CVE-2023-28701

ELITE TECHNOLOGY CORP. Web Fax has a vulnerability of SQL Injection. An unauthenticated remote attacker can inject SQL commands into the input field of the login page to perform arbitrary system commands, disrupt service or terminate service...

CVE-2023-30603

Hitron Technologies CODA-5310 Telnet function with the default account and password, and there is no warning or prompt to ask users to change the default password and account. An unauthenticated remote attackers can exploit this vulnerability to obtain the administrator’s privilege, resulting in...

Hardcoded credentials

Hitron CODA-5310 has hard-coded encryption/decryption keys in the program code. A remote attacker authenticated as an administrator can decrypt system files using the hard-coded keys for file access, modification, and cause service disruption...

Authorization

Wade Graphic Design FANTSY has a vulnerability of insufficient authorization check. An unauthenticated remote user can exploit this vulnerability by modifying URL parameters to gain administrator privileges to perform arbitrary system operation or disrupt service...

Command injection

Furbo dog camera has insufficient filtering for special parameter of device log management function. An unauthenticated remote attacker in the Bluetooth network with normal user privileges can exploit this vulnerability to perform command injection attack to execute arbitrary system commands or...

Privilege escalation

Wade Graphic Design FANTSY has a vulnerability of insufficient filtering for file type in its file update function. An authenticated remote attacker with general user privilege can exploit this vulnerability to upload a PHP file containing a webshell to perform arbitrary system operation or disru...

Hitron Technologies CODA 访问控制错误漏洞

Hitron Technologies CODA is a wireless router from Hitron Technologies China. An access control error vulnerability exists in Hitron Technologies CODA version 7.2.4.7.1b3, which stems from an insufficient authentication issue in the system configuration interface. An attacker could exploit this...

CVE-2022-47617 Hitron Technologies Inc. CODA-5310 - Hard-coded Cryptographic Key

Hitron CODA-5310 has hard-coded encryption/decryption keys in the program code. A remote attacker authenticated as an administrator can decrypt system files using the hard-coded keys for file access, modification, and cause service disruption...

ELITE Web Fax Server SQL注入漏洞

ELITE Web Fax Server is a web fax server from ELITE. ELITE Web Fax Server suffers from an SQL injection vulnerability that originates from the presence of a SQL injection vulnerability, which can be exploited by an unauthenticated, remote attacker to execute arbitrary system commands, interrupt...

CVE-2022-47617

CVE-2022-47617 affects Hitron CODA-5310, where hard-coded encryption/decryption keys are present in the code. The underlying issue allows a remote attacker, authenticated as an administrator, to decrypt system files using the embedded keys, enabling file access, modification, and potential servic...

Hitron Technologies CODA 授权问题漏洞

Hitron Technologies CODA is a wireless router from Hitron Technologies China. An authorization issue vulnerability exists in Hitron Technologies CODA-5310 version 7.2.4.7.1b3, which stems from the Telnet feature using a default account and password. An attacker could use this vulnerability to gai...

Hitron Technologies CODA 信任管理问题漏洞

Hitron Technologies CODA is a wireless router from Hitron Technologies China. The Hitron Technologies CODA suffers from a trust management issue vulnerability that arises from a hard-coded encryption or decryption key in program code. A remote attacker could use the hard-coded key to decrypt syst...

CVE-2022-47617 Hitron Technologies Inc. CODA-5310 - Hard-coded Cryptographic Key

Hitron CODA-5310 has hard-coded encryption/decryption keys in the program code. A remote attacker authenticated as an administrator can decrypt system files using the hard-coded keys for file access, modification, and cause service disruption...

The vulnerability of the TL1 protocol implementation in Cisco IOS XR Network Convergence System (NCS) 4000 Series routers allows a attacker to cause service interruptions.

The vulnerability of the TL1 protocol implementation in Cisco IOS XR Network Convergence System NCS 4000 Series routers is related to uncontrolled memory allocation. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the form_fast_setting_wifi_set() function in the Tenda AC6 router’s microprogramming software allows a hacker to induce a service failure.

The vulnerability of the formfastsettingwifiset function in the Tenda AC6 router’s microprogramming software is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

CVE-2023-28701

ELITE TECHNOLOGY CORP. Web Fax has a vulnerability of SQL Injection. An unauthenticated remote attacker can inject SQL commands into the input field of the login page to perform arbitrary system commands, disrupt service or terminate service...

The vulnerability of Siemens SCALANCE and RUGGEDCOM industrial switches arises from buffer overflows based on stacks. This allows attackers to trigger a service failure or execute arbitrary code.

The vulnerability of Siemens SCALANCE and RUGGEDCOM industrial switches is caused by buffer overflows based on stacks. Exploiting this vulnerability can allow a remote attacker to cause maintenance failures or execute arbitrary code...

The vulnerability of Siemens Solid Edge’s design and simulation tools relates to the execution of operations beyond the buffer boundaries in memory. This allows attackers to execute arbitrary code or trigger malfunctions during maintenance operations.

The vulnerability of Siemens Solid Edge’s design and simulation tools relates to the execution of operations beyond the buffer boundaries in memory when processing STP files. Exploiting this vulnerability can allow attackers to execute arbitrary code or cause service interruptions by creating a...

The vulnerability of the microprogrammed software of Zyxel ATP network devices, such as USG FLEX, USG FLEX50(W), USG20(W)-VPN, VPN, ZyWALL/USG, arises from copying buffers without checking the size of the input data. This allows a malicious actor to execute arbitrary code or cause service failures.

The vulnerability of microprogrammed network devices such as Zyxel ATP, USG FLEX, USG FLEX50W, USG20W-VPN, VPN, ZyWALL/USG lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service...

The vulnerability of Firefox and Firefox ESR browsers, related to uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of Firefox and Firefox ESR browsers is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...