The vulnerability in the billing system interface for Carbon Billing 5 allows a attacker to perform XSS attacks.

The vulnerability of the Carbon Billing 5 billing system interface relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks...

The vulnerability in the web interface of the LoLLMS WebUI system, which is used for launching and managing large language models in LoLLMS (Lord of Large Language Multimodal Systems), involves an uncontrolled resource consumption. This allows a malicious user to cause a service failure.

The vulnerability in the LoLLMS WebUI web interface, which is used to launch and manage large language models in LoLLMS Lord of Large Language Multimodal Systems, involves an uncontrolled resource consumption during the processing of the end-point opencodeinvscode. Exploiting this vulnerability...

USN-6926-3 linux-azure vulnerabilities

黄思聪 discovered that the NFC Controller Interface NCI implementation in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could use this to cause a denial of service system crash...

PT-2024-28400 · Gl.Inet · Mt300N-V2 +19

Name of the Vulnerable Software and Affected Versions: GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 version 4.3.11 GL-iNet products MT3000/MT2500/AXT1800/AX1800/A1300/X300B version 4.5.16 GL-iNet products XE300 version 4.3.16 GL-iNet products E750 version 4.3....

PT-2024-5395 · Raisecom · Raisecom Msg2200 +3

Name of the Vulnerable Software and Affected Versions: Raisecom MSG1200, MSG2100E, MSG2200 and MSG2300 version 3.90 Description: A critical issue affects the sslvpn config mod function of the /vpn/list ip network.php file in the Web Interface component. The manipulation of the template and stylen...

The vulnerability in the web interface of the IBM Security Directory Integrator and IBM Security Verify Directory Integrator software allows a perpetrator to execute arbitrary code and expose sensitive information.

The vulnerability of the web interface of the IBM Security Directory Integrator and the IBM Security Verify Directory Integrator data integration tool is related to the lack of security measures taken to protect the structure of the web pages. Exploiting this vulnerability allows a malicious acto...

The vulnerability in the web interface of the software-defined networking management software HPE Aruba Networking EdgeConnect SD-WAN Orchestrator allows a attacker to execute XSS attacks.

The vulnerability of the HPE Aruba Networking EdgeConnect SD-WAN Orchestrator software’s web interface exists due to the lack of protective measures taken for the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

Xibo CMS SQL注入漏洞

Xibo CMS is an open source content management system from Xibo Digital Signage. Xibo CMS suffers from a SQL injection vulnerability that originates from allowing authenticated users to obtain and modify arbitrary data from the database by injecting specially crafted values into the API...

TOTOLINK A3600R 安全漏洞

TOTOLINK A3600R is a 6-antenna 1200M wireless router from China's TOTOLINK , mainly used to provide Wi-Fi access, network routing and parental control. The TOTOLINK A3600R suffers from a buffer overflow vulnerability that originates from improper handling of the webWlanIdx parameter in the...

libcurl 安全漏洞

libcurl is a free and easy-to-use client-side URL transport library from the cURL open source. A security vulnerability exists in the libcurl URL API version 8.8.0, which stems from the fact that the function curlurlget reads outside of the stack-based buffer when processing IDN conversions,...

edk2: Predictable TCP Initial Sequence Numbers

A security flaw has been identified in EDK2, the open-source reference implementation of the UEFI specification. This vulnerability enables an unauthorized attacker to potentially disclose sensitive information...

The vulnerability of the SINEMA Remote Connect client web interface, related to security mechanism errors, allows a perpetrator to view and edit protected information regarding device configurations.

The vulnerability of the SINEMA Remote Connect client web interface is related to security mechanism errors. Exploiting this vulnerability allows a malicious actor to view and edit protected configuration information about device settings without proper access rights...

PT-2025-2796

Name of the Vulnerable Software and Affected Versions Edimax AC1200 Wi-Fi 5 BR-6476AC version 1.06 Description The issue is related to the lack of protection for the web interface structure of the Edimax AC1200 Wi-Fi 5 BR-6476AC router's firmware, allowing a remote attacker to conduct a Cross Sit...

The vulnerability of the web interface of the IBM InfoSphere Information Server software platform allows a perpetrator to disclose account information during a secure session.

The vulnerability in the web interface of the IBM InfoSphere Information Server software integration platform exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability can allow a malicious actor to disclose credentials during a secure sessio...

The vulnerability of the web interface of the IBM InfoSphere Information Server software platform allows a perpetrator to disclose account information during a secure session.

The vulnerability in the web interface of the IBM InfoSphere Information Server software integration platform exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability can allow a malicious actor to disclose credentials during a secure sessio...

The vulnerability of the web interface of IP-telephone devices, BAS-IP, allows a perpetrator to disclose protected information.

The vulnerability of the web interface of IP-telephone devices BAS-IP relates to the storage of user credentials in configuration files. Exploiting this vulnerability can allow an attacker to disclose sensitive information by sending a specially crafted HTTP request...

The vulnerability of the Diagnosis Ping function in the administrative web interface of the Ethernet switch microprogramming software from Moxa, models Moxa EDS-405A and Moxa EDS-408A, allows a hacker to execute arbitrary code.

The vulnerability of the Diagnosis Ping function in the administrative web interface of Microprogrammed Ethernet switches of the Moxa EDS-405A and Moxa EDS-408A series is related to insufficient protection of the web page structure. Exploiting this vulnerability allows a remote attacker to execut...

The vulnerability in the web interface of Netgear DG834Gv5 integrated software for routers allows a hacker to disclose protected information.

The vulnerability in the web-based management interface of Netgear DG834Gv5 integrated software lies in the unencrypted storage of critical information. Exploiting this vulnerability allows an attacker to disclose the protected data remotely...

The vulnerability of the web interface of the monitoring and analysis software for network traffic in industrial networks, SINEC Traffic Analyzer, allows a hacker to perform a CSRF attack.

The vulnerability of the web interface of the monitoring and network traffic analysis software in industrial networks, SINEC Traffic Analyzer, is related to the falsification of cross-site requests. Exploiting this vulnerability allows a perpetrator to carry out a CSRF attack using a specially...

WordPress Tablesome plugin <= 1.0.33 - Sensitive Data Exposure via API vulnerability

Sensitive Data Exposure via API vulnerability discovered by Peng Zhou Patchstack Alliance in WordPress Plugin Tablesome versions = 1.0.33...