107 matches found
Cross-site Scripting (XSS)
Overview @saltcorn/server is a Server app for Saltcorn, open-source no-code platform Affected versions of this package are vulnerable to Cross-site Scripting XSS and code execution, via the name parameter on the /admin/edit-codepage endpoint and improper handling of backup password input to the...
CVE-2022-50689: Buffer Copy without Checking Size of Input
Cobian Reflector 0.9.93 RC1 contains a denial of service vulnerability that allows attackers to crash the application by overflowing the password input field. Attackers can paste a large 8000-byte buffer into the password field to trigger an application crash during SFTP task configuration...
PT-2025-52692
Name of the Vulnerable Software and Affected Versions Cobian Backup 11 Gravity version 11.2.0.582 Description The software contains a denial of service issue in the FTP password input field. An attacker can crash the application by providing a specially crafted 800-byte buffer in the password...
PT-2025-50352
Name of the Vulnerable Software and Affected Versions PagerDuty Runbook versions through 2025-06-12 Description PagerDuty Runbook through 2025-06-12 has an issue where stored secrets are exposed directly in the webpage Document Object Model DOM at the configuration page. While these secrets are...
EUVD-2004-2385
Malware in sbrugna...
EUVD-2012-0712
Malware in sbrugna...
CVE-2025-10800 itsourcecode Online Discussion Forum index.php sql injection
A weakness has been identified in itsourcecode Online Discussion Forum 1.0. The impacted element is an unknown function of the file /index.php. Executing manipulation of the argument email/password can lead to sql injection. The attack can be executed remotely. The exploit has been made available...
CVE-2025-9359 Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 RP_checkCredentialsByBBS stack-based overflow
A weakness has been identified in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. This issue affects the function RPcheckCredentialsByBBS of the file /goform/RPcheckCredentialsByBBS. This manipulation of the argument ssidhex/pwd...
BIT-LIBPHP-2022-31626 mysqlnd/pdo password buffer overflow
In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when pdomysql extension with mysqlnd driver, if the third party is allowed to supply host to connect to and the password for the connection, password of excessive length can trigger a buffer overflow in PHP, which can...
The vulnerability of the setSSServer() function in the cstecgi.cgi script of the TOTOLINK X5000R router’s microprogramming software allows a hacker to execute arbitrary commands.
The vulnerability of the setSSServer function in the cstecgi.cgi script of the TOTOLINK X5000R router’s software is related to the lack of measures to sanitize input data when processing parameters such as password, port, and timeout. Exploiting this vulnerability could allow an attacker to execu...
PT-2025-3427 · Unknown · Online Food Ordering System
Name of the Vulnerable Software and Affected Versions: Online Food Ordering System version 1.0 Description: A SQL Injection issue exists in the login form of the system. The issue arises because the input fields username and password are not properly sanitized, allowing attackers to inject...
TOTOLINK A3700R 安全漏洞
The TOTOLINK A3700R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A3700R suffers from a buffer overflow vulnerability that originates from the password parameter in the loginAuth function failing to properly validate the length and size of the input data, which can be...
Pharmacy/Medical Store Point of Sale System SQL Injection Vulnerability
Pharmacy/Medical Store Point of Sale System is a pharmacy/pharmacy point of sale POS system by fkgeo Personal Developer. A SQL injection vulnerability exists in the Pharmacy/Medical Store Point of Sale System version 1.0, which stems from insufficient validation of user input for the email and...
TOTOLINK LR350 urldecode function buffer overflow vulnerability
TOTOLINK LR350 is a 4G LTE router from China's TOTOLINK , which supports converting 4G signals to wired signals for home and office scenarios. The TOTOLINK LR350 suffers from a buffer overflow vulnerability, which arises when the password parameter in the urldecode function fails to correctly...
Tenda W30E formaddUserName Method Buffer Overflow Vulnerability
Tenda W30E is an enterprise-grade wireless router designed for SOHO, small and micro business offices and small store networking, supporting Wi-Fi 6 technology. The Tenda W30E suffers from a buffer overflow vulnerability that originates from the password parameter of the formaddUserName method...
Tenda W30E 安全漏洞
Tenda W30E is an enterprise-grade wireless router designed for SOHO, small and micro business offices and small store networking, supporting Wi-Fi 6 technology. The Tenda W30E suffers from a buffer overflow vulnerability that originates from the password parameter of the formaddUserName method...
The vulnerability of the Device Manager Agent component of the Hitachi Device Manager storage management system allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Device Manager Agent component of the Hitachi Device Manager storage management system is related to insufficient protection of password input fields. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to protected...
The vulnerability of the Single Sign-On (SSO) implementation of the Asset Suite EAM, a tool for managing enterprise assets in the energy sector, allows a malicious actor to circumvent security restrictions and gain access to read, modify, or delete data.
The vulnerability of the Single Sign-On SSO implementation for managing enterprise asset management in the energy sector, Asset Suite EAM, is related to deficiencies in authentication procedures due to incorrect password input. Exploiting this vulnerability can allow unauthorized users to bypass...
PT-2023-5766 · D Link · D-Link Dir-823G
Name of the Vulnerable Software and Affected Versions: D-Link DIR-823G version A1V1.0.2B05 Description: The issue is related to a buffer overflow in the SetWanSettings function via the Password parameter. This allows attackers to cause a Denial of Service DoS via a crafted input. The vulnerabilit...
