146 matches found
CVE-2024-30621
Tenda AX1803 v1.0.0.1 contains a stack overflow via the serverName parameter in the function fromAdvSetMacMtuWan...
CVE-2024-30621
Tenda AX1803 v1.0.0.1 contains a stack overflow via the serverName parameter in the function fromAdvSetMacMtuWan...
CVE-2024-30621
Tenda AX1803 v1.0.0.1 contains a stack overflow via the serverName parameter in the function fromAdvSetMacMtuWan...
PT-2024-6577 · Tenda · Tenda Ax1803
Name of the Vulnerable Software and Affected Versions: Tenda AX1803 version 1.0.0.1 Description: The issue is related to a stack overflow in the fromAdvSetMacMtuWan function, specifically via the serverName parameter. This can be exploited by sending specially crafted POST requests, potentially...
CVE-2024-30621
CVE-2024-30621 affects Tenda AX1803 v1.0.0.1, with a stack overflow in the fromAdvSetMacMtuWan function exploitable via the serverName parameter. Documented impact includes potential effects on confidentiality, integrity, and availability. The issue is described across multiple sources (NVD/Red H...
CVE-2024-30621
Tenda AX1803 v1.0.0.1 contains a stack overflow via the serverName parameter in the function fromAdvSetMacMtuWan...
Tenda AX1803 安全漏洞
Tenda AX1803 is a dual-band Gigabit WIFI6 router from Tenda China. A security vulnerability exists in Tenda AX1803 version v1.0.0.1, which originates from a discovery containing a stack overflow via the serverName parameter in the function fromAdvSetMacMtuWan...
CVE-2024-30621: Out-of-bounds Write
Tenda AX1803 v1.0.0.1 contains a stack overflow via the serverName parameter in the function fromAdvSetMacMtuWan...
CVE-2023-48974
Cross Site Scripting vulnerability in Axigen WebMail prior to 10.3.3.61 allows a remote attacker to escalate privileges via a crafted script to the serverNameinput parameter...
PT-2024-13666 · Axigen · Axigen Webmail
Name of the Vulnerable Software and Affected Versions: Axigen WebMail versions prior to 10.3.3.61 Description: The issue allows a remote attacker to escalate privileges via a crafted script to the serverName input parameter. This is a Cross Site Scripting vulnerability. Recommendations: For...
The web interface of Netgear’s SRX5308 router software has vulnerabilities that allow attackers to carry out cross-site scripting attacks.
The vulnerability in the web interface of Netgear SRX5308 integrated software routers exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out a cross-site scripting attack by sending a specially crafted HTTP...
SUSE CVE-2014-6060
The getoption function in dhcpcd 4.0.0 through 6.x before 6.4.3 allows remote DHCP servers to cause a denial of service by resetting the DHOOPTIONSOVERLOADED option in the 1 bootfile or 2 servername section, which triggers the option to be processed again...
CVE-2022-48123
TOTOlink A7100RU V7.4cu.2313B20191024 was discovered to contain a command injection vulnerability via the servername parameter in the setting/delStaticDhcpRules function...
Command injection
TOTOlink A7100RU V7.4cu.2313B20191024 was discovered to contain a command injection vulnerability via the servername parameter in the setting/delStaticDhcpRules function...
CVE-2022-48123
TOTOlink A7100RU V7.4cu.2313B20191024 was discovered to contain a command injection vulnerability via the servername parameter in the setting/delStaticDhcpRules function...
CVE-2022-48123: Improper Neutralization of Special Elements used in an OS Command
TOTOlink A7100RU V7.4cu.2313B20191024 was discovered to contain a command injection vulnerability via the servername parameter in the setting/delStaticDhcpRules function...
TOTOLINK A7100RU 操作系统命令注入漏洞
The TOTOLINK A7100RU is a wireless router from China's Gion Electronics TOTOLINK. An operating system command injection vulnerability exists in the TOTOlink A7100RU version V7.4cu.2313B20191024, which stems from the servername parameter of the set/delStaticDhcpRules method containing a command...
GO-2022-0370 Man-in-the-middle attack due to improper validation of certificate in mellium.im/xmpp
Websocket client connections are vulnerable to man-in-the-middle attacks via DNS spoofing. When looking up a WSS endpoint using a DNS TXT record, the server TLS certificate is incorrectly validated using the name of the server returned by the TXT record request, not the name of the the server bei...