Tenda W15E 安全漏洞

W15E is a wireless router from Shenzhen Jixiang Tengda Technology Co. Ltd. W15E version 15.11.0.14 has a buffer overflow vulnerability, the vulnerability stems from the formDelPortMapping method of the /goform/DelPortMapping file's portMappingIndex parameter fails to correctly validate the length...

PT-2024-3211 · Tenda · Tenda W15E

Name of the Vulnerable Software and Affected Versions: Tenda W15E version 15.11.0.14 Description: The issue is related to the function formDelPortMapping of the /goform/DelPortMapping endpoint, which is affected by a stack-based buffer overflow when handling the portMappingIndex parameter. This c...

PT-2024-3219 · Tenda · Tenda W15E

Name of the Vulnerable Software and Affected Versions: Tenda W15E version 15.11.0.14 Description: A critical issue has been found in the function formSetPortMapping of the file /goform/SetPortMapping. The manipulation of the arguments portMappingServer, portMappingProtocol, portMappingWan,...

CVE-2024-2188

Cross-Site Scripting XSS vulnerability stored in TP-Link Archer AX50 affecting firmware version 1.0.11 build 2022052. This vulnerability could allow an unauthenticated attacker to create a port mapping rule via a SOAP request and store a malicious JavaScript payload within that rule, which could...

CVE-2024-2188

Cross-Site Scripting XSS vulnerability stored in TP-Link Archer AX50 affecting firmware version 1.0.11 build 2022052. This vulnerability could allow an unauthenticated attacker to create a port mapping rule via a SOAP request and store a malicious JavaScript payload within that rule, which could...

TP-LINK AX50 跨站脚本漏洞

TP-LINK AX50 is a router device from China P&L TP-LINK. A cross-site scripting vulnerability exists in TP-LINK AX50 version 1.0.11 build 2022052. The vulnerability stems from the application's lack of effective filtering and escaping of user-supplied data, which can be exploited by an attacker to...

PT-2024-2143 · Tp Link · Tp-Link Archer C50

Name of the Vulnerable Software and Affected Versions: TP-Link Archer AX50 version 1.0.11 build 2022052 Description: The issue is related to a Cross-Site Scripting XSS vulnerability that could allow an unauthenticated attacker to create a port mapping rule via a SOAP request and store a malicious...

The vulnerability of the virtualization management tool used in the Podman-machine software for managing and launching OCI containers allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Podman-machine management tool, a software solution for managing and starting OCI containers, relates to insufficient protection of sensitive data due to the redirection of host ports to virtual machine ports during the process of mapping ports using gvproxy. Exploiting...

NETGEAR RAX30 UPnP Command Injection Vulnerability

The NETGEAR RAX30 is a wireless router from NETGEAR. The NETGEAR RAX30 suffers from a command injection vulnerability that stems from a command injection vulnerability when processing UPnP port mapping requests, which can be exploited by an attacker to execute arbitrary commands...

NETGEAR RAX30 UPnP Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of UPnP port mapping requests. The issue results from the...

Exploit for Cross-site Scripting in Ourphp

create a vulnerable Docker environment that is susceptible to...

PT-2023-3417 · NetGear · Netgear Rax30

Name of the Vulnerable Software and Affected Versions: NETGEAR RAX30 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this issue. The...

K16843: NAT-PMP vulnerability VU#184540

Security Advisory Description Many NAT-PMP devices are incorrectly configured, allowing them to field requests received on external network interfaces or map forwarding routes to addresses other than that of the requesting host, making them potentially vulnerable to information disclosure and...

CVE-2022-43972

A null pointer dereference vulnerability exists in Linksys WRT54GL Wireless-G Broadband Router with firmware = 4.30.18.006. A null pointer dereference in the soapaction function within the upnp binary can be triggered by an unauthenticated attacker via a malicious POST request invoking the...

PT-2023-14414 · Linksys · Linksys Wrt54Gl Wireless-G Broadband Router

Name of the Vulnerable Software and Affected Versions: Linksys WRT54GL Wireless-G Broadband Router versions = 4.30.18.006 Description: A null pointer dereference issue exists in the soap action function within the upnp binary. This can be triggered by an unauthenticated attacker via a malicious...

CVE-2022-45715

IP-COM M50 V15.11.0.3310768 was discovered to contain multiple buffer overflows via the pLanPortRange and pWanPortRange parameters in the formSetPortMapping function...

CVE-2022-45708

IP-COM M50 V15.11.0.3310768 was discovered to contain a buffer overflow via the sPortMapIndex parameter in the formDelPortMapping function...

Buffer overflow

IP-COM M50 V15.11.0.3310768 was discovered to contain multiple buffer overflows via the pLanPortRange and pWanPortRange parameters in the formSetPortMapping function...

IP-COM M50 安全漏洞

The IP-COM M50 is a wireless router from IP-COM USA. A security vulnerability exists in IP-COM M50 version V15.11.0.3310768, which stems from the discovery of multiple buffer overflow vulnerabilities contained via the pLanPortRange and pWanPortRange parameters in the formSetPortMapping function...

IP-COM M50 安全漏洞

The IP-COM M50 is a wireless router from IP-COM USA. A security vulnerability exists in IP-COM M50 version V15.11.0.3310768, which stems from the discovery of a contained buffer overflow vulnerability via the sPortMapIndex parameter in the formDelPortMapping function...