sale can't be canceled after the sale start.
Lines of code Vulnerability details Impact The sale can't be canceled after the sale start. Moreover, the sale won't end, which contradict the fact that typical NFT sales nowadays have an end time. Even your OpenEdition have an end time. Proof of Concept struct Sale // slot 1 uint48 currentId;...
PT-2022-27158 · Totolink · Totolink Lr350
Name of the Vulnerable Software and Affected Versions: TOTOLINK LR350 version 9.3.5u.6369 B20220309 Description: The issue is a post-authentication buffer overflow that occurs via the parameters week, sTime, and eTime in the setParentalRules function. Recommendations: For TOTOLINK LR350 version...
CVE-2022-42081
Tenda AC1206 USAC1206V1.0RTLV15.03.06.23multiTD01 was discovered to contain a stack overflow via schedendtime parameter...
PT-2022-26243 · Tenda · Tenda Ac1206
Name of the Vulnerable Software and Affected Versions: Tenda AC1206 version US AC1206V1.0RTL V15.03.06.23 multi TD01 Description: A stack overflow issue was discovered, which occurs via the sched end time parameter. Recommendations: For Tenda AC1206 version US AC1206V1.0RTL V15.03.06.23 multi TD0...
CVE-2022-41524
TOTOLINK NR1800X V9.1.0u.6279B20210910 was discovered to contain an authenticated stack overflow via the week, sTime, and eTime parameters in the setParentalRules function...
# an attacker can block stuff from the users from being able to do a buyout or sell fractoins or just main functions ,causing grief of users money and time
Lines of code Vulnerability details details uint256 endTime = startTime + PROPOSALPERIOD; if block.timestamp endTime 1.end time is almost block.timestamp so when an user calls this function 2. an attacker can blockstuff and cause the main functions not to happen maybe causing the...
PT-2022-21076 · Totolink · Totolink T6
Name of the Vulnerable Software and Affected Versions: TOTOLINK T6 version 4.1.9cu.5179 B20201015 Description: A stack overflow issue was discovered in the TOTOLINK T6, affecting the desc, week, sTime, and eTime parameters within the FUN 004133c4 function. Recommendations: For TOTOLINK T6 version...
CVE-2022-29641
TOTOLINK A3100R V4.1.2cu.5050B20200504 and V4.1.2cu.5247B20211129 were discovered to contain a stack overflow via the startTime and endTime parameters in the function setParentalRules. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...
CVE-2022-29641
TOTOLINK A3100R V4.1.2cu.5050B20200504 and V4.1.2cu.5247B20211129 were discovered to contain a stack overflow via the startTime and endTime parameters in the function setParentalRules. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...
CVE-2022-24155
Tenda AX3 v16.03.12.10CN was discovered to contain a heap overflow in the function setSchedWifi. This vulnerability allows attackers to cause a Denial of Service DoS via the schedStartTime and schedEndTime parameters...
Tenda AX3 缓冲区错误漏洞
Tenda Ax3 is an Ax1800 Gigabit port dual-band Wifi 6 wireless router from Tenda China. Tenda AX3 v16.03.12.10CN is vulnerable to a buffer overflow vulnerability, which can be exploited by attackers to cause a denial of service DoS via the schedStartTime and schedEndTime parameters...
CVE-2013-4168
Cross-site scripting XSS vulnerability in SmokePing 2.6.9 in the start and end time fields...
