The vulnerability of the software for downloading pyload files is related to insufficient validation of input data, allowing a perpetrator to execute arbitrary code.

The vulnerability of the software for downloading pyload files is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted HTTP request remotely...

PT-2024-20662 · Gaia · Gaia

Name of the Vulnerable Software and Affected Versions: Gaia affected versions not specified Description: The issue allows authenticated Gaia users to inject code or commands by global variables through special HTTP requests. A security fix is available to mitigate this issue. Recommendations: At...

Cisco Unified Industrial Wireless Software 命令注入漏洞

Cisco Unified Industrial Wireless Software is a software provided by Cisco for industrial wireless networks. A command injection vulnerability exists in Cisco Unified Industrial Wireless Software. The vulnerability is caused due to improper validation of inputs to the web management interface of...

xerces-c: An integer overflow issue that allows remote attackers to cause out-of-bound access via HTTP request

An integer overflow exists in xerces-c++. This flaw allows an attacker using a specially crafted HTTP request payload to trigger an out-of-bounds read, resulting in a loss of confidentiality, integrity, and availability...

Bitrix24 安全漏洞

Bitrix24 is a suite of enterprise social platforms from Bitrix USA. The platform includes features such as online communication, calendar management and CRM Customer Relationship Management. A security vulnerability exists in Bitrix24 version 23.300.100, which originates from a remote administrat...

Bitrix24 安全漏洞

Bitrix24 is a suite of enterprise social platforms from Bitrix USA. The platform includes features such as online communication, calendar management and CRM Customer Relationship Management. A security vulnerability exists in Bitrix24 version 23.300.100, which stems from a remote administrator...

SmartAgent 1.1.0 Server-Side Request Forgery

Exploit Title: SmartAgent v1.1.0 - Server-Side Request Forgery SSRF Date: 01-10-2024 Exploit Author: Alter Prime Vendor Homepage: https://smarts-srlcom.com/, https://smartagent.com Version: Build v1.1.0 Tested on: Kali Linux An unauthenticated user can trigger the web server to perform web reques...

The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business RV042, RV042G, RV320, and RV325 allows a hacker to execute arbitrary code or cause service interruptions.

The vulnerability of the web interface for managing microprogrammed software routers of Cisco Small Business RV042, RV042G, RV320, and RV325 stems from the escape of operations beyond the buffer in memory, resulting from insufficient validation of input data during HTTP packet processing...

The vulnerability of the software for centralized device management in Fortinet FortiManager allows a hacker to disclose protected information.

The vulnerability of the software for centralized device management in Fortinet FortiManager lies in the lack of protection for operational data. Exploiting this vulnerability can allow attackers to disclose sensitive information through generated HTTP requests...

PT-2024-10218 · Schneider Electric · Schneider Electric Powerlogic Hdpm6000

Name of the Vulnerable Software and Affected Versions: Schneider Electric PowerLogic HDPM6000 version 0.62.7 Description: The issue is related to an authorization bypass vulnerability that could allow an authorized attacker to modify values outside those defined by their privileges, potentially...

The vulnerability of the iCMS content management system allows a attacker to perform XSS attacks.

The vulnerability of the iCMS content management system exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks using specially crafted HTTP requests...

The vulnerability in the web interface of Cisco Firepower Management Center’s software for network management allows a perpetrator to execute arbitrary commands in the basic operating system.

The vulnerability of the web interface for managing Cisco Firepower Management Center FMC software involves the failure to take measures to neutralize special elements used in the operating system command set. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands on...

CVE-2024-45842

Sharp and Toshiba Tec MFPs improperly process URI data in HTTP PUT requests resulting in a path Traversal vulnerability. Unintended internal files may be retrieved when processing crafted HTTP requests...

Sharp MFP 安全漏洞

Sharp MFP is a series of multifunction printers from Sharp Japan. A security vulnerability exists in Sharp MFP that stems from incorrect handling of query parameters in HTTP requests, resulting in a reflected cross-site scripting vulnerability...

PT-2024-32651 · Sharp +1 · Sharp Mfps +1

Name of the Vulnerable Software and Affected Versions: Sharp and Toshiba Tec MFPs affected versions not specified Description: The issue is related to the improper processing of query parameters in HTTP requests, which may lead to the contamination of unintended data in HTTP response headers...

PT-2024-29936 · Sharp +1 · Sharp Mfps +1

Name of the Vulnerable Software and Affected Versions: Sharp and Toshiba Tec MFPs affected versions not specified Description: The issue is related to multiple Out-of-bounds Read vulnerabilities due to improper processing of keyword search input and improper processing of SOAP messages. Crafted...

Sharp MFP 安全漏洞

Sharp MFP is a series of multifunction printers from Sharp Japan. A security vulnerability exists in Sharp MFP that stems from incorrect handling of query parameters in HTTP requests, which could result in unexpected data contamination of the HTTP response header...

The vulnerability of the wacWhitelistJsonToBin() function in TP-Link TL-WDR7660 router software allows a hacker to trigger a service failure.

The vulnerability of the wacWhitelistJsonToBin function in the microprogramming software for TP-Link TL-WDR7660 routers stems from the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to trigger a...

The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business RV042, RV042G, RV320, and RV325 allows a hacker to execute arbitrary code or cause service interruptions.

The vulnerability of the web interface for managing microprogrammed software routers of Cisco Small Business RV042, RV042G, RV320, and RV325 stems from the escape of operations beyond the buffer in memory, resulting from insufficient validation of input data during HTTP packet processing...

The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business RV042, RV042G, RV320, and RV325 allows a hacker to execute arbitrary code or cause service interruptions.

The vulnerability of the web interface for managing microprogrammed software routers of Cisco Small Business RV042, RV042G, RV320, and RV325 stems from the escape of operations beyond the buffer in memory, resulting from insufficient validation of input data during HTTP packet processing...