CVE-2024-42940: Out-of-bounds Write

Tenda FH1201 v1.2.0.14 408 was discovered to contain a stack overflow via the page parameter in the fromP2pListFilter function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-42969: Out-of-bounds Write

Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromSafeUrlFilter function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-42973

CVE-2024-42973 involves a stack overflow in the Tenda FH1206 router (v02.03.01.35) triggered by the page parameter in the fromSetlpBind function. A crafted POST request can cause a Denial of Service. The available documents identify the affected device and the vulnerable function but do not provi...

PT-2024-5845 · Tenda · Tenda Fh1201

Name of the Vulnerable Software and Affected Versions: Tenda FH1201 version 1.2.0.14 408 Description: The issue is related to a stack overflow vulnerability in the fromAddressNat function of the Tenda FH1201 router's firmware. This vulnerability can be exploited by sending a specially crafted POS...

CVE-2024-42976: Out-of-bounds Write

Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromSafeClientFilter function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

Tenda FH1206 安全漏洞

The Tenda FH1206 is a wireless router from Tenda China. The Tenda FH1206 suffers from a buffer overflow vulnerability that originates from a buffer overflow vulnerability in the page parameter of the fromSafeClientFilter function. An attacker could exploit this vulnerability to corrupt memory and...

CVE-2024-42944: Out-of-bounds Write

Tenda FH1201 v1.2.0.14 408 was discovered to contain a stack overflow via the page parameter in the fromNatlimit function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

Tenda FH1206 安全漏洞

Tenda FH1206 is a dual-band wireless router from Tenda, designed for large homes with fiber optics. The Tenda FH1206 suffers from a buffer overflow vulnerability that originates from a buffer overflow vulnerability in the page parameter of the fromSafeUrlFilter function, which can be exploited by...

Tenda FH1201 缓冲区错误漏洞

The Tenda FH1201 is a wireless router from Tenda China. The Tenda FH1201 suffers from a buffer overflow vulnerability that originates from the page parameter in the fromVirtualSer function containing a stack overflow. An attacker could exploit this vulnerability to cause a denial of service...

PT-2024-30240

Name of the Vulnerable Software and Affected Versions Tenda FH1206 version 02.03.01.35 Description A stack overflow issue was discovered, allowing attackers to cause a Denial of Service DoS via a crafted POST request. The issue is specifically related to the page parameter in the fromP2pListFilte...

CVE-2024-7732

Dr.ID Access Control System from SECOM does not properly validate a specific page parameter, allowing unauthenticated remote attackers to inject SQL commands to read, modify, and delete database contents...

CVE-2024-7731

Dr.ID Access Control System from SECOM does not properly validate a specific page parameter, allowing unauthenticated remote attackers to inject SQL commands to read, modify, and delete database contents...

Tenda FH1206 安全漏洞

The Tenda FH1206 is a wireless router from Tenda China. A stack overflow vulnerability exists in the formSafeEmailFilter function in the Tenda FH1206 /goform/SafeEmailFilter that handles the page parameter, which can be exploited by a remote attacker to submit a special request that could crash t...

itsourcecode Airline Reservation System 安全漏洞

itsourcecode Airline Reservation System is an airline reservation system from itsourcecode, Inc. A security vulnerability exists in version 1.0 of itsourcecode Airline Reservation System, which stems from an incorrect manipulation of the parameter page can lead to file inclusion...

PT-2024-38386 · Unknown · Airline Reservation System

Name of the Vulnerable Software and Affected Versions: Airline Reservation System version 1.0 Description: A critical issue has been found in the Airline Reservation System, affecting the /index.php file. The manipulation of the page argument leads to file inclusion. This issue can be exploited...

PT-2024-38376

Name of the Vulnerable Software and Affected Versions Traffic Manager plugin for WordPress versions up to, and including, 1.4.5 Description The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping in the page parameter of the UserWebStat AJAX...

CVE-2024-7485: Improper Neutralization of Input During Web Page Generation

The Traffic Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'page' parameter in the 'UserWebStat' AJAX function in all versions up to, and including, 1.4.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

PT-2024-7661 · Tenda · Tenda Fh1206

Name of the Vulnerable Software and Affected Versions: Tenda FH1206 version 02.03.01.35 Description: The issue is caused by a stack overflow via the page parameter in the fromSafeClientFilter function, allowing attackers to cause a Denial of Service DoS via a crafted POST request to the affected...

The vulnerability of Brother HL-L2360D, DCP-1610W, DCP-L2550DW, HL-L2390DW, HL-L2395DW, MFC-J4620DW, MFC-J6945DW, MFC-L2710DN, MFC-L2710DW, MFC-L2770DW, MFC-L8690CDW, TD-2130N printers’ microprogramming software allows a hacker to redirect users to any desired URL address.

The vulnerability of Brother HL-L2360D, DCP-1610W, DCP-L2550DW, HL-L2390DW, HL-L2395DW, MFC-J4620DW, MFC-J6945DW, MFC-L2710DN, MFC-L2710DW, MFC-L2770DW, MFC-L8690CDW, and TD-2130N printers relates to the redirection of URLs to unreliable websites. Exploiting this vulnerability allows a malicious...

Bolt CMS 跨站脚本漏洞

Bolt CMS is Bolt CMS open source PHP-based open source content management system . A cross-site scripting vulnerability exists in Bolt CMS version 3.7.1, which stems from the parameter body in the file /preview/page can lead to cross-site scripting. No detailed vulnerability details are currently...