1162 matches found
PT-2025-19966 · Linksys · Linksys E5600
Name of the Vulnerable Software and Affected Versions: Linksys E5600 version 1.1.0.26 Description: A command injection issue was found in the runtime.ddnsStatus DynDNS function, specifically via the password parameter. This allows for potential exploitation. Recommendations: For Linksys E5600...
Linksys E5600 安全漏洞
Linksys E5600 is a powerful, compact and reliable WiFi 5 router from Linksys USA. A security vulnerability exists in Linksys E5600 version v1.1.0.26, which originates from the runtime.ddnsStatus DynDNS function that causes command injection via the password parameter...
CVE-2025-45490: Improper Neutralization of Special Elements used in a Command
Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the password parameter...
CVE-2025-45490
Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the password parameter...
CVE-2023-44755
Sacco Management system v1.0 was discovered to contain a SQL injection vulnerability via the password parameter at /sacco/ajax.php...
CVE-2023-44755
Sacco Management system v1.0 was discovered to contain a SQL injection vulnerability via the password parameter at /sacco/ajax.php...
CVE-2023-44755
Sacco Management system v1.0 was discovered to contain a SQL injection vulnerability via the password parameter at /sacco/ajax.php...
CVE-2023-44755
Sacco Management system v1.0 was discovered to contain a SQL injection vulnerability via the password parameter at /sacco/ajax.php...
CVE-2023-44755
Sacco Management system v1.0 was discovered to contain a SQL injection vulnerability via the password parameter at /sacco/ajax.php...
Open Source SACCO Management System 安全漏洞
Open Source SACCO Management System is an open source SACCO management system by Mayuri K., an individual developer. A security vulnerability exists in Open Source SACCO Management System v1.0, which is caused by a SQL injection vulnerability in the password parameter of /sacco/ajax.php...
CVE-2023-44755: Improper Neutralization of Special Elements used in an SQL Command
Sacco Management system v1.0 was discovered to contain a SQL injection vulnerability via the password parameter at /sacco/ajax.php...
The vulnerability of the setWifiConfig() function in the /goform/setModules file of the Tenda W18E router’s microprogramming software allows a attacker to execute arbitrary code or cause a service failure.
The vulnerability of the setWifiConfig function in the /goform/setModules file of the Tenda W18E router’s microprogramming system is related to buffer overflow during the processing of the wifiPwd parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a...
The vulnerability of the SetDynamicDNSSettings module in D-Link DIR-853 A1 router microprogramming software allows a hacker to execute arbitrary code.
The vulnerability of the SetDynamicDNSSettings module in D-Link DIR-853 A1 router microprogramming software is related to buffer overflow when processing the Password parameter. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...
The vulnerability of the SetWanSettings module in D-Link DIR-853 A1 software allows a hacker to execute arbitrary code.
The vulnerability of the SetWanSettings module in D-Link DIR-853 A1 router microprogramming software is related to buffer overflow when processing the Password parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2025-3203
A vulnerability classified as problematic was found in Tenda W18E 16.01.0.11. Affected by this vulnerability is the function formSetAccountList of the file /goform/setModules. The manipulation of the argument Password leads to stack-based buffer overflow. The attack can be launched remotely. The...
The vulnerability of the formQuickIndex() function in the Tenda F1202 router’s microprogramming software allows a hacker to compromise the accessibility of the protected information.
The vulnerability of the formQuickIndex function in the Tenda F1202 router’s microprogramming software is related to the operation of writing data outside the buffer in memory when processing the PPPOEPassword parameter. Exploiting this vulnerability could allow a malicious actor to compromise th...
Tenda W18E 安全漏洞
The Tenda W18E is a wireless router from the Chinese company Tenda. A stack overflow vulnerability exists in the Tenda W18E /goform/setModules handling of the wifiPwd parameter, which can be exploited by an attacker to submit a special request that can crash the application and cause a denial of...
CVE-2025-1956
A vulnerability classified as critical has been found in code-projects Shopping Portal 1.0. This affects an unknown part of the file /Shopping/Admin/index.php of the component Login. The manipulation of the argument password leads to sql injection. It is possible to initiate the attack remotely...
Code-Projects Shopping Portal 注入漏洞
Code-Projects Shopping Portal is a Code-Projects open source shopping site. An injection vulnerability exists in Code-Projects Shopping Portal version 1.0, which stems from an incorrect manipulation of the parameter password that can lead to sql injection...