WordPress plugin Subscribe2 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

CVE-2024-11582: Improper Neutralization of Input During Web Page Generation

The Subscribe2 – Form, Email Subscribers & Newsletters plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ip parameter in all versions up to, and including, 10.43 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attacker...

WordPress Subscribe2 plugin <= 10.43 - Unauthenticated Stored Cross-Site Scripting via IP Parameter vulnerability

Unauthenticated Stored Cross-Site Scripting via IP Parameter vulnerability discovered by mikemyers in WordPress Plugin Subscribe2 versions = 10.43...

TP-Link TL-WR841ND Router DoS

The vulnerability of the httpGetEnv function /userRpm/WanStaticIpV6CfgRpm.htm in the TP-Link TL-WR841ND router software is related to buffer overflows caused by improper cleaning or resource release when processing the ip parameter. Exploiting this vulnerability allows a remote attacker to cause...

CVE-2024-34944

Tenda FH1206 V1.2.0.88155EN was discovered to contain a stack-based buffer overflow vulnerability via the list1 parameter at ip/goform/DhcpListClient...

CVE-2025-25897: Out-of-bounds Write

A buffer overflow vulnerability was discovered in TP-Link TL-WR841ND V11 via the 'ip' parameter at /userRpm/WanStaticIpV6CfgRpm.htm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted packet...

CVE-2022-25305

The WP Statistics WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization of the IP parameter found in the /includes/class-wp-statistics-ip.php file which allows attackers to inject arbitrary web scripts onto several pages that execute when site...

PT-2026-3432

Name of the Vulnerable Software and Affected Versions Totolink LR350 version 9.3.5u.6369 B20220309 Description A flaw exists in the Totolink LR350 device. This issue is located within the setDiagnosisCfg function of the /cgi-bin/cstecgi.cgi file, part of the POST Request Handler component...

PT-2024-17010 · WordPress · Country Blocker

Name of the Vulnerable Software and Affected Versions: Country Blocker plugin for WordPress versions up to, and including, 3.2 Description: The issue is related to Reflected Cross-Site Scripting via the ip parameter due to insufficient input sanitization and output escaping. This allows...

CVE-2024-11459: Improper Neutralization of Input During Web Page Generation

The Country Blocker plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'ip' parameter in all versions up to, and including, 3.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web script...

CVE-2024-52755

D-LINK DI-8003 v16.07.26A1 was discovered to contain a buffer overflow via the hostip parameter in the ipsecroadasp function...

NETGEAR Router PPPoe DoS

The vulnerability of the pppoe.cgi script in NETGEAR’s microprogrammed router software, including the XR300, R7000P, and R6400 v2 models, stems from a buffer overflow issue during the processing of the pppoelocalip parameter. Exploiting this vulnerability allows an attacker to initiate a...

CVE-2024-52759

D-LINK DI-8003 v16.07.26A1 was discovered to contain a buffer overflow via the ip parameter in the ippositionasp function...

CVE-2024-52711

DI-8100 v16.07.26A1 is vulnerable to Buffer Overflow In the ippositionasp function via the ip parameter...

CVE-2024-52711

DI-8100 v16.07.26A1 is vulnerable to Buffer Overflow In the ippositionasp function via the ip parameter...

CVE-2024-52711: Buffer Copy without Checking Size of Input

DI-8100 v16.07.26A1 is vulnerable to Buffer Overflow In the ippositionasp function via the ip parameter...

CVE-2024-52711

The D-Link DI-8100 wireless broadband router (version 16.07.26A1 ) is vulnerable to a Buffer Overflow in the ip_position_asp function. This flaw occurs because the function fails to properly validate the length and size of the input data provided via the ip parameter. An attacker could exploit th...

CVE-2024-52759

D-LINK DI-8003 v16.07.26A1 was discovered to contain a buffer overflow via the ip parameter in the ippositionasp function...

CVE-2024-52759

D-LINK DI-8003 v16.07.26A1 was discovered to contain a buffer overflow via the ip parameter in the ippositionasp function...

CVE-2024-52759

CVE-2024-52759 affects the D-LINK DI-8003, version 16.07.26A1, where a buffer overflow occurs in the ip_position_asp function triggered by the ip parameter. Public sources describe potential arbitrary code execution or denial of service vectors, with the NVD noting a CRITICAL severity (CVSSv3.1: ...