Tenda F1202 Buffer Error Vulnerability

Tenda F1202 is a dual-band Wi-Fi router with fifth-generation technology from Tenda, China. A security vulnerability exists in the Tenda F1202 V1.2.0.9, PA202 V1.1.2.5, PW201A V1.1.2.5, and FH1202 V1.2.0.9 versions, which originates from a stack overflow vulnerability in the page parameter of the...

Foreman: Arbitrary code execution through templates

An arbitrary code execution flaw was found in Foreman. This flaw allows an admin user to bypass safe mode in templates and execute arbitrary code on the underlying operating system...

CVE-2023-32001

Rejected reason: We issued this CVE pre-maturely, as we have subsequently realized that this issue points out a problem that there really is no safe measures around or protections for...

Design/Logic Flaw

Rejected reason: We issued this CVE pre-maturely, as we have subsequently realized that this issue points out a problem that there really is no safe measures around or protections for...

CVE-2023-32001

CVE-2023-32001 is corroborated by connected records as affecting curl in multiple packages. Specifically, CVE-2023-32001 targets curl versions below 8.2.1-1 (e.g., CBLMARINER entries for curl

The vulnerability of the validate_path_is_safe() function in the machine learning lifecycle management platform allows a attacker to disclose sensitive information or execute arbitrary files.

The vulnerability of the validatepathissafe function in the machine learning model lifecycle management platform exists due to an incorrect restriction on the path name to the restricted-access directory. Exploiting this vulnerability could allow a malicious actor to disclose sensitive informatio...

SUSE CVE-2023-32001

We issued this CVE pre-maturely, as we have subsequently realized that this issue points out a problem that there really is no safe measures around or protections for...

WordPress WP Security Safe Plugin <= 2.5.1 is vulnerable to Cross Site Scripting (XSS)

Software WP Security Safe Type Plugin Vulnerable versions = 2.5.1 Fixed in 2.5.2 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 65de9592a0f7 Credits Rafie Muhammad Patchstack...

PT-2023-26082 · Tenda · Tenda Fh1202

Name of the Vulnerable Software and Affected Versions: Tenda F1202 version V1.0BR V1.2.0.20408 Tenda FH1202 version V1.2.0.19 EN Description: A stack overflow was discovered in the page parameter in the fromSafeMacFilter function. This issue affects the specified versions of Tenda F1202 and FH120...

Tenda F1202 缓冲区错误漏洞

The Tenda F1202 is a dual-band Wi-Fi router with fifth-generation technology from Tenda China. A security vulnerability exists in the Tenda F1202 prior to version V1.0BRV1.2.0.20, which stems from a buffer overflow on the page page of the fromSafeUrlFilter method...

Tenda F1202 缓冲区错误漏洞

The Tenda F1202 is a dual-band Wi-Fi router with fifth-generation technology from Tenda China. A security vulnerability exists in the Tenda F1202 prior to version V1.0BRV1.2.0.20, which stems from a buffer overflow on the page page of the fromSafeMacFilter method...

Tenda F1202 缓冲区错误漏洞

The Tenda F1202 is a dual-band Wi-Fi router with fifth-generation technology from Tenda China. A security vulnerability exists in the Tenda F1202 prior to version V1.0BRV1.2.0.20, which stems from a buffer overflow on the page page of the fromSafeClientFilter method...

Exploit for Path Traversal in Ghost

Bug Bounty Report - Ghost Path Traversal CVE-2023-32235...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from improper input validation of the Modem when receiving LTE Safe Mode Command messages...

openSUSE 15 Security Update : guile1, lilypond (openSUSE-SU-2023:0137-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2023:0137-1 advisory. - The mkdir procedure of GNU Guile temporarily changed the process' umask to zero. During that time window, in a multithreaded application, other...

CVE-2023-35801

A directory traversal vulnerability in Safe Software FME Server before 2022.2.5 allows an attacker to bypass validation when editing a network-based resource connection, resulting in the unauthorized reading and writing of arbitrary files. Successful exploitation requires an attacker to have acce...

CVE-2023-35801

A directory traversal vulnerability in Safe Software FME Server before 2022.2.5 allows an attacker to bypass validation when editing a network-based resource connection, resulting in the unauthorized reading and writing of arbitrary files. Successful exploitation requires an attacker to have acce...

Directory traversal

A directory traversal vulnerability in Safe Software FME Server before 2022.2.5 allows an attacker to bypass validation when editing a network-based resource connection, resulting in the unauthorized reading and writing of arbitrary files. Successful exploitation requires an attacker to have acce...

CVE-2023-35801

Affected software: Safe Software FME Server (prior to 2022.2.5). Vulnerability: directory traversal exposing the ability to bypass validation when editing a network-based resource connection, enabling unauthorized reading and writing of arbitrary files. Requirements/impact: attacker must have a u...

CVE-2023-35801

A directory traversal vulnerability in Safe Software FME Server before 2022.2.5 allows an attacker to bypass validation when editing a network-based resource connection, resulting in the unauthorized reading and writing of arbitrary files. Successful exploitation requires an attacker to have acce...