Lucene search
+L

1021 matches found

NVD
NVD
added 2024/12/16 10:15 p.m.16 views

CVE-2024-29671

Buffer Overflow vulnerability in NEXTU FLATA AX1500 Router v.1.0.2 allows a remote attacker to execute arbitrary code via the POST request handler component...

9.8CVSS0.2091EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2024/12/16 12:0 a.m.6 views

NEXTU FLATA AX1500 安全漏洞

The NEXTU FLATA AX1500 is a wireless router from NEXTU. A security vulnerability exists in the NEXTU FLATA AX1500 version v.1.0.2, which stems from the presence of a buffer overflow vulnerability that could allow a remote attacker to execute arbitrary code via the POST request handler component...

9.8CVSS8.1AI score0.2091EPSS
SaveExploits1References3
NVD
NVD
added 2024/12/04 11:15 p.m.24 views

CVE-2024-12183

A vulnerability, which was classified as problematic, was found in DedeCMS 5.7.116. This affects the function RemoveXSS of the file /plus/carbuyaction.php of the component HTTP POST Request Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Th...

5.4CVSS0.00424EPSS
SaveExploits1References4
NVD
NVD
added 2024/11/27 5:15 p.m.14 views

CVE-2024-11860

A vulnerability classified as critical has been found in SourceCodester Best House Rental Management System 1.0. This affects an unknown part of the file /rental/ajax.php?action=deletetenant of the component POST Request Handler. The manipulation of the argument id leads to improper authorization...

6.9CVSS0.00828EPSS
SaveExploits1References6
OSV
OSV
added 2024/11/27 5:15 p.m.6 views

CVE-2024-11860

A vulnerability classified as critical has been found in SourceCodester Best House Rental Management System 1.0. This affects an unknown part of the file /rental/ajax.php?action=deletetenant of the component POST Request Handler. The manipulation of the argument id leads to improper authorization...

6.5CVSS5.6AI score0.00828EPSS
SaveExploits1References6
CVE
CVE
added 2024/11/27 4:31 p.m.66 views

CVE-2024-11860

CVE-2024-11860 affects SourceCodester Best House Rental Management System 1.0. The vulnerability exists in the POST Request Handler, specifically the file path /rental/ajax.php?action=delete_tenant, where manipulation of the argument id leads to improper authorization. This can be exploited remot...

6.9CVSS7.3AI score0.00828EPSS
SaveExploits1References6Affected Software1
Cvelist
Cvelist
added 2024/10/24 11:31 p.m.37 views

CVE-2024-10351 Tenda RX9 Pro POST Request setMacFilterCfg sub_424CE0 stack-based overflow

A vulnerability was found in Tenda RX9 Pro 22.03.02.20. It has been rated as critical. This issue affects the function sub424CE0 of the file /goform/setMacFilterCfg of the component POST Request Handler. The manipulation of the argument deviceList leads to stack-based buffer overflow. The attack...

9CVSS0.0082EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2024/10/24 11:31 p.m.16 views

CVE-2024-10351 Tenda RX9 Pro POST Request setMacFilterCfg sub_424CE0 stack-based overflow

A vulnerability was found in Tenda RX9 Pro 22.03.02.20. It has been rated as critical. This issue affects the function sub424CE0 of the file /goform/setMacFilterCfg of the component POST Request Handler. The manipulation of the argument deviceList leads to stack-based buffer overflow. The attack...

9CVSS7.1AI score0.0082EPSS
SaveExploits0References5
CVE
CVE
added 2024/10/24 11:31 p.m.60 views

CVE-2024-10351

The CVE-2024-10351 vulnerability affects Tenda RX9 Pro (version 22.03.02.20) in the POST handler function /goform/setMacFilterCfg, sub_424CE0. Manipulating the deviceList argument leads to a stack-based buffer overflow, allowing remote exploitation and potentially arbitrary code execution. Public...

9CVSS8.9AI score0.0082EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2024/10/15 10:15 a.m.6 views

CVE-2024-9974

A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file classes/Master.php?f=addtocard of the component POST Request Handler. The manipulation of the argument productid leads to s...

9.8CVSS5.8AI score0.0057EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2024/10/15 9:31 a.m.27 views

CVE-2024-9974 SourceCodester Online Eyewear Shop POST Request Master.php sql injection

A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file classes/Master.php?f=addtocard of the component POST Request Handler. The manipulation of the argument productid leads to s...

