CVE-2024-0533

CVE-2024-0533 affects Tenda A15 firmware 15.13.07.13 through the Web-based Management Interface, specifically the /goform/SetOnlineDevName handler. The root cause is a stack-based buffer overflow triggered by the devName parameter due to improper input validation. This vulnerability can be exploi...

CVE-2024-0532

A vulnerability was found in Tenda A15 15.13.07.13. It has been declared as critical. This vulnerability affects the function setrepeat5 of the file /goform/WifiExtraSet of the component Web-based Management Interface. The manipulation of the argument wpapskcrypto24g/wpapskcrypto5g leads to...

Stack overflow

A vulnerability was found in Tenda A15 15.13.07.13. It has been declared as critical. This vulnerability affects unknown code of the file /goform/WifiExtraSet of the component Web-based Management Interface. The manipulation of the argument wpapskcrypto24g leads to stack-based buffer overflow. Th...

Stack overflow

A vulnerability was found in Tenda A15 15.13.07.13. It has been classified as critical. This affects an unknown part of the file /goform/setBlackRule of the component Web-based Management Interface. The manipulation of the argument deviceList leads to stack-based buffer overflow. It is possible t...

CVE-2024-0532 Tenda A15 Web-based Management Interface WifiExtraSet set_repeat5 stack-based overflow

A vulnerability was found in Tenda A15 15.13.07.13. It has been declared as critical. This vulnerability affects the function setrepeat5 of the file /goform/WifiExtraSet of the component Web-based Management Interface. The manipulation of the argument wpapskcrypto24g/wpapskcrypto5g leads to...

CVE-2024-0532

CVE-2024-0532 affects Tenda A15 (version 15.13.07.13) Web-based Management Interface: the WifiExtraSet function set_repeat5, when handling wpapsk_crypto2_4g/wpapsk_crypto5g, can cause a stack-based buffer overflow. The issue is exploitable remotely and has publicly disclosed exploits. Connected d...

CVE-2024-0532 Tenda A15 Web-based Management Interface WifiExtraSet set_repeat5 stack-based overflow

A vulnerability was found in Tenda A15 15.13.07.13. It has been declared as critical. This vulnerability affects the function setrepeat5 of the file /goform/WifiExtraSet of the component Web-based Management Interface. The manipulation of the argument wpapskcrypto24g/wpapskcrypto5g leads to...

CVE-2024-0531 Tenda A15 Web-based Management Interface setBlackRule stack-based overflow

A vulnerability was found in Tenda A15 15.13.07.13. It has been classified as critical. This affects an unknown part of the file /goform/setBlackRule of the component Web-based Management Interface. The manipulation of the argument deviceList leads to stack-based buffer overflow. It is possible t...

CVE-2024-0531

The CVE-2024-0531 issue affects Tenda A15 Web-based Management Interface, specifically the unknown part of the file /goform/setBlackRule . The vulnerability arises from manipulating the deviceList parameter, causing a stack-based buffer overflow that can be triggered remotely. Reported impact inc...

CVE-2024-0531 Tenda A15 Web-based Management Interface setBlackRule stack-based overflow

A vulnerability was found in Tenda A15 15.13.07.13. It has been classified as critical. This affects an unknown part of the file /goform/setBlackRule of the component Web-based Management Interface. The manipulation of the argument deviceList leads to stack-based buffer overflow. It is possible t...

PT-2024-1457 · Tenda · Tenda Ac15

Name of the Vulnerable Software and Affected Versions: Tenda A15 version 15.13.07.13 Description: A critical issue affects the function set repeat5 of the file /goform/WifiExtraSet in the Web-based Management Interface component. The manipulation of the argument wpapsk crypto2 4g or wpapsk crypto...

Cisco BroadWorks Application Security Vulnerability

Cisco BroadWorks Application is an enterprise-class calling and collaboration platform from Cisco. A security vulnerability exists in the Cisco BroadWorks Application Delivery Platform and Cisco BroadWorks Xtended Services Platform, which stems from a vulnerability in the web-based management...

Nexkey Security Breach

Nexkey is an open source, decentralized social media platform for nexryai individual developers. A security vulnerability exists in Nexkey versions prior to 12.23Q4.5 that stems from allowing external applications to invoke the management API using tokens issued by administrators and reviewers...

Vulnerabilities fixed in Fortinet FortiMail

Fortinet has fixed vulnerabilities in FortiMail. The vulnerability with reference CVE-2022-47538 allows an unauthenticated malicious party to use a specially prepared request, authentication on the management interface to bypassing authentication on the management interface. The malicious party c...

PT-2023-7804 · Asterisk +3 · Asterisk +3

Name of the Vulnerable Software and Affected Versions: Asterisk versions prior to 18.20.1, 20.5.1, and 21.0.1 certified-asterisk versions prior to 18.9-cert6 Description: The issue is related to the Asterisk Management Interface AMI and is caused by incorrect restriction of the directory path nam...

CVE-2023-49877

IBM System Storage Virtualization Engine TS7700 3957-VEC, 3948-VED and 3957-VEC could allow a remote authenticated user to obtain sensitive information, caused by improper filtering of URLs. By submitting a specially crafted HTTP GET request, an attacker could exploit this vulnerability to view...

CVE-2023-49877

IBM System Storage Virtualization Engine TS7700 3957-VEC, 3948-VED and 3957-VEC could allow a remote authenticated user to obtain sensitive information, caused by improper filtering of URLs. By submitting a specially crafted HTTP GET request, an attacker could exploit this vulnerability to view...

CVE-2023-49877 IBM System Storage Virtualization Engine information disclosure

IBM System Storage Virtualization Engine TS7700 3957-VEC, 3948-VED and 3957-VEC could allow a remote authenticated user to obtain sensitive information, caused by improper filtering of URLs. By submitting a specially crafted HTTP GET request, an attacker could exploit this vulnerability to view...

PT-2023-31402 · Ibm · Ibm System Storage Virtualization Engine Ts7700

Name of the Vulnerable Software and Affected Versions: IBM System Storage Virtualization Engine TS7700 versions 3957-VEC, 3948-VED Description: The issue allows a remote authenticated user to obtain sensitive information due to improper filtering of URLs. By submitting a specially crafted HTTP GE...

IBM System Storage Virtualization Engine Information Disclosure Vulnerability

IBM System Storage Virtualization Engine is a virtualization engine from International Business Machines IBM. An information disclosure vulnerability exists in IBM System Storage Virtualization Engine TS7700, which stems from improper URL filtering, and can be exploited by an attacker to view...