CVE-2022-31482 Denial-of-Service via internal structure overflow

An unauthenticated attacker can send a specially crafted unauthenticated HTTP request to the device that can overflow a buffer. This vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain firmware versions prior to 1.29...

Poly Studio X30 / Studio X50 / Studio X70 / G7500 Command Injection

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Authenticated Command Injection product: Poly Studio X30, Studio X50, Studio X70, G7500 vulnerable version: 3.4.0-292042, 3.5.0-344025, 3.6.0 fixed version: 3.7.0 or high...

PT-2022-11738 · Totolink · Totolink Ex1200T

Name of the Vulnerable Software and Affected Versions: TOTOLINK EX1200T version 4.1.2cu.5215 Description: The issue allows an attacker to obtain sensitive information, such as wifikey, without authorization through the getSysStatusCfg function. Recommendations: For TOTOLINK EX1200T version...

PT-2022-11736 · Totolink · Totolink Ex1200T

Name of the Vulnerable Software and Affected Versions: TOTOLINK EX1200T version 4.1.2cu.5215 Description: An attacker can obtain sensitive information, such as wifikey, without authorization. Recommendations: For TOTOLINK EX1200T version 4.1.2cu.5215, at the moment, there is no information about ...

CVE-2021-42877

TOTOLINK EX1200T V4.1.2cu.5215 contains a denial of service vulnerability in function RebootSystem of the file lib/cstemodules/system which can reboot the system...

CVE-2022-25163

Improper Input Validation vulnerability in Mitsubishi Electric MELSEC-Q Series QJ71E71-100 first 5 digits of serial number "24061" or prior, Mitsubishi Electric MELSEC-L series LJ71E71-100 first 5 digits of serial number "24061" or prior and Mitsubishi Electric MELSEC iQ-R Series RD81MES96N...

Input validation

Improper Input Validation vulnerability in Mitsubishi Electric MELSEC-Q Series QJ71E71-100 first 5 digits of serial number "24061" or prior, Mitsubishi Electric MELSEC-L series LJ71E71-100 first 5 digits of serial number "24061" or prior and Mitsubishi Electric MELSEC iQ-R Series RD81MES96N...

CVE-2021-42872

TOTOLINK EX1200T V4.1.2cu.5215 is affected by a command injection vulnerability that can remotely execute arbitrary code...

Tenda AC Series Router 缓冲区错误漏洞

The Tenda AC Series Router is a series of wireless routers from Tenda, a Chinese company. A security vulnerability exists in Tenda AC Series Router AC18V15.03.05.196318, which originates from a heap overflow in the httpd module when processing /goform/saveParentControlInfo requests...

CVE-2021-43728

Pix-Link MiNi Router 28K.MiniRouter.20190211 was discovered to contain a stored cross-site scripting XSS vulnerability due to an unsanitized SSID parameter...

CVE-2022-29645

TOTOLINK A3100R V4.1.2cu.5050B20200504 and V4.1.2cu.5247B20211129 were discovered to contain a hard coded password for root stored in the component /etc/shadow.sample...

TOTOLINK A3100R 缓冲区错误漏洞

TOTOLINK A3100R is a series of wireless routers from China Gion Electronics TOTOLINK.TOTOLINK A3100R V4.1.2cu.5050B20200504 and V4.1.2cu.5247B20211129 is vulnerable to a buffer overflow vulnerability, which can be exploited by attackers to cause a denial of service DoS via a crafted POST request ...

MPX ADC 13.1 ns_hw_err.bash not working with error : HDD ERROR: HDD not found during boot

For MPX ADCs with firmware version 13.1: Build21.50+ Users got the following “HDD not found during boot” error when doing nshwerr.bash check. root@ns /netscaler/nshwerr.bash HDD ERROR: HDD not found during boot Filesystem 1024-blocks Used Avail Capacity Mounted on /dev/md0 523292 507208 5620 99% ...

CVE-2022-1702

SonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions accept a user-controlled input that specifies a link to an external site and uses that link in a redirect which leads to Open redirection vulnerability...

CVE-2022-26042

An OS command injection vulnerability exists in the daretools binary functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger this vulnerability...

TOTOLINK N600R Command Injection Vulnerability (CNVD-2022-53550)

TOTOLINK N600R is a wireless router from TOTOLINK, Taiwan, China.The TOTOLINK N600R V5.3c.7159B20190425 firmware version is vulnerable to command injection, which can be exploited by attackers via the /setting/CloudACMunualUpdate in the filename parameter in /setting/CloudACMunualUpdate to conduc...

InHand Networks InRouter302 缓冲区错误漏洞

InHand Networks InRouter Series is a series of routers from InHand Networks, U.S.A. The InHand Networks InRouter302 version V3.5.4 is vulnerable to a buffer overflow vulnerability that could be exploited by an attacker to cause remote code execution via a specially crafted network request...

CVE-2021-33316

The TRENDnet TI-PG1284i switchhw v2.0R prior to version 2.0.2.S0 suffers from an integer underflow vulnerability. This vulnerability exists in its lldp related component. Due to lack of proper validation on length field of ChassisID TLV, by sending a crafted lldp packet to the device, integer...

DLINK DAP-1620 A1 v1.01 - Directory Traversal

Exploit Title: DLINK DAP-1620 A1 v1.01 - Directory Traversal Date: 27/4/2022 Exploit Author: Momen Eldawakhly Cyber Guy Vendor Homepage: https://me.dlink.com/consumer Version: DAP-1620 - A1 v1.01 Tested on: Linux CVE : CVE-2021-46381 POST /apply.cgi HTTP/1.1 Content-Type:...

DLINK DIR850 - Insecure Access Control

Exploit Title: DLINK DIR850 - Insecure Access Control Product: Dlink Model: DIR850 Date: 14/1/2022 CVE : CVE-2021-46378 Exploit Author: Ahmed Alroky Hardware version: b1 Firmware version: ET850-1.08TRb03 Vendor home page: https://www.dlink.com/ Exploit : Visit http:///config.dat...