6.5CVSS0.0057EPSS
SaveExploits1References5
CVE
CVE
added 2024/10/15 9:31 a.m.53 views

CVE-2024-9974

The CVE-2024-9974 entry concerns SourceCodester Online Eyewear Shop 1.0. Affected functionality is in the POST Request Handler, specifically the file classes/Master.php?f=add_to_card, where manipulating the product_id parameter leads to SQL injection. Remote exploitation is possible and public ex...

9.8CVSS7.1AI score0.0057EPSS
SaveExploits1References5Affected Software1
Positive Technologies
Positive Technologies
added 2024/10/15 12:0 a.m.7 views

PT-2024-39972 · Unknown · Sourcecodester Online Eyewear Shop

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Eyewear Shop version 1.0 Description: A critical issue has been found in the software, affecting an unknown functionality of the file classes/Master.php?f=add to card of the component POST Request Handler. The manipulati...

9.8CVSS7.2AI score0.0057EPSS
SaveExploits1References10
Veracode
Veracode
added 2024/10/07 9:55 a.m.10 views

Regular Expression Denial Of Service (ReDoS)

langflow is vulnerable to Regular Expression Denial of Service ReDoS. The vulnerability is due to improper handling of the remainingtext argument in the HTTP POST Request Handler, allowing an attacker to exploit the inefficient regular expression patterns and causes excessive resource consumption...

6.5CVSS6.7AI score0.00955EPSS
SaveExploits1References7Affected Software1
NVD
NVD
added 2024/10/04 1:15 p.m.38 views

CVE-2024-9513

A vulnerability was found in Netadmin Software NetAdmin IAM up to 3.5 and classified as problematic. Affected by this issue is some unknown functionality of the file /controller/api/Answer/ReturnUserQuestionsFilled of the component HTTP POST Request Handler. The manipulation of the argument...

6.3CVSS0.01731EPSS
SaveExploits3References3
CVE
CVE
added 2024/10/04 12:31 p.m.88 views

CVE-2024-9513

NetAdmin IAM (Netadmin Software) up to version 3.5 has a vulnerability in the HTTP POST Request Handler at /controller/api/Answer/ReturnUserQuestionsFilled. The issue arises from improper manipulation of the username parameter, causing information exposure via discrepancy. Impact is limited to co...

6.3CVSS4AI score0.01731EPSS
SaveExploits3References3Affected Software1
OSV
OSV
added 2024/09/27 12:31 p.m.15 views

GHSA-355V-2RJX-FPX7 Inefficient Regular Expression Complexity in langflow

A vulnerability classified as problematic was found in Langflow up to 1.0.18. Affected by this vulnerability is an unknown functionality of the file \src\backend\base\langflow\interface\utils.py of the component HTTP POST Request Handler. The manipulation of the argument remainingtext leads to...

5.1CVSS3.9AI score0.00955EPSS
SaveExploits1References7
Github Security Blog
Github Security Blog
added 2024/09/27 12:31 p.m.19 views

Inefficient Regular Expression Complexity in langflow

A vulnerability classified as problematic was found in Langflow up to 1.0.18. Affected by this vulnerability is an unknown functionality of the file \src\backend\base\langflow\interface\utils.py of the component HTTP POST Request Handler. The manipulation of the argument remainingtext leads to...

6.5CVSS6.7AI score0.00955EPSS
SaveExploits1References7Affected Software1
NVD
NVD
added 2024/09/27 11:15 a.m.23 views

CVE-2024-9277

A vulnerability classified as problematic was found in Langflow up to 1.0.18. Affected by this vulnerability is an unknown functionality of the file \src\backend\base\langflow\interface\utils.py of the component HTTP POST Request Handler. The manipulation of the argument remainingtext leads to...

6.5CVSS0.00955EPSS
SaveExploits1References4
OSV
OSV
added 2024/09/27 11:0 a.m.8 views

CVE-2024-9277 Langflow HTTP POST Request utils.py redos

A vulnerability classified as problematic was found in Langflow up to 1.0.18. Affected by this vulnerability is an unknown functionality of the file \src\backend\base\langflow\interface\utils.py of the component HTTP POST Request Handler. The manipulation of the argument remainingtext leads to...

5.1CVSS4.9AI score0.00955EPSS
SaveExploits1References6
Rows per page
Query Builder