org.eclipse.jetty.ee8.demos:jetty-ee8-demo-jetty-webapp (>=12.0.0.alpha0, <=12.0.0.beta1), org.eclipse.jetty.ee8:jetty-ee8-home (>=12.0.0.alpha0, <=12.0.0.beta1) +1 more potentially affected by CVE-2023-36479 via org.eclipse.jetty.ee8:jetty-ee8-servlets (>=12.0.0.alpha0, <=12.0.0.beta1)

org.eclipse.jetty.ee8:jetty-ee8-servlets MAVEN version =12.0.0.alpha0, =12.0.0.alpha0, =12.0.0.alpha0, =12.0.0.alpha0, =12.0.0.beta1 Source cves: CVE-2023-36479 Source advisory: GHSA-3GH6-V5V9-6V9J...

CVE-2023-41011

Command Execution vulnerability in China Mobile Communications China Mobile Intelligent Home Gateway v.HG6543C4 allows a remote attacker to execute arbitrary code via the shortcuttelnet.cg component...

PT-2023-27743

Name of the Vulnerable Software and Affected Versions China Mobile Intelligent Home Gateway version v.HG6543C4 Description The issue allows a remote attacker to execute arbitrary code via the shortcut telnet.cg component. This enables the attacker to potentially gain control over the affected...

CVE-2023-41010

Insecure Permissions vulnerability in Sichuan Tianyi Kanghe Communication Co., Ltd China Telecom Tianyi Home Gateway v.TEWA-700G allows a local attacker to obtain sensitive information via the default password parameter...

PT-2023-27742 · Sichuan Tianyi Kanghe Communication Co. · Tianyi Home Gateway

Name of the Vulnerable Software and Affected Versions: Sichuan Tianyi Kanghe Communication Co., Ltd China Telecom Tianyi Home Gateway version v.TEWA-700G Description: The issue allows a local attacker to obtain sensitive information via the default password parameter. This is related to an Insecu...

CVE-2023-41011

CVE-2023-41011 describes a high-severity command-execution vulnerability in China Mobile Intelligent Home Gateway (model v.HG6543C4). The flaw resides in the shortcut_telnet.cg component, enabling a remote attacker to run arbitrary code. CVSS 3.1 base score is 9.8 (CRITICAL) with network attack v...

China Mobile Intelligent Home Gateway Command Injection Vulnerability

China Mobile Intelligent Home Gateway is an intelligent home gateway from China Mobile, a Chinese company. A security vulnerability exists in China Mobile Communications China Mobile Intelligent Home Gateway v.HG6543C4, which originates from a vulnerability that allows remote attackers to execute...

CVE-2023-41011: Improper Neutralization of Special Elements used in a Command

Command Execution vulnerability in China Mobile Communications China Mobile Intelligent Home Gateway v.HG6543C4 allows a remote attacker to execute arbitrary code via the shortcuttelnet.cg component...

CVE-2023-41010: Insufficiently Protected Credentials

Insecure Permissions vulnerability in Sichuan Tianyi Kanghe Communication Co., Ltd China Telecom Tianyi Home Gateway v.TEWA-700G allows a local attacker to obtain sensitive information via the default password parameter...

CVE-2023-41010

CVE-2023-41010 describes an Insecure Permissions vulnerability in the Sichuan Tianyi Kanghe / China Telecom Tianyi Home Gateway v.TEWA-700G. The issue allows a local attacker to obtain sensitive information via the device’s default password parameter . Affected product/version: v.TEWA-700G . Root...

China Telecom Tianyi Home Gateway Security Vulnerability

China Telecom Tianyi Home Gateway is a home gateway from Sichuan Tianyi Kanghe Communication. A security vulnerability exists in Sichuan Tianyi Kanghe Communication China Telecom Tianyi Home Gateway v.TEWA-700G, which can be exploited by a local attacker to obtain sensitive information via the...

Store XSS in Widgets and pages in instantsoft/icms2

Description I noticed that you filtered the filter very carefully. But there are still some parts you missed Proof of Concept 1 . Login with admin 2 . Go to "http://localhost/o2/admin/menu/itemedit/18" 3 . Insert payload in CSS class 4 . Click save , and go to home page, and Detect store xss in...

D-Link DIR-3040 SetQuickVPNSettings Code Execution

The vulnerability of the SetQuickVPNSettings function in the D-Link DIR-3040 wireless router’s microprogramming software is related to the execution of an operation that goes beyond the buffer in memory as a result of executing the prog.cgi script. Exploiting this vulnerability allows a remote...

CVE-2023-3612

Govee Home app has unprotected access to WebView component which can be opened by any app on the device. By sending an URL to a specially crafted site, the attacker can execute JavaScript in context of WebView or steal sensitive user data by displaying phishing content...

CVE-2023-3612

Govee Home app has unprotected access to WebView component which can be opened by any app on the device. By sending an URL to a specially crafted site, the attacker can execute JavaScript in context of WebView or steal sensitive user data by displaying phishing content...

CVE-2023-3612 Unprotected WebView access in Govee Home App

Govee Home app has unprotected access to WebView component which can be opened by any app on the device. By sending an URL to a specially crafted site, the attacker can execute JavaScript in context of WebView or steal sensitive user data by displaying phishing content...

CVE-2023-3612

The CVE-2023-3612 issue affects the Govee Home app, where unprotected access to the WebView component allows any app on the device to open WebView. A crafted URL can enable JavaScript execution in the WebView context or display phishing content to steal sensitive data. Documented impact includes ...

CVE-2023-3612 Unprotected WebView access in Govee Home App

Govee Home app has unprotected access to WebView component which can be opened by any app on the device. By sending an URL to a specially crafted site, the attacker can execute JavaScript in context of WebView or steal sensitive user data by displaying phishing content...

D-LINK 619L security vulnerabilities

D-Link DIR-619L is a home wireless router from AUO D-Link, designed for home and small office environments, utilizing the IEEE 802.11n wireless standard with a maximum transmission rate of 300Mbps. The D-Link DIR-619L suffers from a buffer overflow vulnerability, which originates from the curTime...

CVE-2023-3612: Exposed Dangerous Method or Function

Govee Home app has unprotected access to WebView component which can be opened by any app on the device. By sending an URL to a specially crafted site, the attacker can execute JavaScript in context of WebView or steal sensitive user data by displaying phishing content...