PT-2024-21163 · Netis · Netis Wf2780

Name of the Vulnerable Software and Affected Versions: Netis WF2780 version 2.1.40144 Description: The issue is related to a command injection vulnerability. This vulnerability can be exploited via the wps ap ssid5g parameter. Recommendations: For Netis WF2780 version 2.1.40144, avoid using the w...

PT-2024-1366 · Tenda · Tenda Ac10

Name of the Vulnerable Software and Affected Versions: Tenda AC10U version 15.03.06.49 multi TDE01 Description: The issue is related to the function formWifiWpsOOB and involves a stack-based buffer overflow due to the manipulation of the index argument. This can be exploited remotely, potentially...

WordPress WPS Hide Login Plugin <= 1.9.11 is vulnerable to Bypass Vulnerability

Software WPS Hide Login Type Plugin Vulnerable versions = 1.9.11 Fixed in 1.9.12 OWASP Top 10 A4: Insecure Design Classification Bypass Vulnerability CVE CVE-2023-49748 Patch priority Low CVSS severity Low 3.7 Developer Claim ownership PSID b95951ba6ec7 Credits Naveen Muthusamy Required privilege...

CVE-2023-6280

An XXE XML External Entity vulnerability has been detected in 52North WPS affecting versions prior to 4.0.0-beta.11. This vulnerability allows the use of external entities in its WebProcessingService servlet for an attacker to retrieve files by making HTTP requests to the internal network...

Xxe

An XXE XML External Entity vulnerability has been detected in 52North WPS affecting versions prior to 4.0.0-beta.11. This vulnerability allows the use of external entities in its WebProcessingService servlet for an attacker to retrieve files by making HTTP requests to the internal network...

CVE-2023-6280

CVE-2023-6280 describes an XXE (XML External Entity) vulnerability in the 52North Web Processing Service (WPS). The issue affects 52North WPS versions prior to 4.0.0-beta.11, where the WebProcessingService servlet may process external entities, allowing an attacker to retrieve files by issuing HT...

CVE-2023-6280 XML External Entity Reference on 52North WPS

An XXE XML External Entity vulnerability has been detected in 52North WPS affecting versions prior to 4.0.0-beta.11. This vulnerability allows the use of external entities in its WebProcessingService servlet for an attacker to retrieve files by making HTTP requests to the internal network...

CVE-2023-6280: Improper Restriction of XML External Entity Reference

An XXE XML External Entity vulnerability has been detected in 52North WPS affecting versions prior to 4.0.0-beta.11. This vulnerability allows the use of external entities in its WebProcessingService servlet for an attacker to retrieve files by making HTTP requests to the internal network...

The vulnerability of the WPS Office office software package, related to the use of an uninitialized resource, allows a hacker to execute arbitrary code.

The vulnerability of the WPS Office office software package is related to the use of an uninitialized resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2023-31275

An uninitialized pointer use vulnerability exists in the functionality of WPS Office 11.2.0.11537 that handles Data elements in an Excel file. A specially crafted malformed file can lead to remote code execution. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2023-31275

An uninitialized pointer use vulnerability exists in the functionality of WPS Office 11.2.0.11537 that handles Data elements in an Excel file. A specially crafted malformed file can lead to remote code execution. An attacker can provide a malicious file to trigger this vulnerability...

Design/Logic Flaw

An uninitialized pointer use vulnerability exists in the functionality of WPS Office 11.2.0.11537 that handles Data elements in an Excel file. A specially crafted malformed file can lead to remote code execution. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2023-31275

WPS Office 11.2.0.11537 contains an uninitialized pointer use vulnerability in the Data element handling for Excel files (CVE-2023-31275). TALOS reports that a malformed Excel file can trigger remote code execution due to an absent Data element check, enabling memory corruption and arbitrary code...

CVE-2023-31275

An uninitialized pointer use vulnerability exists in the functionality of WPS Office 11.2.0.11537 that handles Data elements in an Excel file. A specially crafted malformed file can lead to remote code execution. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2023-31275: Use of Uninitialized Variable

An uninitialized pointer use vulnerability exists in the functionality of WPS Office 11.2.0.11537 that handles Data elements in an Excel file. A specially crafted malformed file can lead to remote code execution. An attacker can provide a malicious file to trigger this vulnerability...

WPS Office ET Data use of uninitialized pointer vulnerability

Talos Vulnerability Report TALOS-2023-1748 WPS Office ET Data use of uninitialized pointer vulnerability November 27, 2023 CVE Number CVE-2023-31275 SUMMARY An uninitialized pointer use vulnerability exists in the functionality of WPS Office 11.2.0.11537 that handles Data elements in an Excel fil...

PT-2023-7339 · Kingsoft · Wps Office

Name of the Vulnerable Software and Affected Versions: WPS Office version 11.2.0.11537 Description: The issue is related to an uninitialized pointer use in the functionality that handles Data elements in an Excel file. This can be exploited by providing a specially crafted malformed file,...

CVE-2023-41270

Improper Restriction of Excessive Authentication Attempts vulnerability in Samsung Smart TV UE40D7000 version T-GAPDEUC-1033.2 and before allows attackers to cause a denial of service via WPS attack tools...

Authentication flaw

Improper Restriction of Excessive Authentication Attempts vulnerability in Samsung Smart TV UE40D7000 version T-GAPDEUC-1033.2 and before allows attackers to cause a denial of service via WPS attack tools...

CVE-2023-41270

CVE-2023-41270 affects Samsung Smart TV UE40D7000 (firmware T-GAPDEUC-1033.2 and prior). The issue is an improper restriction of excessive authentication attempts, enabling a denial-of-service condition via WPS attack tooling. The PT Security advisory PT-2023-27881 confirms the affected version r...