TP-LINK AX50 跨站脚本漏洞

TP-LINK AX50 is a router device from China P&L TP-LINK. A cross-site scripting vulnerability exists in TP-LINK AX50 version 1.0.11 build 2022052. The vulnerability stems from the application's lack of effective filtering and escaping of user-supplied data, which can be exploited by an attacker to...

PT-2024-2143 · Tp Link · Tp-Link Archer C50

Name of the Vulnerable Software and Affected Versions: TP-Link Archer AX50 version 1.0.11 build 2022052 Description: The issue is related to a Cross-Site Scripting XSS vulnerability that could allow an unauthenticated attacker to create a port mapping rule via a SOAP request and store a malicious...

The vulnerability of the virtualization management tool used in the Podman-machine software for managing and launching OCI containers allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Podman-machine management tool, a software solution for managing and starting OCI containers, relates to insufficient protection of sensitive data due to the redirection of host ports to virtual machine ports during the process of mapping ports using gvproxy. Exploiting...

NETGEAR RAX30 UPnP Command Injection Vulnerability

The NETGEAR RAX30 is a wireless router from NETGEAR. The NETGEAR RAX30 suffers from a command injection vulnerability that stems from a command injection vulnerability when processing UPnP port mapping requests, which can be exploited by an attacker to execute arbitrary commands...

NETGEAR RAX30 UPnP Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of UPnP port mapping requests. The issue results from the...

Exploit for Cross-site Scripting in Ourphp

create a vulnerable Docker environment that is susceptible to...

PT-2023-3417 · NetGear · Netgear Rax30

Name of the Vulnerable Software and Affected Versions: NETGEAR RAX30 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this issue. The...

K16843: NAT-PMP vulnerability VU#184540

Security Advisory Description Many NAT-PMP devices are incorrectly configured, allowing them to field requests received on external network interfaces or map forwarding routes to addresses other than that of the requesting host, making them potentially vulnerable to information disclosure and...

CVE-2022-43972

A null pointer dereference vulnerability exists in Linksys WRT54GL Wireless-G Broadband Router with firmware = 4.30.18.006. A null pointer dereference in the soapaction function within the upnp binary can be triggered by an unauthenticated attacker via a malicious POST request invoking the...

PT-2023-14414 · Linksys · Linksys Wrt54Gl Wireless-G Broadband Router

Name of the Vulnerable Software and Affected Versions: Linksys WRT54GL Wireless-G Broadband Router versions = 4.30.18.006 Description: A null pointer dereference issue exists in the soap action function within the upnp binary. This can be triggered by an unauthenticated attacker via a malicious...

CVE-2022-45715

IP-COM M50 V15.11.0.3310768 was discovered to contain multiple buffer overflows via the pLanPortRange and pWanPortRange parameters in the formSetPortMapping function...

CVE-2022-45708

IP-COM M50 V15.11.0.3310768 was discovered to contain a buffer overflow via the sPortMapIndex parameter in the formDelPortMapping function...

Buffer overflow

IP-COM M50 V15.11.0.3310768 was discovered to contain multiple buffer overflows via the pLanPortRange and pWanPortRange parameters in the formSetPortMapping function...

PT-2022-27628 · Ip Com · Ip-Com M50

Name of the Vulnerable Software and Affected Versions: IP-COM M50 version 15.11.0.3310768 Description: The issue is related to multiple buffer overflows that can occur via the pLanPortRange and pWanPortRange parameters in the formSetPortMapping function. Recommendations: For IP-COM M50 version...

IP-COM M50 安全漏洞

The IP-COM M50 is a wireless router from IP-COM USA. A security vulnerability exists in IP-COM M50 version V15.11.0.3310768, which stems from the discovery of a contained buffer overflow vulnerability via the sPortMapIndex parameter in the formDelPortMapping function...

IP-COM M50 安全漏洞

The IP-COM M50 is a wireless router from IP-COM USA. A security vulnerability exists in IP-COM M50 version V15.11.0.3310768, which stems from the discovery of multiple buffer overflow vulnerabilities contained via the pLanPortRange and pWanPortRange parameters in the formSetPortMapping function...

CVE-2022-42053

Tenda AC1200 Router Model W15Ev2 V15.11.0.101576 was discovered to contain a command injection vulnerability via the PortMappingServer parameter in the setPortMapping function...

PT-2022-26223 · Tenda · Tenda Ac1200 Router

Name of the Vulnerable Software and Affected Versions: Tenda AC1200 Router Model W15Ev2 version V15.11.0.101576 Description: A command injection issue was discovered via the PortMappingServer parameter in the setPortMapping function. This allows for potential exploitation. Recommendations: For...

Tenda AC1200 操作系统命令注入漏洞

The Tenda AC1200 is a wireless router from Tenda, China. A security vulnerability exists in the Tenda AC1200 version 15.11.0.10, which is caused by a command injection vulnerability via the PortMappingServer parameter in the setPortMapping function...

CVE-2022-40855

Tenda W20E router V15.11.0.6 contains a stack overflow in the function formSetPortMapping with post request 'goform/setPortMapping/'. This vulnerability allows attackers to cause a Denial of Service DoS or Remote Code Execution RCE via the portMappingServer, portMappingProtocol, portMappingWan,...