PT-2024-22576 · Italtel · Italtel I-Mcs Nfv

Name of the Vulnerable Software and Affected Versions: Italtel i-MCS NFV version 12.1.0-20211215 Description: An issue was discovered that allows stored Cross-site scripting XSS to occur via POST requests. This means an attacker can inject malicious scripts into the system, which can then be...

The vulnerability of the formModifyPppAuthWhiteMac function in the /goform/ModifyPppAuthWhiteMac file of the Tenda G3 wireless access point software allows a hacker to execute arbitrary code.

The vulnerability of the formModifyPppAuthWhiteMac function in the /goform/ModifyPppAuthWhiteMac file of the Tenda G3 wireless access point software is related to buffer overflow attacks. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending specially crafted POST...

The vulnerability of the formQosManageDoubleAuto function in the Tenda W9 wireless access point’s microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the formQosManageDoubleAuto function in the wireless access point software Tenda W9 is related to buffer overflow attacks based on stacks. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code by sending specially crafted POST requests...

The vulnerability of the `formSetRemoteWebManage` function in the Tenda W20E router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formSetRemoteWebManage function in the Tenda W20E router software is related to buffer overflow in the stack. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information by sending specially...

The vulnerability of the formwrlSSIDget function in the /goform/wifiSSIDget file of the Tenda W9 wireless access point’s microprogramming software allows a attacker to execute arbitrary code.

The vulnerability of the formwrlSSIDget function in the /goform/wifiSSIDget file of the Tenda W9 wireless access point software is related to buffer overflow based on a stack. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending specially crafted POST requests...

The vulnerability of the formSetCfm function in the Tenda W30E router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formSetCfm function in the Tenda W30E router microprogramming system is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information by sending...

The vulnerability of the fromWizardHandle function in the /goform/WizardHandle file of the Tenda W30E wireless access point software allows a hacker to execute arbitrary code.

The vulnerability of the fromWizardHandle function in the /goform/WizardHandle file of the Tenda W30E wireless access point software is related to a stack-based buffer overflow. Exploiting this vulnerability could allow an attacker to execute arbitrary code by sending specially crafted POST...

The vulnerability of the hnap_main function in the D-LINK GO-RT-AC750 router software allows a hacker to cause a service failure.

The vulnerability of the hnapmain function in the D-LINK GO-RT-AC750 router’s software lies in the fact that the operation results are stored outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to cause a service failure by sending specially crafted POST reques...

PT-2024-27871 · Phoniebox · Phoniebox

Name of the Vulnerable Software and Affected Versions: Phoniebox versions prior to 3.0 Description: The issue is related to insecure handling of the body parameter in POST header requests sent to an instance of the Phoniebox open-source project. This allows an attacker to create a website that,...

CVE-2024-39063

Lime Survey = 6.5.12 is vulnerable to Cross Site Request Forgery CSRF. The YIICSRFTOKEN is only checked when passed in the body of POST requests, but the same check isn't performed in the equivalent GET requests...

PT-2024-28342 · Unknown · Limesurvey

Name of the Vulnerable Software and Affected Versions: Lime Survey versions 6.5.12 and earlier Description: The issue concerns a Cross Site Request Forgery CSRF problem. Specifically, the YII CSRF TOKEN is checked only when passed in the body of POST requests, but this check is not performed for...

CVE-2024-39063

Lime Survey = 6.5.12 is vulnerable to Cross Site Request Forgery CSRF. The YIICSRFTOKEN is only checked when passed in the body of POST requests, but the same check isn't performed in the equivalent GET requests...

PT-2024-27704 · Unknown · Wvp Gb28181 Pro

Name of the Vulnerable Software and Affected Versions: Wvp GB28181 Pro version 2.0 Description: An access control issue allows authenticated attackers to escalate privileges to Administrator via a crafted POST request. Recommendations: For Wvp GB28181 Pro version 2.0, consider restricting access ...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Checkpoint Quantum_Spark_Firmware

CVE-2024-24919 Bulk Scanner CVE-2024-24919 Check Point Securi...

CVE-2023-43847

Incorrect access control in the outlet control function of web interface in Aten PE6208 2.3.228 and 2.4.232 allows remote authenticated users to control all the outlets as if they were the administrator via HTTP POST requests...

CVE-2023-43849

Incorrect access control in firmware upgrade function of web interface in Aten PE6208 2.3.228 and 2.4.232 allows remote authenticated users to submit a firmware image via HTTP POST requests. This may result in DoS or remote code execution...

CVE-2023-43847

Incorrect access control in the outlet control function of web interface in Aten PE6208 2.3.228 and 2.4.232 allows remote authenticated users to control all the outlets as if they were the administrator via HTTP POST requests...

PT-2024-13145 · Aten · Aten Pe6208

Name of the Vulnerable Software and Affected Versions: Aten PE6208 versions 2.3.228 through 2.4.232 Description: The issue is related to incorrect access control in the outlet control function of the web interface, allowing remote authenticated users to control all outlets as if they were the...

tomcat: Leaking of unrelated request bodies in default error page

An information disclosure vulnerability was found in Apache Tomcat. Incomplete POST requests triggered an error response that could contain data from a previous HTTP request. This flaw allows a remote attacker to access files from another user that should be otherwise prevented by limits or...

The vulnerability of the fromNatStaticSetting function in the microprogramming software for Tenda FH1206 allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of the fromNatStaticSetting function in the microprogramming software for Tenda FH1206 is related to the execution of operations outside the buffer in memory when processing the page parameter ip/goform/NatStaticSetting. Exploiting this vulnerability allows a malicious actor to...