PT-2023-6706 · Tenda · Tenda W18E

Name of the Vulnerable Software and Affected Versions: Tenda W18E version V16.01.0.81576 Description: The issue is related to insufficient argument checking in the formSetNetCheckTools function of the Tenda W18E router's firmware, allowing a remote attacker to execute arbitrary code using the...

CVE-2023-46370

Tenda W18E V16.01.0.81576 has a command injection vulnerability via the hostName parameter in the formSetNetCheckTools function...

CVE-2023-40153

The affected product is vulnerable to a cross-site scripting vulnerability, which could allow an attacker to access the web application to introduce arbitrary Java Script by injecting an XSS payload into the 'hostname' parameter of the vulnerable software...

PT-2023-27297 · Softwarex · Softwarex

Name of the Vulnerable Software and Affected Versions: SoftwareX affected versions not specified Description: The issue is related to a cross-site scripting vulnerability, which could allow an attacker to access the web application and introduce arbitrary JavaScript by injecting an XSS payload in...

DEXMA DexGate Cross-Site Scripting Vulnerability

DEXMA DexGate is a device from DEXMA, Inc. A security vulnerability exists in DEXMA DexGate version 20130114, which stems from the presence of a cross-site scripting XSS vulnerability. An attacker can exploit this vulnerability to access a web application by injecting an XSS load into the hostnam...

CVE-2023-45463

Netis N3Mv2-V1.0.1.865 was discovered to contain a buffer overflow via the hostName parameter in the FUN0040dabc function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

Buffer overflow

Netis N3Mv2-V1.0.1.865 was discovered to contain a buffer overflow via the hostName parameter in the FUN0040dabc function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

NETIS SYSTEMS N3 安全漏洞

The Netis N3Mv2 is a router device. The Netis N3Mv2 suffers from a buffer overflow vulnerability that can be exploited by an attacker to cause a denial of service by sending a specially crafted request in the hostName parameter...

PT-2023-29554 · Netis · Netis N3Mv2

Name of the Vulnerable Software and Affected Versions: Netis N3Mv2 version 1.0.1.865 Description: The issue is related to a buffer overflow via the hostName parameter in the FUN 0040dabc function, allowing attackers to cause a Denial of Service DoS via a crafted input. Recommendations: For Netis...

CVE-2023-43892

Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the Hostname parameter within the WAN settings. This vulnerability is exploited via a crafted payload...

CVE-2023-43892

Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the Hostname parameter within the WAN settings. This vulnerability is exploited via a crafted payload...

Command injection

Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the Hostname parameter within the WAN settings. This vulnerability is exploited via a crafted payload...

CVE-2023-43892

Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the Hostname parameter within the WAN settings. This vulnerability is exploited via a crafted payload...

CVE-2023-43892

Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the Hostname parameter within the WAN settings. This vulnerability is exploited via a crafted payload...

NETIS SYSTEMS N3 Operating System Command Injection Vulnerability

NETIS SYSTEMS N3 is a router from NETIS SYSTEMS. An operating system command injection vulnerability exists in the Netis N3Mv2-V.1.0.1.865 version, which stems from a command injection vulnerability in the Hostname parameter...

CVE-2023-37145

TOTOLINK LR350 V9.3.5u.6369B20220309 was discovered to contain a command injection vulnerability via the hostname parameter in the setOpModeCfg function...

CVE-2023-37145

TOTOLINK LR350 V9.3.5u.6369B20220309 was discovered to contain a command injection vulnerability via the hostname parameter in the setOpModeCfg function...

Command injection

TOTOLINK LR350 V9.3.5u.6369B20220309 was discovered to contain a command injection vulnerability via the hostname parameter in the setOpModeCfg function...

CVE-2023-37145

TOTOLINK LR350 V9.3.5u.6369B20220309 was discovered to contain a command injection vulnerability via the hostname parameter in the setOpModeCfg function...

TOTOLINK LR350 命令注入漏洞

TOTOLINK LR350 is a wireless router from China Gion Electronics TOTOLINK. A security vulnerability exists in TOTOLINK LR350 version V9.3.5u.6369B20220309. An attacker can exploit this vulnerability to conduct a command injection attack via the hostname parameter of the setOpModeCfg method...