CVE-2024-2741 Cross-Site Request Forgery in Planet IGS-4215-16T2S

Cross-Site Request Forgery CSRF vulnerability in Planet IGS-4215-16T2S, affecting firmware version 1.305b210528. This vulnerability could allow a remote attacker to trick some authenticated users into performing actions in their session, such as adding or updating accounts through the Switch web...

CVE-2024-2162

An OS Command Injection vulnerability in Kiloview NDI allows a low-privileged user to execute arbitrary code remotely on the device with high privileges. This issue affects Kiloview NDI N3, N3-s, N4, N20, N30, N40 and was fixed in Firmware version 2.02.0227...

CVE-2024-2162 Authenticated Remote Code Execution in Kiloview NDI N series products

An OS Command Injection vulnerability in Kiloview NDI allows a low-privileged user to execute arbitrary code remotely on the device with high privileges. This issue affects Kiloview NDI N3, N3-s, N4, N20, N30, N40 and was fixed in Firmware version 2.02.0227...

PT-2024-2599 · Tenda · Tenda Ac7

Name of the Vulnerable Software and Affected Versions: Tenda AC7 version 15.03.06.44 Description: A critical vulnerability was found in the function formQuickIndex of the file /goform/QuickIndex, which can be exploited remotely. The manipulation of the argument PPPOEPassword leads to a stack-base...

CVE-2024-2711

A vulnerability was found in Tenda AC10U 15.03.06.48. It has been rated as critical. Affected by this issue is the function addWifiMacFilter of the file /goform/addWifiMacFilter. The manipulation of the argument deviceMac leads to stack-based buffer overflow. The attack may be launched remotely...

DrayTek Vigor routers 安全漏洞

DrayTek Vigor routers are a series of routers from Taiwan's DrayTek Corporation DrayTek. A security vulnerability exists in Draytek Vigor3910 4.3.2.5 and earlier versions, which stems from a directory traversal vulnerability in processpost...

Tenda AC10 Security Vulnerability

Tenda AC10 is a wireless router from Tenda, China. A security vulnerability exists in Tenda AC10U version 15.03.06.49, which is caused by a stack-based buffer overflow in the firewallEn parameter of the formSetFirewallCfg function of /goform/SetFirewallCfg...

PT-2024-2497 · Tenda · Tenda Ac7

Name of the Vulnerable Software and Affected Versions: Tenda AC7 version 15.03.06.44 Description: A critical issue affects the formWifiWpsStart function of the /goform/WifiWpsStart file, leading to a stack-based buffer overflow due to the manipulation of the index argument. This issue can be...

PT-2024-2492 · Tenda · Tenda Ac7

Name of the Vulnerable Software and Affected Versions: Tenda AC7 version 15.03.06.44 Description: A critical issue affects the fromSetWifiGusetBasic function of the /goform/WifiGuestSet file, leading to a stack-based buffer overflow due to the manipulation of the shareSpeed argument. This can be...

CVE-2024-2495

Cryptographic key vulnerability encoded in the FriendlyWrt firmware affecting version 2022-11-16.51b3d35. This vulnerability could allow an attacker to compromise the confidentiality and integrity of encrypted data...

CVE-2024-28354

There is a command injection vulnerability in the TRENDnet TEW-827DRU router with firmware version 2.10B01. An attacker can inject commands into the post request parameters usapps.@smb%d.username in the apply.cgi interface, thereby gaining root shell privileges...

CVE-2024-28383

Tenda AX12 v1.0 v22.03.01.16 was discovered to contain a stack overflow via the ssid parameter in the sub431CF0 function...

Honeywell PM43 < P10.19.050004 - Remote Code Execution Exploit

Exploit Title: Honeywell PM43 ' if htmlstartindex != -1: return responsetext:htmlstartindex else: return responsetext except requests.exceptions.RequestException as e: return f"Error: e" def main: parser = argparse.ArgumentParserdescription='Command Injection PoC for Honeywell PM43 Printers'...

Honeywell PM43 < P10.19.050004 - Remote Code Execution (RCE)

Exploit Title: Honeywell PM43 ' if htmlstartindex != -1: return responsetext:htmlstartindex else: return responsetext except requests.exceptions.RequestException as e: return f"Error: e" def main: parser = argparse.ArgumentParserdescription='Command Injection PoC for Honeywell PM43 Printers'...

CVE-2024-28338

A login bypass in TOTOLINK A8000RU V7.1cu.643B20200521 allows attackers to login to Administrator accounts via providing a crafted session cookie...

CVE-2024-2371 Information exposure vulnerability in Korenix JetI/O 6550

Information exposure vulnerability in Korenix JetI/O 6550 affecting firmware version F208 Build:0817. The SNMP protocol uses plaintext to transfer data, allowing an attacker to intercept traffic and retrieve credentials...

PT-2024-22396 · Totolink · Totolink A8000Ru

Name of the Vulnerable Software and Affected Versions: TOTOLINK A8000RU version V7.1cu.643 B20200521 Description: A login bypass issue allows attackers to login to Administrator accounts by providing a crafted session cookie. Recommendations: For TOTOLINK A8000RU version V7.1cu.643 B20200521,...

HPESBHF04614 rev.1 - Certain HPE Edgeline Servers Using Certain Intel Processors, INTEL-SA-00960, 2024.1 IPU - Intel Xeon Processor Advisory, Local Escalation of Privilege Vulnerability

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Edgeline e920t Server Blade - Prior to v2.0002-22-2024 HPE Edgeline e920 Server Blade - Prior to v2.0002-22-2024 HPE Edgeline e920d Server Blade - Prior to v2.0002-22-2024...

PT-2024-2219 · Canon +1 · C1127P +27

Name of the Vulnerable Software and Affected Versions: Canon i-SENSYS and Color imageCLASS series printers and multifunctional devices versions prior to firmware v12.07 and v03.09 Satera MF740C Series/Satera MF640C Series/Satera LBP660C Series/Satera LBP620C Series firmware v12.07 and earlier...

GL.iNet Router Security Vulnerability

GL.iNet Router is a series of routers from China's Guanglian Zhitong GL.iNet. A security vulnerability exists in the GL.iNet Router 4.x firmware version, which originated from a vulnerability that allows an attacker to bypass authentication and gain access to the router's web interface...