CVE-2023-27801

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the DelDNSHnList interface at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted payload...

CVE-2023-29171: Improper Neutralization of Input During Web Page Generation

Unauth. Reflected Cross-site Scripting XSS vulnerability in Magic Post Thumbnail plugin = 4.1.10 versions...

CVE-2023-27802: Out-of-bounds Write

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the EditvsList parameter at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted payload...

CVE-2023-27804: Out-of-bounds Write

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the DelvsList interface at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted payload...

CVE-2023-27803: Out-of-bounds Write

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the EdittriggerList interface at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted payload...

CVE-2023-27806: Out-of-bounds Write

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the ipqoslanipdellist interface at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted payload...

CVE-2023-27810: Out-of-bounds Write

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the ipqoslanipeditlist interface at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted payload...

PT-2023-21358 · H3C · H3C Magic R100

Name of the Vulnerable Software and Affected Versions: H3C Magic R100 version R100V100R005.bin Description: A stack overflow issue was discovered via the DeltriggerList interface at the "/goform/aspForm" API endpoint. This issue allows attackers to cause a Denial of Service DoS by sending a craft...

CVE-2023-27804

CVE-2023-27804 affects H3C Magic R100 (R100V100R005.bin) with a stack overflow via the DelvsList interface at “/goform/aspForm”, leading to a potential Denial of Service . Exploitation requires a crafted payload; impact is limited to availability (no confidentiality/integrity impact stated). The ...

CVE-2023-27806

CVE-2023-27806 affects H3C Magic R100/R100V100R005.bin via the ipqos_lanip_dellist interface at /goform/aspForm, causing a stack overflow that can lead to Denial of Service. The provided documents consistently describe a DoS outcome from a crafted payload but do not include concrete exploitation ...

CVE-2023-27807

CVE-2023-27807 affects H3C Magic R100 family (R100V100R005.bin). The stack overflow occurs in the Delstlist interface at /goform/aspForm, allowing unauthenticated network-adjacent attackers to cause a Denial of Service via a crafted payload. Impact is limited to availability (A) with no confident...

CVE-2023-27808

CVE-2023-27808 describes a stack overflow in H3C Magic R100 router component at the DeltriggerList interface (/goform/aspForm) of the R100V100R005.bin, enabling a crafted payload to trigger a Denial of Service. Affected product: H3C Magic R100 (R100V100R005.bin). Underlying cause: stack overflow ...

CVE-2023-27810

The CVE concerns H3C Magic R100 family, specifically R100V100R005.bin, with a stack overflow in the ipqos_lanip_editlist interface exposed at /goform/aspForm. The root cause is a stack overflow when handling crafted payloads via the ipqos lanip editlist API, leading to Denial of Service. Document...

CVE-2023-27803

CVE-2023-27803 affects H3C Magic R100 firmware (R100V100R005.bin). A stack overflow via the EdittriggerList interface at /goform/aspForm allows a crafted payload to cause a Denial of Service. Public documents reference this description, and one PT-Security entry recommends disabling the API endpo...

CVE-2023-27802

CVE-2023-27802 affects the H3C Magic R100 router (R100V100R005.bin). A stack overflow via the EditvsList parameter at /goform/aspForm is reported, enabling a Denial of Service through a crafted payload. The connected sources consistently identify the affected product and endpoint; no public fix/v...

CVE-2023-27803

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the EdittriggerList interface at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted payload...

CVE-2023-27805

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the EditSTList interface at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted payload...

CVE-2023-27806

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the ipqoslanipdellist interface at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted payload...

PT-2023-22185 · WordPress · Magic Post Thumbnail

Name of the Vulnerable Software and Affected Versions: Magic Post Thumbnail plugin versions prior to 4.1.10 Description: The issue is related to an Unauth. Reflected Cross-site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially allowi...

CVE-2023-27808: Out-of-bounds Write

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the DeltriggerList interface at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted payload...