7617 matches found
Poly Trio Operating System Command Injection Vulnerability
Poly Trio is a Trio series business conference phone from Poly USA. Poly Trio has an operating system command injection vulnerability that stems from an operating system command injection vulnerability in the Diagnostic Telnet Mode component. Affected products and versions: Poly CCX version 400,...
CVE-2023-4464: Improper Neutralization of Special Elements used in an OS Command
A vulnerability, which was classified as critical, has been found in Poly Trio 8300, Trio 8500, Trio 8800, Trio C60, CCX 350, CCX 400, CCX 500, CCX 505, CCX 600, CCX 700, EDGE E100, EDGE E220, EDGE E300, EDGE E320, EDGE E350, EDGE E400, EDGE E450, EDGE E500, EDGE E550, VVX 101, VVX 150, VVX 201,...
CVE-2023-51094
Tenda M3 V1.0.0.124856 was discovered to contain a Command Execution vulnerability via the function TendaTelnet...
CentOS 7 : curl (RHSA-2023:7743)
The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:7743 advisory. - A use after free vulnerability exists in curl 7.87.0. Curl can be asked to tunnel virtually all protocols it supports through an HTTP proxy. HTTP proxies can...
MLDonkey Detection Consolidation
Consolidation of MLDonkey detections. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.151406";...
Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2023-3395)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle Linux 7 : curl (ELSA-2023-7743)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-7743 advisory. - Fix TFTP small blocksize heap buffer overflow https://curl.haxx.se/docs/CVE-2019-5482.htmlCVE-2019-5482Orabug: 30568724 - CVE-2016-8615 cookie injection for...
curl: Use-after-free triggered by an HTTP proxy deny response
A vulnerability was found in curl. In this issue, curl can be asked to tunnel all protocols virtually it supports through an HTTP proxy. HTTP proxies can deny these tunnel operations using an appropriate HTTP error response code. When getting denied to tunnel the specific SMB or TELNET protocols,...
RHEL 7 : curl (RHSA-2023:7743)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:7743 advisory. The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, a...
Tenda AX3 Telnet Command Execution
The vulnerability of the Telnet protocol implementation in Wi-Fi routers powered by Tenda AX3 software lies in the lack of measures to neutralize special elements during the processing of the /goform/telnet request. Exploiting this vulnerability allows a remote attacker to execute arbitrary...
Tenda W30E Telnet Command Execution
The vulnerability of the Telnet protocol implementation in the microprogramming-based wireless Wi-Fi routers Tenda W30E is related to the lack of measures taken to neutralize special elements during the processing of the /goform/telnet request. Exploiting this vulnerability allows a remote attack...
Tenda AX3 Command Execution Vulnerability
The Tenda Ax3 is an Ax1800 Gigabit Port Dual Band Wifi 6 Wireless Router from Tenda China. A command execution vulnerability exists in Tenda AX3 version V16.03.12.11, which originates from the handler function of /goform/telnet failing to properly filter construct command special characters,...
CVE-2023-49409
Tenda AX3 V16.03.12.11 was discovered to contain a Command Execution vulnerability via the function /goform/telnet...
CVE-2023-49406
Tenda W30E V16.01.0.124843 was discovered to contain a Command Execution vulnerability via the function /goform/telnet...
CVE-2023-49409
Tenda AX3 V16.03.12.11 was discovered to contain a Command Execution vulnerability via the function /goform/telnet...
CVE-2023-49406
Tenda W30E V16.01.0.124843 was discovered to contain a Command Execution vulnerability via the function /goform/telnet...
CVE-2023-49406
Tenda W30E V16.01.0.124843 was discovered to contain a Command Execution vulnerability via the function /goform/telnet...
Command injection
Tenda W30E V16.01.0.124843 was discovered to contain a Command Execution vulnerability via the function /goform/telnet...