acedit (1.0.0), allennlp (>=0.4.0, <=0.4.1) +45 more potentially affected by CVE-2023-41419 via gevent (1.2.2)

gevent PYPI version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on gevent and may be impacted: - acedit 1.0.0 - allennlp =0.4.0, =0.7.0, =0.5.7, =11.0.3, =11.0.2, =11.0.2, =11.0.2, =11.0.2, =11.0.2, =11.0.2, =11.0.2, =11.0.2, =11.0.6 and more...

CVE-2023-5020

A vulnerability, which was classified as critical, has been found in 07FLY CRM V2. This issue affects some unknown processing of the file /index.php/sysmanage/Login/loginauth/ of the component Administrator Login Page. The manipulation of the argument account leads to sql injection. The attack ma...

Sql injection

A vulnerability, which was classified as critical, has been found in 07FLY CRM V2. This issue affects some unknown processing of the file /index.php/sysmanage/Login/loginauth/ of the component Administrator Login Page. The manipulation of the argument account leads to sql injection. The attack ma...

CVE-2023-5020

CVE-2023-5020 describes a SQL injection in 07FLY CRM V2, affecting the Administrator Login Page at /index.php/sysmanage/Login/login_auth/ via the account parameter. The vulnerability can be exploited remotely and is rated critical/high across sources, with remote network access and no complexity/...

CVE-2023-5020 07FLY CRM Administrator Login Page sql injection

A vulnerability, which was classified as critical, has been found in 07FLY CRM V2. This issue affects some unknown processing of the file /index.php/sysmanage/Login/loginauth/ of the component Administrator Login Page. The manipulation of the argument account leads to sql injection. The attack ma...

CVE-2023-5020: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in 07FLY CRM V2. This issue affects some unknown processing of the file /index.php/sysmanage/Login/loginauth/ of the component Administrator Login Page. The manipulation of the argument account leads to sql injection. The attack ma...

PT-2023-31499 · Unknown · 07Fly Crm V2

Name of the Vulnerable Software and Affected Versions: 07FLY CRM V2 Description: A critical issue has been found in the Administrator Login Page component, specifically affecting the /index.php/sysmanage/Login/login auth/ file. The manipulation of the account argument leads to SQL injection. This...

GO-2023-2052 IsFromLocal local address check can be circumvented in github.com/gofiber/fiber/v2

The Ctx.IsFromLocal function can incorrectly report a request as being sent from localhost when the request contains an X-Forwarded-For header containing a localhost IP address...

kernel: buffer overflow in ceph file net/ceph/messenger_v2.c

An flaw was found in net/ceph/messengerv2.c in the Linux Kernel. An integer signing error leads to a buffer overflow and remote code execution via HELLO or one of the AUTH frames. This issue occurs due to an untrusted length taken from a TCP packet in cephdecode32...

Authentication flaw

An issue was discovered in MoFi Network MOFI4500-4GXeLTE-V2 3.5.6-xnet-5052 allows attackers to bypass the authentication and execute arbitrary code via crafted HTTP request...

MoFi Network MOFI4500-4GXeLTE-V2 Authorization Issues Vulnerability

The MoFi Network MOFI4500-4GXeLTE-V2 is a wireless router from MoFi Network Canada. A security vulnerability exists in the MoFi Network MOFI4500-4GXeLTE-V2 version 3.5.6-xnet-5052, which originates from a vulnerability that allows an attacker to bypass authentication and execute arbitrary code vi...

CVE-2021-27715: Improper Authentication

An issue was discovered in MoFi Network MOFI4500-4GXeLTE-V2 3.5.6-xnet-5052 allows attackers to bypass the authentication and execute arbitrary code via crafted HTTP request...

CVE-2023-39238

It is identified a format string vulnerability in ASUS RT-AX56U V2. This vulnerability is caused by lacking validation for a specific value within its setiperf3svr.cgi module. A remote attacker with administrator privilege can exploit this vulnerability to perform remote arbitrary code execution,...

CVE-2023-39240

It is identified a format string vulnerability in ASUS RT-AX56U V2’s iperf client function API. This vulnerability is caused by lacking validation for a specific value within its setiperf3cli.cgi module. A remote attacker with administrator privilege can exploit this vulnerability to perform remo...

CVE-2023-39239

It is identified a format string vulnerability in ASUS RT-AX56U V2’s General function API. This vulnerability is caused by lacking validation for a specific value within its apply.cgi module. A remote attacker with administrator privilege can exploit this vulnerability to perform remote arbitrary...

Format string

It is identified a format string vulnerability in ASUS RT-AX56U V2’s iperf client function API. This vulnerability is caused by lacking validation for a specific value within its setiperf3cli.cgi module. An unauthenticated remote attacker can exploit this vulnerability without privilege to perfor...

Format string

It is identified a format string vulnerability in ASUS RT-AX56U V2. This vulnerability is caused by lacking validation for a specific value within its setiperf3svr.cgi module. An unauthenticated remote attacker can exploit this vulnerability without privilege to perform remote arbitrary code...

CVE-2023-39240

CVE-2023-39240 affects ASUS RT-AX56U V2: a format string vulnerability in the iperf client API, caused by insufficient validation in set_iperf3_cli.cgi. A remote attacker with administrator privileges could achieve remote code execution or service disruption. Exploitation details are not provided...

CVE-2023-39239 ASUS RT-AX55、RT-AX56U_V2、RT-AC86U - Format String - 2

It is identified a format string vulnerability in ASUS RT-AX56U V2’s General function API. This vulnerability is caused by lacking validation for a specific value within its apply.cgi module. A remote attacker with administrator privilege can exploit this vulnerability to perform remote arbitrary...

CVE-2023-39239 ASUS RT-AX55、RT-AX56U_V2、RT-AC86U - Format String - 2

It is identified a format string vulnerability in ASUS RT-AX56U V2’s General function API. This vulnerability is caused by lacking validation for a specific value within its apply.cgi module. A remote attacker with administrator privilege can exploit this vulnerability to perform remote arbitrary...