CVE-2023-27292

An open redirect vulnerability exposes OpenCATS to template injection due to improper validation of user-supplied GET parameters...

PT-2023-21054 · Opencats · Opencats

Name of the Vulnerable Software and Affected Versions: OpenCATS affected versions not specified Description: The issue is related to an open redirect vulnerability that exposes OpenCATS to template injection. This occurs due to improper validation of user-supplied GET parameters. Recommendations:...

CVE-2023-25231

Tenda Router W30E V1.0.1.25633 is vulnerable to Buffer Overflow in function fromRouteStatic via parameters entrys and mitInterface...

CVE-2023-25233

Tenda AC500 V2.0.1.91307 is vulnerable to Buffer Overflow in function fromRouteStatic via parameters entrys and mitInterface...

Buffer overflow

Tenda AC500 V2.0.1.91307 is vulnerable to Buffer Overflow in function fromAddressNat via parameters entrys and mitInterface...

Buffer overflow

Tenda AC500 V2.0.1.91307 is vulnerable to Buffer Overflow in function fromRouteStatic via parameters entrys and mitInterface...

Buffer overflow

Tenda Router W30E V1.0.1.25633 is vulnerable to Buffer Overflow in function fromRouteStatic via parameters entrys and mitInterface...

CVE-2022-45138

The configuration backend of the web-based management can be used by unauthenticated users, although only authenticated users should be able to use the API. The vulnerability allows an unauthenticated attacker to read and set several device parameters that can lead to full compromise of the devic...

CVE-2023-25231

Tenda Router W30E V1.0.1.25633 is vulnerable to Buffer Overflow in function fromRouteStatic via parameters entrys and mitInterface...

Dashboard Widgets Suite < 3.2.2 - Admin+ Stored XSS

The plugin does not sanitise and escape some of its parameters, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2023-25231

Tenda Router W30E V1.0.1.25633 is vulnerable to Buffer Overflow in function fromRouteStatic via parameters entrys and mitInterface...

CVE-2023-25234

Tenda AC500 V2.0.1.91307 is vulnerable to Buffer Overflow in function fromAddressNat via parameters entrys and mitInterface...

多款WAGO产品 访问控制错误漏洞

WAGO Series PFC100 and others are products of WAGO, Germany.WAGO Series PFC100 is a programmable logic controller.WAGO Series PFC200 is a programmable logic controller.WAGO Edge Controller is an edge controller. An access control error vulnerability exists in multiple WAGO products. An attacker...

Prototype Pollution

firefox is vulnerable to Prototype Pollution. The vulnerability exists due to the URL previews in the network panel of developer tools improperly storing URLs, query parameters could potentially be used to overwrite global objects in privileged code...

DEBIAN-CVE-2023-26037

ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior to 1.36.33 and 1.37.33 contain an SQL Injection. The minTime and maxTime request parameters are not properly validated and could be used execute...

Design/Logic Flaw

Improper Handling of Parameters vulnerability in BG-TEK COSLAT Firewall allows Remote Code Inclusion.This issue affects COSLAT Firewall: from 5.24.0.R.20180630 before 5.24.0.R.20210727...

CVE-2021-4105

CVE-2021-4105 affects BG-TEK COSLAT Firewall (versions 5.24.0.R.20180630 through 5.24.0.R.20210727). The root cause is improper handling of parameters, enabling Remote Code Inclusion. Impact is unauthenticated remote code execution with high risk to confidentiality, integrity, and availability (p...

All in One SEO Pack < 4.3.0 - Admin+ Stored XSS

The plugin does not sanitise and escape multiple parameters, which could allow high privilege users such as admin to perform Stored XSS attacks even when unfilteredhtml is disallowed...

VulnCheck KEV: CVE-2023-0586

The All in One SEO Pack plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple parameters in versions up to, and including, 4.2.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with Contributor+ role to inject...

TypeSquare Webfonts for ConoHa < 2.0.4 - Admin+ Stored XSS

The plugin does not sanitise and escape some parameters, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...