1625 matches found
CVE-2025-50528
A stack-based buffer overflow vulnerability exists in the fromNatStaticSetting function of the Tenda AC6 wireless router (firmware versions
CVE-2025-50528: Stack-based Buffer Overflow
A buffer overflow vulnerability exists in the fromNatStaticSetting function of Tenda AC6 =V15.03.05.19 via the page parameter...
CVE-2025-40729
Reflected Cross-Site Scripting XSS in /customersupport/index.php in Customer Support System v1.0, which allows remote attackers to execute arbitrary code via the page parameter...
CVE-2025-40729: Improper Neutralization of Input During Web Page Generation
Reflected Cross-Site Scripting XSS in /customersupport/index.php in Customer Support System v1.0, which allows remote attackers to execute arbitrary code via the page parameter...
Marwal Infotech CMS 注入漏洞
Marwal Infotech CMS is a content management system from Marwal Infotech. An injection vulnerability exists in Marwal Infotech CMS version 1.0, which stems from SQL injection due to incorrect manipulation of the parameter ID in the file /page.php...
The vulnerability of the formSafeEmailFilter() function in the Tenda FH451 router software allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the formSafeEmailFilter function in the Tenda FH451 router software lies in the lack of data cleaning measures at the management level when processing the page parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause service failures...
The vulnerability of the P2pListFilter() function in the software for Tenda FH451 routers allows a hacker to execute arbitrary code or cause service failures.
The vulnerability of the P2pListFilter function in the Tenda FH451 router’s software is related to buffer overflows during the processing of the page parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause service failures...
Tmall_demo 代码注入漏洞
Tmalldemo is a Spring Boot-based mini Tmall by the projectteam. A code injection vulnerability exists in Tmalldemo 20250505 and earlier versions, which stems from cross-site scripting due to incorrect operation of the parameter Detailed Address in the component Buy Item Page...
CVE-2024-33217
Tenda FH1206 V1.2.0.88155EN was discovered to contain a stack-based buffer overflow vulnerability via the page parameter in ip/goform/addressNat...
CVE-2024-32288
Tenda W30E v1.0 V1.0.1.25633 firmware has a stack overflow vulnerability located via the page parameter in the fromwebExcptypemanFilter function...
CVE-2024-30639
Tenda F1202 v1.2.0.20408 has a stack overflow vulnerability in the page parameter of fromAddressNat function...
CVE-2024-23177
An issue was discovered in the WatchAnalytics extension in MediaWiki before 1.40.2. XSS can occur via the Special:PageStatistics page parameter...
CVE-2024-3428
A vulnerability has been found in SourceCodester Online Courseware 1.0 and classified as problematic. This vulnerability affects unknown code of the file edit.php. The manipulation of the argument id leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclos...
CVE-2024-30592
Tenda FH1202 v1.2.0.14408 has a stack overflow vulnerability in the page parameter of the fromAddressNat function...
CVE-2024-37859
Cross Site Scripting vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via the page parameter to php-lfis/admin/index.php...
CVE-2024-32291
Tenda W30E v1.0 firmware v1.0.1.25633 has a stack overflow vulnerability via the page parameter in the fromNatlimit function...
CVE-2024-10048
The Post Status Notifier Lite and Premium plugins for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘page’ parameter in all versions up to, and including, 1.11.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...
CVE-2024-12156
The AI Content Writer, RSS Feed to Post, Autoblogging SEO Help plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 6.1.3 due to insufficient input sanitization and output escaping. This makes it possible for...