1162 matches found
Tenda AC7 Buffer Overflow Vulnerability
Tenda AC7 is a 1200M dual-band wireless router from Tenda, designed for broadband upgrades and large households. The Tenda AC7 suffers from a buffer overflow vulnerability that originates from a buffer overflow vulnerability in the PPPOEPassword parameter of the formQuickIndex method. No detailed...
PT-2024-23539 · Tenda · Tenda Fh1202
Name of the Vulnerable Software and Affected Versions: Tenda F1202 version 1.2.0.20408 Description: The issue is a stack overflow vulnerability that can be triggered via the PPPOEPassword parameter in the formQuickIndex function. Recommendations: For Tenda F1202 version 1.2.0.20408, avoid using t...
Tenda FH1205 安全漏洞
The Tenda FH1205 is a wireless router from Tenda China. A security vulnerability exists in the Tenda FH1205 version 2.0.0.7775, which is caused by a stack-based buffer overflow in the PPPOEPassword parameter of the formQuickIndex method of the /goform/QuickIndex file...
Tenda AC7 安全漏洞
Tenda AC7 is a 1200M dual-band wireless router from Tenda, designed for broadband upgrades and large households. The Tenda AC7 suffers from a buffer overflow vulnerability that originates from a buffer overflow vulnerability in the PPPOEPassword parameter of the formQuickIndex method. No detailed...
Tenda AC15 安全漏洞
Tenda AC15 is a wireless router from Tenda, China. A security vulnerability exists in the Tenda AC15 version 15.03.20multi, which is caused by a stack-based buffer overflow in the password parameter of the R7WebsSecurityHandler method on the /goform/execCommand page...
PT-2024-2468 · Tenda · Tenda Fh1205
Name of the Vulnerable Software and Affected Versions: Tenda FH1205 version 2.0.0.7775 Description: A critical issue affects the formQuickIndex function of the /goform/QuickIndex file, where manipulation of the PPPOEPassword argument leads to a stack-based buffer overflow. This can be exploited...
CVE-2024-2547
A vulnerability was found in Tenda AC18 15.03.05.05 and classified as critical. Affected by this issue is the function R7WebsSecurityHandler. The manipulation of the argument password leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the...
Tenda AC18 安全漏洞
The Tenda AC18 is a router from the Chinese company Tenda. A buffer overflow vulnerability exists in Tenda AC18 version V15.03.05.05, which originates from the password parameter of the R7WebsSecurityHandler function that fails to correctly validate the length of the input data, and can be...
PT-2024-2398 · Tenda · Tenda Ac15
Name of the Vulnerable Software and Affected Versions: Tenda AC15 version 15.03.20 multi Description: A critical vulnerability has been found in the Tenda AC15 router, affecting the R7WebsSecurityHandler function of the /goform/execCommand file in the Cookie Handler component. The manipulation of...
JetBrains TeamCity Information Disclosure Vulnerability
JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. JetBrains TeamCity suffers from an information...
JetBrains TeamCity 安全漏洞
JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. JetBrains TeamCity suffers from an information...
The vulnerability of the run() function in the FreeIPA server’s script allows a perpetrator to gain unauthorized access to protected information or cause service failures.
The vulnerability of the run function in the ipautil.py script of the FreeIPA server is related to insufficient validation of input data during session establishment when processing the user parameter /sip/session/loginpassword. Exploiting this vulnerability can allow a malicious actor to gain...
SURYA SOFTWARE SYSTEMS Online Shopping System SQL Injection Vulnerability
SURYA SOFTWARE SYSTEMS Online Shopping System is an online shopping system from SURYA SOFTWARE SYSTEMS. A SQL injection vulnerability exists in SURYA SOFTWARE SYSTEMS Online Shopping System version 1.0, which stems from an incorrect manipulation of the parameter password that can lead to sql...
PT-2024-18461 · Unknown · Surya2Developer Online Shopping System
Name of the Vulnerable Software and Affected Versions: Surya2Developer Online Shopping System version 1.0 Description: A critical issue has been found in the file login.php of the component POST Parameter Handler. The manipulation of the password argument with the input...
CVE-2024-1821
A vulnerability was found in code-projects Crime Reporting System 1.0. It has been rated as critical. This issue affects some unknown processing of the file policeadd.php. The manipulation of the argument policename/policeid/policespec/password leads to sql injection. The exploit has been disclos...
PT-2024-18335 · Unknown · Code-Projects Crime Reporting System
Name of the Vulnerable Software and Affected Versions: code-projects Crime Reporting System version 1.0 Description: A critical issue has been found in the code-projects Crime Reporting System, affecting the file inchargelogin.php. The manipulation of the email and password arguments leads to SQL...
Library System SQL Injection Vulnerability
Library System is a library management system by the individual developer nurhodelta17. A SQL injection vulnerability exists in Library System version 1.0, which stems from the fact that incorrect manipulation of the parameters username/password can lead to sql injection...
Crime Reporting System SQL Injection Vulnerability
Crime Reporting System is an online crime reporting system by the individual developer Tedmar Enoria. A SQL injection vulnerability exists in Crime Reporting System version 1.0, which stems from an incorrect manipulation of the parameters email/password that can lead to an SQL injection...
Library System SQL Injection Vulnerability
Library System is a library management system by the individual developer nurhodelta17. A SQL injection vulnerability exists in Library System version 1.0, which stems from the fact that incorrect manipulation of the parameters username and password can lead to SQL injection...