The vulnerability in the `usb_approve.cgi` script of NETGEAR XR300 router software allows a hacker to trigger a service failure.

The vulnerability in the usbapprove.cgi script of NETGEAR XR300 router microprogramming software is related to buffer overflow when processing the addName%d parameter. Exploiting this vulnerability allows a malicious actor to trigger a service failure by sending a specially crafted POST request...

CVE-2024-8525

An unrestricted upload of file with dangerous type in Automated Logic WebCTRL 7.0 could allow an unauthenticated user to perform remote command execution via a crafted HTTP POST request which could lead to uploading a malicious file...

CVE-2024-8525

CVE-2024-8525 affects Automated Logic WebCTRL 7.0 (Premium Server). The issue is an unrestricted upload of a file with a dangerous type that an unauthenticated attacker can exploit via a crafted HTTP POST to achieve remote command execution and upload of a malicious file. Multiple connected sourc...

CVE-2024-8525 Automated Logic WebCTRL and Carrier i-Vu Unrestricted File Upload

An unrestricted upload of file with dangerous type in Automated Logic WebCTRL 7.0 could allow an unauthenticated user to perform remote command execution via a crafted HTTP POST request which could lead to uploading a malicious file...

Automated Logic WebCtrl 代码问题漏洞

Automated Logic WebCtrl is a server for Web-based building automation systems from Automated Logic, Inc. A code issue vulnerability exists in Automated Logic WebCtrl version 7.0 that stems from an unrestricted, dangerous type of file upload that could lead to an unauthenticated user executing...

CVE-2024-48530

An issue in the Instructor Appointment Availability module of eSoft Planner 3.24.08271-USA allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-48530

An issue in the Instructor Appointment Availability module of eSoft Planner 3.24.08271-USA allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-48530

The CVE-2024-48530 vulnerability affects eSoft Planner, specifically the Instructor Appointment Availability module in version 3.24.08271-USA. A crafted POST request can cause a Denial of Service (DoS). The Red Hat/NVD/CNNVD/CVE lists corroborate this issue, but the connected documents do not pro...

eSoft Planner 安全漏洞

eSoft Planner is a scheduling software for managing sports facilities from eSoft Planner, Inc. A security vulnerability exists in eSoft Planner version 3.24.08271-USA that originates from an attacker being able to trigger a denial of service via a crafted POST request...

The vulnerability in the wireless.cgi script of Netgear XR300 router software allows a hacker to induce a service failure.

The vulnerability in the wireless.cgi script of Netgear XR300 router software lies in the copying of buffers without checking the size of the input data during the processing of the passphrase parameter. Exploiting this vulnerability allows a malicious actor to trigger a service failure through a...

The vulnerability in the genie_bpa.cgi script of Netgear router microprogramming systems such as R8500, XR300, R7000P, and R6400 v2 allows a hacker to cause a service failure.

The vulnerability in the geniebpa.cgi script of Netgear router microprogramming devices such as R8500, XR300, R7000P, and R6400 v2 lies in the copying of buffers without checking the size of the input data during the processing of the bpaserver parameter. Exploiting this vulnerability allows a...

The vulnerability in the wireless.cgi script of Netgear R8500 router software allows a hacker to induce a service failure.

The vulnerability in the wireless.cgi script of Netgear R8500 router microprogramming software lies in the copying of buffers without checking the size of input data during the processing of parameters opmode, opmodean, and opmodean2. Exploiting this vulnerability allows a malicious actor to caus...

The vulnerability in the bridge_wireless_main.cgi script of NETGEAR XR300 router software allows a hacker to induce a service failure.

The vulnerability in the bridgewirelessmain.cgi script of NETGEAR XR300 router software is related to buffer overflows in the stack when processing the parameter ssidan. Exploiting this vulnerability allows a malicious actor to trigger a Denial-of-Service attack by sending a specially crafted POS...

The vulnerability in the `usb_remote_smb_conf.cgi` script of Netgear R8500 router software allows a hacker to induce a service failure.

The vulnerability in the usbremotesmbconf.cgi script of Netgear R8500 router microprogramming software lies in the copying of buffers without checking the size of the input data during the processing of the sharename parameter. Exploiting this vulnerability allows a malicious actor to cause servi...

CVE-2024-48530

An issue in the Instructor Appointment Availability module of eSoft Planner 3.24.08271-USA allows attackers to cause a Denial of Service DoS via a crafted POST request...

The vulnerability in the pptp.cgi script of the microprogramming software for Netgear routers such as R8500, XR300, R7000P, and R6400 v2 allows a hacker to induce a service failure.

The vulnerability in the pptp.cgi subroutine of Netgear’s router software models R8500, XR300, R7000P, and R6400 v2 lies in the copying of buffers without checking the size of the input data during the processing of the pptpuserip parameter. Exploiting this vulnerability allows a malicious actor ...

The vulnerability in the wireless.cgi script of NETGEAR R7000P router software allows a hacker to induce a service failure.

The vulnerability in the wireless.cg script of NETGEAR R7000P router software is related to buffer overflow when processing the RADIUSAddr%dwla parameter. Exploiting this vulnerability allows a malicious actor to trigger a Denial-of-Service attack by sending a specially crafted POST request...

The vulnerability in the ddns.cgi microprogramming system of Netgear R8500’s routers allows a hacker to induce a service failure.

The vulnerability in the ddns.cgi microprogramming software of Netgear R8500 routers stems from the copying of buffers without checking the size of the input data during the processing of the sysDNSHos parameter. Exploiting this vulnerability allows a malicious actor to cause service failures...

The vulnerability in the ipv6_fix.cgi script of NETGEAR R8500 router software allows a hacker to trigger a service failure.

The vulnerability in the ipv6fix.cgi script of NETGEAR R8500 router software is related to buffer overflows in the stack when processing the ipv6pridns parameter. Exploiting this vulnerability allows a remote attacker to trigger a Denial-of-Service attack by sending a specially crafted POST reque...

The vulnerability in the bsw_pppoe.cgi script of Netgear’s router software models XR300, R7000P, and R6400 v2 allows a hacker to cause a service failure.

The vulnerability in the bswpppoe.cgi script of Netgear XR300, R7000P, and R6400 v2 routers stems from the copying of buffer data without checking the size of the input data during the processing of the pppoelocalip parameter. Exploiting this vulnerability allows a malicious actor to cause servic...