CVE-2021-43469

The CVE-2021-43469 entry analyzes a command injection vulnerability in the VINGA WR-N300U router, arising from the goahead component. Affected product: VINGA WR-N300U (router). Vulnerable component: goahead. Root cause: not explicitly detailed in the provided documents beyond the GoAhead-based co...

CVE-2021-43469

VINGA WR-N300U 77.102.1.4853 is affected by a command execution vulnerability in the goahead component...

VENGA 路由器 命令注入漏洞

VENGA Router is a router. VENGA Router suffers from a command injection vulnerability that stems from VINGA WR-N300U 77.102.1.4853 is affected by a command execution vulnerability in the goahead component...

CVE-2021-43469: Improper Neutralization of Special Elements used in a Command

VINGA WR-N300U 77.102.1.4853 is affected by a command execution vulnerability in the goahead component...

CVE-2020-28877

Buffer overflow in in the copymsgelement function for the devDiscoverHandle server in the TP-Link WR and WDR series, including WDR7400, WDR7500, WDR7660, WDR7800, WDR8400, WDR8500, WDR8600, WDR8620, WDR8640, WDR8660, WR880N, WR886N, WR890N, WR890N, WR882N, and WR708N...

Buffer overflow

Buffer overflow in in the copymsgelement function for the devDiscoverHandle server in the TP-Link WR and WDR series, including WDR7400, WDR7500, WDR7660, WDR7800, WDR8400, WDR8500, WDR8600, WDR8620, WDR8640, WDR8660, WR880N, WR886N, WR890N, WR890N, WR882N, and WR708N...

CVE-2020-28877

Buffer overflow in in the copymsgelement function for the devDiscoverHandle server in the TP-Link WR and WDR series, including WDR7400, WDR7500, WDR7660, WDR7800, WDR8400, WDR8500, WDR8600, WDR8620, WDR8640, WDR8660, WR880N, WR886N, WR890N, WR890N, WR882N, and WR708N...

CVE-2020-28877

CVE-2020-28877 : Buffer overflow in the copy_msg_element function of the devDiscoverHandle server on TP-Link WR/WDR devices (WDR7400, WDR7500, WDR7660, WDR7800, WDR8400, WDR8500, WDR8600, WDR8620, WDR8640, WDR8660, WR880N, WR886N, WR890N, WR882N, WR708N). Connected documents do not provide additi...

CVE-2020-28877: Buffer Copy without Checking Size of Input

Buffer overflow in in the copymsgelement function for the devDiscoverHandle server in the TP-Link WR and WDR series, including WDR7400, WDR7500, WDR7660, WDR7800, WDR8400, WDR8500, WDR8600, WDR8620, WDR8640, WDR8660, WR880N, WR886N, WR890N, WR890N, WR882N, and WR708N...

File upload vulnerability in MCMS backend wr***.do page

MCMS is a website building system of MINGFEI TECHNOLOGY CO. A file upload vulnerability exists in the MCMS backend wr.do page. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...

Secutech DSL WR RIS 330 - Filter Bypass Vulnerability

Document Title: =============== Secutech DSL WR RIS 330 - Filter Bypass Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1988 Release Date: ============= 2018-07-09 Vulnerability Laboratory ID VL-ID: ==================================== 198...

bookstore.linnbenton.edu XSS vulnerability

Vulnerable URL: http://www.bookstore.linnbenton.edu/lbenton/textbookexpress/gettxtexpress.asp?remote=1=2023==SPRING%20ALBANY%202017=WR=121=1/-///'/"//--...

Network Time Protocol Vulnerabilities (Supplement Update A)

OVERVIEW --------- Begin Update A Part 1 of 2 -------- This advisory supplement is to accompany the NCCIC/ICS-CERT advisory titled ICSA-14-353-01C Network Time Protocol Vulnerabilities that was published February 5, 2015, on the ICS‑CERT web site. --------- End Update A Part 1 of 2 ----------...

PT-2012-4127 · Ipswitch · Ipswitch Whatsup Gold

Name of the Vulnerable Software and Affected Versions: Ipswitch WhatsUp Gold version 15.02 Description: The issue allows remote attackers to execute arbitrary SQL commands via the sGroupList parameter in the "WrVMwareHostList.asp" file. This enables attackers to manipulate database queries,...

CVE-2008-2355

Directory traversal vulnerability in index.php in WR-Meeting 1.0, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the msnum parameter in a coment event...

Directory traversal

Directory traversal vulnerability in index.php in WR-Meeting 1.0, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the msnum parameter in a coment event...

CVE-2008-2355

Directory traversal vulnerability in index.php in WR-Meeting 1.0, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the msnum parameter in a coment event...

CVE-2008-2355

CVE-2008-2355 describes a directory traversal vulnerability in WR-Meeting 1.0. When magic_quotes_gpc is disabled, an attacker can cause the application to include and execute local files by inserting a .. (dot dot) in the msnum parameter of a coment event, exposing partial confidentiality and int...

wrmeeting-disclose.txt

| By Cr@zyKing / [email protected] \ ^| GrtZ : TheKacak - CrackersChild - Rmx - TRip - Eno7 - DreamTurk - KnocKout - TheBekir and str0ke \ ^| WR-Meeting v1.0 FI \ ^| Down : http://www.wr-script.ru/ \ ^| Demo : http://www.wr-script.ru/meeting/ ^| Info : t4sc1zkr4L Best Of Bug Researches ^|...

WR-Meeting 1.0 (msnum) Local File Disclosure Vulnerability

No description provided by source. | By Cr@zyKing / [email protected] \ ^| GrtZ : TheKacak - CrackersChild - Rmx - TRip - Eno7 - DreamTurk - KnocKout - TheBekir and str0ke \ ^| WR-Meeting v1.0 FI \ ^| Down : http://www.wr-script.ru/ \ ^| Demo : http://www.wr-script.ru/meeting/ ^| Info :...