CVE-2023-24117

Jensen of Scandinavia Eagle 1200AC V15.03.06.33en was discovered to contain a stack overflow via the wepauth5g parameter at /goform/WifiBasicSet...

CVE-2023-24133

Jensen of Scandinavia Eagle 1200AC V15.03.06.33en was discovered to contain a stack overflow via the wepkey5g parameter at /goform/WifiBasicSet...

CVE-2023-24119

Jensen of Scandinavia Eagle 1200AC V15.03.06.33en was discovered to contain a stack overflow via the ssid parameter at /goform/WifiBasicSet...

CVE-2023-24128

Jensen of Scandinavia Eagle 1200AC V15.03.06.33en was discovered to contain a stack overflow via the wepkey2 parameter at /goform/WifiBasicSet...

CVE-2023-24124

Jensen of Scandinavia Eagle 1200AC V15.03.06.33en was discovered to contain a stack overflow via the wrlEn parameter at /goform/WifiBasicSet...

CVE-2023-23302

The Toybox.GenericChannel.setDeviceConfig API method in CIQ API version 1.2.0 through 4.1.7 does not validate its parameter, which can result in buffer overflows when copying various attributes. A malicious application could call the API method with specially crafted object and hijack the executi...

CVE-2023-25217

Tenda AC5 USAC5V1.0RTLV15.03.06.28 was discovered to contain a stack overflow via the formWifiBasicSet function. This vulnerability allows attackers to cause a Denial of Service DoS or execute arbitrary code via a crafted payload...

CVE-2023-24123

Jensen of Scandinavia Eagle 1200AC V15.03.06.33en was discovered to contain a stack overflow via the wepauth parameter at /goform/WifiBasicSet...

CVE-2023-21167

In setProfileName of DevicePolicyManagerService.java, there is a possible way to crash the SystemUI menu due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2023-21500

Double free validation vulnerability in setPinPadImages in mPOS TUI trustlet prior to SMR May-2023 Release 1 allows local attackers to access the trustlet memory...

CVE-2023-20922

In setMimeGroup of PackageManagerService.java, there is a possible crash loop due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12...

CVE-2023-24134

Jensen of Scandinavia Eagle 1200AC V15.03.06.33en was discovered to contain a stack overflow via the wepkey3 parameter at /goform/WifiBasicSet...

CVE-2023-24121

Jensen of Scandinavia Eagle 1200AC V15.03.06.33en was discovered to contain a stack overflow via the security5g parameter at /goform/WifiBasicSet...

CVE-2023-27772

libiec61850 v1.5.1 was discovered to contain a segmentation violation via the function ControlObjectClientsetOrigin at /client/clientcontrol.c...

Intellian Iridium Certus 700 输入验证错误漏洞

Intellian Iridium Certus 700 is a marine satellite Internet system from Intellian Corporation in South Korea. An input validation error vulnerability exists in Intellian Iridium Certus 700 version 1.0.1, which stems from incorrect parsing of the SSID field and could lead to the injection of...

The vulnerability of the setWiFiWpsConfig function in the microprogramming software of the Totolink-N600R router allows a hacker to execute arbitrary code.

The vulnerability of the setWiFiWpsConfig function in the Totolink-N600R router’s microprogramming system lies in the reading of data outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the /goform/SetStaticRouteCfg component in the Tenda TX3 router software, which involves copying buffers without checking the size of the input data, allows an attacker to compromise the accessibility of protected information.

The vulnerability of the /goform/SetStaticRouteCfg component in the Tenda TX3 router software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...

The vulnerability of the setScheduleCfg function in the /cgi-bin/cstecgi.cgi file of the TOTOLINK A3700R wireless router software allows a attacker to cause a service failure.

The vulnerability of the setScheduleCfg function in the /cgi-bin/cstecgi.cgi file of the TOTOLINK A3700R wireless router software is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending a specially crafted PO...

CVE-2022-40075

Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, formfastsettingwifiset...

CVE-2022-20548

In setParameter of EqualizerEffect.cpp, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...