21023 matches found
PT-2021-18565
Name of the Vulnerable Software and Affected Versions Nokia G-120W-F version 3FE46606AGAB91 Description The issue is related to Stored XSS in the administrative interface. It can be exploited via the "urlfilter.cgi?add url address" endpoint. Recommendations For Nokia G-120W-F version...
CVE-2021-30003: Improper Neutralization of Input During Web Page Generation
An issue was discovered on Nokia G-120W-F 3FE46606AGAB91 devices. There is Stored XSS in the administrative interface via urlfilter.cgi?add urladdress...
Nokia G-120W-F Cross-site Scripting Vulnerability
The Nokia G-120W-F is a router from Nokia Finland. It provides network connectivity. A security vulnerability exists in Nokia G-120W-F that originates from XSS stored in the management interface via urlfilter.cgi...
Information Disclosure Vulnerability in CR16018-F Core Router of Xinhua San Technologies Co.
The CR16018-F Core Router is a router from Xinhua San Technologies Co. An information disclosure vulnerability exists in the CR16018-F Core Router from Xinhua San Technologies Limited, which can be exploited by attackers to obtain sensitive information...
PT-2021-17185
Name of the Vulnerable Software and Affected Versions: WoWonder versions prior to 3.1 Description: The issue allows remote attackers to gain access to the database by exploiting a SQL Injection vulnerability in the requests.php?f=search-my-followers endpoint via the event id parameter...
CVE-2021-28031
An issue was discovered in the scratchpad crate before 1.3.1 for Rust. The moveelements function can have a double-free upon a panic in a user-provided f function...
SharpSphere - .NET Project For Attacking vCenter
SharpSphere gives red teamers the ability to easily interact with the guest operating systems of virtual machines managed by vCenter. It uses the vSphere Web Services API and exposes the following functions: Command & Control - In combination with F-Secure's C3, SharpSphere provides C&C into VMs...
HiLCOS IPSec Firewall Bypass
The vulnerability of the implementation of IPSec protocols in the HiLCOS operating system for wireless access points OpenBAT and BAT450-F is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to circumvent firewall policies from a remote...
Linux Kernel Heap Buffer Overflow DoS
The vulnerability of the fmidisetalt function in the drivers/usb/gadget/function/fmidi.c file in Linux operating systems is related to the repeated release of a memory area. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...
CVE-2021-3304
Sagemcom F@ST 3686 v2 3.495 devices have a buffer overflow via a long sessionKey to the goform/login URI...
CVE-2021-3304
CVE-2021-3304 affects Sagemcom F@ST 3686 v2 with firmware 3.495; a buffer overflow is triggered by a long sessionKey to the /goform/login URI. Connected documents confirm the affected product and input vector, but do not provide exploitation details or remediation steps in the supplied material.
CVE-2021-3304: Buffer Copy without Checking Size of Input
Sagemcom F@ST 3686 v2 3.495 devices have a buffer overflow via a long sessionKey to the goform/login URI...
Sagemcom F@ST3686 Buffer Error Vulnerability
The Sagemcom F@ST3686 is a router from Sagemcom France. A buffer error vulnerability exists in the Sagemcom F@ST 3686 v2 3.495 devices, which originates from a long sessionKey to a goform login URI...
PT-2021-20025
Name of the Vulnerable Software and Affected Versions Sagemcom F@ST 3686 v2 version 3.495 Description The issue is a buffer overflow that can be triggered by sending a long sessionKey to the "goform/login" URI. This can potentially allow for unauthorized access or code execution. Recommendations...
PT-2021-30910
Уязвимость реализации набора протоколов IPSec операционной системы HiLCOS беспроводных точек доступа OpenBAT и BAT450-F связана с недостаточной проверкой вводимых данных. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, обойти политики брандмауэра...
CVE-2020-5665
Improper check or handling of exceptional conditions in MELSEC iQ-F series FX5UC CPU unit firmware version 1.060 and earlier allows an attacker to cause a denial-of-service DoS condition on program execution and communication by sending a specially crafted ARP packet...
CVE-2020-5665
Improper check or handling of exceptional conditions in MELSEC iQ-F series FX5UC CPU unit firmware version 1.060 and earlier allows an attacker to cause a denial-of-service DoS condition on program execution and communication by sending a specially crafted ARP packet...
CVE-2020-5665
Improper check or handling of exceptional conditions in MELSEC iQ-F series FX5UC CPU unit firmware version 1.060 and earlier allows an attacker to cause a denial-of-service DoS condition on program execution and communication by sending a specially crafted ARP packet...
Input validation
Improper check or handling of exceptional conditions in MELSEC iQ-F series FX5UC CPU unit firmware version 1.060 and earlier allows an attacker to cause a denial-of-service DoS condition on program execution and communication by sending a specially crafted ARP packet...
CVE-2020-5665
Improper check or handling of exceptional conditions in MELSEC iQ-F series FX5UC CPU unit firmware version 1.060 and earlier allows an attacker to cause a denial-of-service DoS condition on program execution and communication by sending a specially crafted ARP packet...