4713 matches found
CVE-2023-26848
TOTOlink A7100RUV7.4cu.2313B20191024 was discovered to contain a command injection vulnerability via the org parameter at setting/delStaticDhcpRules...
Command injection
TOTOlink A7100RUV7.4cu.2313B20191024 was discovered to contain a command injection vulnerability via the org parameter at setting/delStaticDhcpRules...
CVE-2023-25218
Tenda AC5 USAC5V1.0RTLV15.03.06.28 was discovered to contain a stack overflow via the formfastsettingwifiset function. This vulnerability allows attackers to cause a Denial of Service DoS or execute arbitrary code via a crafted payload...
TOTOLINK A7100RU 命令注入漏洞
The TOTOLINK A7100RU is a wireless router manufactured by China's Gion Electronics TOTOLINK, mainly used for home network connection. The TOTOLINK A7100RU suffers from a command injection vulnerability that stems from the org parameter in setting/delStaticDhcpRules failing to properly filter...
CVE-2023-26978
CVE-2023-26978 affects TOTOLINK A7100RU (V7.4cu.2313_B20191024). The vulnerability is a command injection in the pppoeAcName parameter exposed via the /setting/setWanIeCfg endpoint. Root cause is improper handling/filtration of input leading to arbitrary command execution. Documents describe impa...
Tenda AC5 缓冲区错误漏洞
Tenda AC5 is a wireless router from Tenda China. A security vulnerability exists in the Tenda AC5 USAC5V1.0RTLV15.03.06.28, which is caused by a stack-based buffer overflow issue in the formfastsettingwifiset function, which can be exploited by an attacker to cause a denial-of-service DoS or to...
CVE-2023-26848
TOTOlink A7100RUV7.4cu.2313B20191024 was discovered to contain a command injection vulnerability via the org parameter at setting/delStaticDhcpRules...
CVE-2023-26978: Improper Neutralization of Special Elements used in a Command
TOTOlink A7100RU V7.4cu.2313B20191024 was discovered to contain a command injection vulnerability via the pppoeAcName parameter at /setting/setWanIeCfg...
CVE-2023-26848: Improper Neutralization of Special Elements used in a Command
TOTOlink A7100RUV7.4cu.2313B20191024 was discovered to contain a command injection vulnerability via the org parameter at setting/delStaticDhcpRules...
The vulnerability of TOTOLINK A7100RU router’s microprogramming software, related to the lack of measures to neutralize special elements, allows a intruder to execute arbitrary commands.
The vulnerability of TOTOLINK A7100RU router microprogramming software is related to the lack of measures taken to neutralize special elements used in the OS’s commands when processing parameters in the /setting/setWanIeCfg directory. Exploiting this vulnerability allows a remote attacker to...
CVE-2023-26978
TOTOlink A7100RU V7.4cu.2313B20191024 was discovered to contain a command injection vulnerability via the pppoeAcName parameter at /setting/setWanIeCfg...
Tenda AC6 form_fast_setting_wifi_set function heap buffer overflow vulnerability
Tenda AC6 is a dual-band wireless router from Tenda that supports 2.4GHz and 5GHz bands with a maximum transmission rate of 1167Mbps. The Tenda AC6 suffers from a heap buffer overflow vulnerability, which originates from the ssid parameter in the formfastsettingwifiset function failing to correct...
Allocation of Resources Without Limits or Throttling
Overview std/mime/multipart is a Go standard library package std/mime/multipart Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling. Go Vulnerability Report: Multipart form parsing can consume large amounts of CPU and memory when processing for...
The vulnerability of the femanager extension of the TYPO3 content management system allows a hacker to set arbitrary passwords for users of the system.
The vulnerability of the femanager extension of the TYPO3 content management system is related to the lack of access control in the InvitationController. Exploiting this vulnerability allows a malicious actor to set arbitrary passwords for users of the system remotely...
TOTOLINK A7100RU wanStrategy Parameter Command Injection Vulnerability
The TOTOLINK A7100RU is a wireless router manufactured by China's Gion Electronics TOTOLINK, mainly used for home network connection. The TOTOLINK A7100RU suffers from a command injection vulnerability that stems from the wanStrategy parameter of /setting/setWanIeCfg failing to correctly filter...
CVE-2022-43623
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...
CVE-2023-27229
TOTOlink A7100RU V7.4cu.2313B20191024 was discovered to contain a command injection vulnerability via the upBw parameter at /setting/setWanIeCfg...
CVE-2023-27231
TOTOlink A7100RU V7.4cu.2313B20191024 was discovered to contain a command injection vulnerability via the downBw parameter at /setting/setWanIeCfg...