D-Link DIR-882 缓冲区错误漏洞

The D-Link DIR-882 is a wireless router from China-based AUO D-Link. The D-Link DIR-882 DIR882A1FW130B06 suffers from a buffer error vulnerability that stems from the discovery of a contained stack overflow via the Password parameter in the SetQuickVPNSettings module...

CVE-2022-46560

CVE-2022-46560 affects D-Link DIR-882 (DIR882A1_FW130B06) and DIR-878 (DIR_878_FW1.30B08). The root cause is a stack overflow in the SetWan2Settings Password parameter, leading to high-severity impact (CVE entry cites Confidentiality/Integrity/Availability = High) and network exposure. Public tec...

CVE-2022-46561

The CVE-2022-46561 entry concerns two D-Link router models: DIR-882 (DIR882A1_FW130B06) and DIR-878 (DIR_878_FW1.30B08). The vulnerability is a stack overflow in the SetWanSettings module triggered via the Password parameter. This is the underlying cause stated across the provided documents. The ...

CVE-2022-46563: Out-of-bounds Write

D-Link DIR-882 DIR882A1FW130B06, DIR-878 DIR878FW1.30B08 was discovered to contain a stack overflow via the Password parameter in the SetDynamicDNSSettings module...

CVE-2022-46561: Out-of-bounds Write

D-Link DIR-882 DIR882A1FW130B06, DIR-878 DIR878FW1.30B08 was discovered to contain a stack overflow via the Password parameter in the SetWanSettings module...

CVE-2022-46570

CVE-2022-46570 affects D-Link DIR-882 (DIR882A1_FW130B06) and DIR-878 (DIR_878_FW1.30B08). The root cause is a stack-based overflow in the SetWan3Settings module triggered by the Password parameter. The CVSS metrics indicate a network-vector, low-attack-complexity, high-privilege-requirement, no ...

PT-2022-27553 · Tenda · Tenda W30E

Name of the Vulnerable Software and Affected Versions: Tenda W30E version 1.0.1.25633 Description: A stack overflow issue was discovered via the PPPOEPassword parameter at the "/goform/QuickIndex" API endpoint. Recommendations: For Tenda W30E version 1.0.1.25633, avoid using the PPPOEPassword...

PT-2022-27601 · Tenda · Tenda Ac6

Name of the Vulnerable Software and Affected Versions: Tenda AC6V1.0 version 15.03.05.19 Description: A buffer overflow issue was discovered via the wpapsk crypto parameter in the fromSetWirelessRepeat function. This allows for potential exploitation. Recommendations: For Tenda AC6V1.0 version...

PT-2022-27442 · Unknown · Web-Based Student Clearance System

Name of the Vulnerable Software and Affected Versions: Web-Based Student Clearance System version 1.0 Description: The issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the txtnew password parameter in the changepassword.php file. This enables the...

CVE-2022-43262

Human Resource Management System v1.0 was discovered to contain a SQL injection vulnerability via the password parameter at /hrm/controller/login.php...

Sql injection

Human Resource Management System v1.0 was discovered to contain a SQL injection vulnerability via the password parameter at /hrm/controller/login.php...

Human Resource Management System SQL注入漏洞

Human Resource Management System is a human resource management system by maverickosama Personal Developer. A SQL injection vulnerability exists in Human Resource Management System v1.0, which stems from the password parameter of its /hrm/controller/login.php component that allows an attacker to...

CVE-2022-43262

Human Resource Management System v1.0 was discovered to contain a SQL injection vulnerability via the password parameter at /hrm/controller/login.php...

PT-2022-26816 · Unknown · Human Resource Management System

Name of the Vulnerable Software and Affected Versions: Human Resource Management System version 1.0 Description: A SQL injection issue was found in the Human Resource Management System. The vulnerability can be exploited via the password parameter at the "/hrm/controller/login.php" API endpoint...

CVE-2022-43262: Improper Neutralization of Special Elements used in an SQL Command

Human Resource Management System v1.0 was discovered to contain a SQL injection vulnerability via the password parameter at /hrm/controller/login.php...

MonikaBrzica scm 安全漏洞

scm is a supply chain management software by MonikaBrzica Individual Developer. A security vulnerability exists in MonikaBrzica scm, which stems from some unknown function of its upisubazu.php component that operates on the email/lozinka/ime/id parameter, leading to an attacker to implement SQL...

HMS-PHP 安全漏洞

HMS-PHP is a CSE309 IUB final web application project by the individual developer Pingkon Augustine Rozario. A security vulnerability exists in HMS-PHP that stems from some unknown processing in the file admin/adminlogin.php being affected, where manipulation of the parameter uname/pass can lead ...

HMS-PHP 安全漏洞

HMS-PHP is a CSE309 IUB final web application project by the individual developer Pingkon Augustine Rozario. A security vulnerability exists in Pingkon HMS-PHP, which stems from an unknown function in the file /admin/admin.php being affected, where manipulation of the parameter uname/pass can lea...

JetBrains TeamCity 日志信息泄露漏洞

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis, and build issue analysis reports. A log information disclosure vulnerability exists in JetBrains TeamCit...

Simple Cold Storage Management System 跨站请求伪造漏洞

Simple Cold Storage Management System is a Simple Cold Storage Management System by Carlo Montero Personal Developer. A security vulnerability exists in Simple Cold Storage Management System version 1.0, which stems from a change in the operation parameter password that could lead to cross-site...