The vulnerability of the formSetNetCheckTools function in the Tenda W18E router software allows a hacker to execute arbitrary code.

The vulnerability of the formSetNetCheckTools function in the Tenda W18E router software lies in insufficient validation of arguments passed in commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using the hostName parameter...

Tenda W18E Command Injection Vulnerability

The Tenda W18E is a wireless router from the Chinese company Tenda. Tenda W18E suffers from a command injection vulnerability, which originates from the hostName parameter in the formSetNetCheckTools function failing to correctly filter the constructor command special characters, commands, etc...

CVE-2023-46370

Tenda W18E V16.01.0.81576 has a command injection vulnerability via the hostName parameter in the formSetNetCheckTools function...

CVE-2023-46370

Tenda W18E V16.01.0.81576 has a command injection vulnerability via the hostName parameter in the formSetNetCheckTools function...

Command injection

Tenda W18E V16.01.0.81576 has a command injection vulnerability via the hostName parameter in the formSetNetCheckTools function...

Tenda W18E 命令注入漏洞

The Tenda W18E is a wireless router from the Chinese company Tenda. Tenda W18E suffers from a command injection vulnerability, which originates from the hostName parameter in the formSetNetCheckTools function failing to correctly filter the constructor command special characters, commands, etc...

CVE-2023-46370

Tenda W18E V16.01.0.81576 has a command injection vulnerability via the hostName parameter in the formSetNetCheckTools function...

PT-2023-6706 · Tenda · Tenda W18E

Name of the Vulnerable Software and Affected Versions: Tenda W18E version V16.01.0.81576 Description: The issue is related to insufficient argument checking in the formSetNetCheckTools function of the Tenda W18E router's firmware, allowing a remote attacker to execute arbitrary code using the...

CVE-2023-46370

Tenda W18E V16.01.0.81576 has a command injection vulnerability via the hostName parameter in the formSetNetCheckTools function...

CVE-2023-40153

The affected product is vulnerable to a cross-site scripting vulnerability, which could allow an attacker to access the web application to introduce arbitrary Java Script by injecting an XSS payload into the 'hostname' parameter of the vulnerable software...

PT-2023-27297 · Softwarex · Softwarex

Name of the Vulnerable Software and Affected Versions: SoftwareX affected versions not specified Description: The issue is related to a cross-site scripting vulnerability, which could allow an attacker to access the web application and introduce arbitrary JavaScript by injecting an XSS payload in...

DEXMA DexGate Cross-Site Scripting Vulnerability

DEXMA DexGate is a device from DEXMA, Inc. A security vulnerability exists in DEXMA DexGate version 20130114, which stems from the presence of a cross-site scripting XSS vulnerability. An attacker can exploit this vulnerability to access a web application by injecting an XSS load into the hostnam...

CVE-2023-45463

Netis N3Mv2-V1.0.1.865 was discovered to contain a buffer overflow via the hostName parameter in the FUN0040dabc function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

Buffer overflow

Netis N3Mv2-V1.0.1.865 was discovered to contain a buffer overflow via the hostName parameter in the FUN0040dabc function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

NETIS SYSTEMS N3 安全漏洞

The Netis N3Mv2 is a router device. The Netis N3Mv2 suffers from a buffer overflow vulnerability that can be exploited by an attacker to cause a denial of service by sending a specially crafted request in the hostName parameter...

PT-2023-29554 · Netis · Netis N3Mv2

Name of the Vulnerable Software and Affected Versions: Netis N3Mv2 version 1.0.1.865 Description: The issue is related to a buffer overflow via the hostName parameter in the FUN 0040dabc function, allowing attackers to cause a Denial of Service DoS via a crafted input. Recommendations: For Netis...

CVE-2023-43892

Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the Hostname parameter within the WAN settings. This vulnerability is exploited via a crafted payload...

CVE-2023-43892

Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the Hostname parameter within the WAN settings. This vulnerability is exploited via a crafted payload...

Command injection

Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the Hostname parameter within the WAN settings. This vulnerability is exploited via a crafted payload...

CVE-2023-43892

Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the Hostname parameter within the WAN settings. This vulnerability is exploited via a crafted payload...