CVE-2021-3376

CVE-2021-3376 affects CuppaCMS (versions before 31 Jan 2021). An authenticated attacker can escalate privileges by sending a crafted POST request that uses the user_group_id_field parameter. The vulnerability stems from a faulty programmatic call related to privilege handling in CuppaCMS. Documen...

CuppaCMS 安全漏洞

CuppaCMS is a Content Management System CMS. An elevation of privilege vulnerability exists in CuppaCMS, which stems from a faulty programmatic call to a high-level native procedure. An authenticated attacker uses the usergroupidfield parameter to gain escalated privileges via a crafted POST...

The vulnerability of the FUN_80046eb4 (/formSetPortTr) function in the wireless router software from D-Link, DIR-809, allows a hacker to execute any code in the target system.

The vulnerability of the FUN80046eb4 /formSetPortTr function of the wireless router D-Link DIR-809 is related to stack buffer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code within the system using the created POST request...

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

log4j-CVE-2021-44228 On December 5, 2021, Apache identified a...

Free School Management Software 1.0 - (multiple) Stored Cross-Site Scripting Vulnerability

Exploit Title: Free School Management Software 1.0 - 'multiple' Stored Cross-Site Scripting XSS Exploit Author: fuzzyap1 Category: Web application Vendor Homepage: https://www.sourcecodester.com/php/15073/free-school-management-software.html Software Link:...

Free School Management Software 1.0 Cross Site Scripting

Exploit Title: Free School Management Software 1.0 - 'multiple' Stored Cross-Site Scripting XSS Exploit Author: fuzzyap1 Date: 7-12-2021 Category: Web application Vendor Homepage: https://www.sourcecodester.com/php/15073/free-school-management-software.html Software Link:...

Kabir Alhasan Student Management System 1.0 SQL Injection Vulnerability

Exploit Title: Student Management System 1.0 - SQLi Authentication Bypass Exploit Author: Enes Özeser Vendor Homepage: https://www.sourcecodester.com/php/14268/student-management-system.html Version: 1.0 Tested on: Windows & WampServer CVE: CVE-2020-23935 1- Go to following url...

Exploit for Path Traversal in Vmware Cloud_Foundation

PoC exploit for CVE-2021-22005, a vulnerability in VMware vCenter Server allowing file upload to remote code execution. The target product/service is VMware vCenter Server, and the vulnerability class/vector is file upload to RCE. The probable entry point is a POST request to the...

Tab - Accordion, FAQ < 1.3.2 - Unauthenticated AJAX Calls

All AJAX actions of the plugin are available to both unauthenticated and authenticated users, allowing unauthenticated attackers to modify various data in the plugin, such as add/edit/delete arbitrary tabs. v1.3.0 added CSRF checks, however authorisation was still missing and has been added in...

D-Link DIR-809 formVirtualServ Buffer Overflow Vulnerability (CNVD-2021-94719)

The D-Link DIR-809 is a dual-band router from China's AUO D-Link. A buffer overflow vulnerability exists in the D-Link DIR-809, which stems from the FUN8004776c function in the product/formVirtualServ link failing to effectively determine data boundaries. An attacker could cause a denial of servi...

D-Link DIR-809 formWlanSetup buffer overflow vulnerability

A buffer overflow vulnerability exists in the D-Link DIR-809, a dual-band router from D-Link China, which stems from the failure of the FUN80040af8 function in the product/formWlanSetup link to effectively determine data boundaries. An attacker could cause a buffer overflow resulting in a denial ...

D-Link DIR-809 formVirtualApp buffer overflow vulnerability

D-Link DIR-809 is a dual-band router from D-Link China.D-Link DIR-809 device firmware version DIR-809AxFW1.12WWB0320190410 has a buffer overflow vulnerability, which originates from FUN8004776c of the software formVirtualApp A stack buffer overflow vulnerability exists in the function. The...

D-Link DIR-809 formSetPortTr Buffer Overflow Vulnerability

A buffer error vulnerability exists in the D-Link DIR-809, a dual-band router from D-Link China. The vulnerability stems from the failure of the sub80046EB4 function in the product/formSetPortTr link to effectively determine data boundaries. An attacker could cause a buffer overflow resulting in ...

D-Link DIR-809 formSetPortTr Buffer Overflow Vulnerability (CNVD-2021-94717)

D-Link DIR-809 is a dual-band router from D-Link, China.D-Link DIR-809 device firmware version DIR-809AxFW1.12WWB0320190410 has a buffer overflow vulnerability, which originates from FUN8004776c in the product formSetPortTr function fails to effectively determine data boundaries. An attacker coul...

D-Link DIR-809 formAdvFirewall buffer overflow vulnerability

A buffer overflow vulnerability exists in the D-Link DIR-809, a dual-band router from D-Link China.The vulnerability stems from the failure of the FUN800462c4 function in the product/formAdvFirewall link to effectively determine data boundaries. An attacker could cause a buffer overflow resulting...

CVE-2021-44352

A Stack-based Buffer Overflow vulnerability exists in the Tenda AC15 V15.03.05.18multi device via the list parameter in a post request in goform/SetIpMacBind...

Stack overflow

A Stack-based Buffer Overflow vulnerability exists in the Tenda AC15 V15.03.05.18multi device via the list parameter in a post request in goform/SetIpMacBind...

CVE-2021-44352

A Stack-based Buffer Overflow vulnerability exists in the Tenda AC15 V15.03.05.18multi device via the list parameter in a post request in goform/SetIpMacBind...

PT-2021-24085 · Tenda · Tenda Ac15

Name of the Vulnerable Software and Affected Versions: Tenda AC15 version V15.03.05.18 multi Description: A Stack-based Buffer Overflow issue exists in the Tenda AC15 device via the list parameter in a POST request in "goform/SetIpMacBind". Recommendations: For Tenda AC15 version V15.03.05.18...

CVE-2021-33266

D-Link DIR-809 devices with firmware through DIR-809AxFW1.12WWB0320190410 were discovered to contain a stack buffer overflow vulnerability in the function FUN8004776c in /formVirtualApp. This vulnerability is triggered via a crafted POST request...