Celestial AbsoluteTelnet 安全漏洞

Celestial AbsoluteTelnet is a Telnet/SSH terminal client software developed by the American company Celestial. Version 11.12 of Celestial AbsoluteTelnet contains a security vulnerability, which stems from a buffer overflow in the SSH2 username input field, potentially leading to a denial-of-servi...

CVE-2020-37171

TapinRadio 2.12.3 contains a denial of service vulnerability in the application proxy username configuration that allows local attackers to crash the application. Attackers can overwrite the username field with 10,000 bytes of arbitrary data to trigger an application crash and prevent normal...

CVE-2020-37171 TapinRadio 2.12.3 - 'username' Denial of Service

TapinRadio 2.12.3 contains a denial of service vulnerability in the application proxy username configuration that allows local attackers to crash the application. Attackers can overwrite the username field with 10,000 bytes of arbitrary data to trigger an application crash and prevent normal...

CVE-2020-37171 TapinRadio 2.12.3 - 'username' Denial of Service

TapinRadio 2.12.3 contains a denial of service vulnerability in the application proxy username configuration that allows local attackers to crash the application. Attackers can overwrite the username field with 10,000 bytes of arbitrary data to trigger an application crash and prevent normal...

CVE-2020-37171

Summary: TapinRadio 2.12.3 contains a local DoS vulnerability in the application proxy username configuration. An attacker who can run code on the host can cause the program to crash by overwriting the username field with 10,000 bytes of arbitrary data. Affected software: TapinRadio version 2.12....

CVE-2020-37166 AbsoluteTelnet 11.12 - 'SSH2/username' Denial of Service

AbsoluteTelnet 11.12 contains a denial of service vulnerability in the SSH2 username input field that allows local attackers to crash the application. Attackers can overwrite the username field with a 1000-byte buffer, causing the application to become unresponsive and terminate...

CVE-2020-37166 AbsoluteTelnet 11.12 - 'SSH2/username' Denial of Service

AbsoluteTelnet 11.12 contains a denial of service vulnerability in the SSH2 username input field that allows local attackers to crash the application. Attackers can overwrite the username field with a 1000-byte buffer, causing the application to become unresponsive and terminate...

CVE-2020-37166

CVE-2020-37166 affects AbsoluteTelnet 11.12. The vulnerability resides in the SSH2 username input field where a local attacker can overwrite the username with a 1000-byte buffer, causing the application to become unresponsive and terminate (Denial of Service). The root cause is a handling/validat...

CVE-2020-37155

Core FTP Lite 1.3 contains a buffer overflow vulnerability in the username input field that allows attackers to crash the application by supplying oversized input. Attackers can generate a 7000-byte payload of repeated 'A' characters to trigger an application crash without requiring additional...

CVE-2020-37155 Core FTP Lite 1.3 - Denial of Service (PoC)

Core FTP Lite 1.3 contains a buffer overflow vulnerability in the username input field that allows attackers to crash the application by supplying oversized input. Attackers can generate a 7000-byte payload of repeated 'A' characters to trigger an application crash without requiring additional...

CVE-2020-37155 Core FTP Lite 1.3 - Denial of Service (PoC)

Core FTP Lite 1.3 contains a buffer overflow vulnerability in the username input field that allows attackers to crash the application by supplying oversized input. Attackers can generate a 7000-byte payload of repeated 'A' characters to trigger an application crash without requiring additional...

CVE-2020-37155

Core FTP Lite 1.3 is affected by a buffer overflow in the username input field that can crash the application. A ~7000-byte payload of repeated 'A' characters is sufficient for exploitation, with no user interaction required and no additional interaction needed. Public details do not include a co...

Updated python-django packages fix security vulnerabilities

Username enumeration through timing difference in modwsgi authentication handler. CVE-2025-13473 Potential denial-of-service vulnerability via repeated headers when using ASGI. CVE-2025-14550 Potential SQL injection via raster lookups on PostGIS. CVE-2026-1207 Potential denial-of-service...

MGASA-2026-0032 Updated python-django packages fix security vulnerabilities

Username enumeration through timing difference in modwsgi authentication handler. CVE-2025-13473 Potential denial-of-service vulnerability via repeated headers when using ASGI. CVE-2025-14550 Potential SQL injection via raster lookups on PostGIS. CVE-2026-1207 Potential denial-of-service...

EDIMAX BR-6208AC 安全漏洞

The EDIMAX BR-6208AC is a wireless broadband router produced by Edimax Corporation of Taiwan. A security vulnerability exists in the Edimax BR-6208AC 21.02 version, which stems from incorrect handling of the Username/Password parameter. This vulnerability may allow unauthorized users to access th...

📄 MikroTik RouterOS WinBox 3.41 Username Enumeration

Proof of concept exploit for MikroTik RouterOS WinBox version 3.41 that demonstrates a username enumeration vulnerability. ============================================================================================================================================= | Title : MikroTik RouterOS WinB...

PT-2026-6832

Name of the Vulnerable Software and Affected Versions AbsoluteTelnet version 11.12 Description The software contains a denial of service issue in the SSH2 username input field. Local attackers can cause the application to crash by overwriting the username field with a 1000-byte buffer, leading to...

PT-2026-6823

Name of the Vulnerable Software and Affected Versions Core FTP Lite version 1.3 Description Core FTP Lite version 1.3 contains a buffer overflow issue in the username input field. An attacker can cause the application to crash by providing an oversized input, such as a 7000-byte payload consistin...

PT-2026-6818

Name of the Vulnerable Software and Affected Versions AMSS++ version 4.7 Description AMSS++ 4.7 has a flaw that permits unauthorized access to administrative accounts. This is due to the use of hardcoded credentials, specifically the default username 'admin' and password '1234'. Successful...

PT-2026-6834

Name of the Vulnerable Software and Affected Versions TapinRadio version 2.12.3 Description TapinRadio version 2.12.3 has a denial of service issue in the application proxy username configuration. Local attackers can cause the application to crash by overwriting the username field with 10,000 byt...