422 matches found
The vulnerability of the genacgi_main() function in D-Link DIR-645 A1 router microprogramming software allows a hacker to induce a service failure.
The vulnerability of the genacgimain function in the D-Link DIR-645 A1 router’s microprogramming software is related to the output of operations that go beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failure remotely...
WordPress Pie Register Plugin < 3.8.1.3 is vulnerable to Arbitrary Content Deletion
Software Pie Register Type Plugin Vulnerable versions 3.8.1.3 Fixed in 3.8.1.3 OWASP Top 10 A1: Injection Classification Arbitrary Content Deletion CVE CVE-2022-4024 Patch priority High CVSS severity High 8.2 Developer Claim ownership PSID 837f46e8cf1c Credits cydave Required privilege...
WordPress All-in-one Floating Contact Form – My Sticky Elements Plugin < 2.0.9 is vulnerable to SQL Injection
Software All-in-one Floating Contact Form – My Sticky Elements Type Plugin Vulnerable versions 2.0.9 Fixed in 2.0.9 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-0487 Patch priority Low CVSS severity Low 5.5 Developer Claim ownership PSID cdb7568b0dc6 Credits qerogramat Kak...
WordPress WordPress Comments Import & Export Plugin <= 2.3.1 is vulnerable to CSV Injection
Software WordPress Comments Import & Export Type Plugin Vulnerable versions = 2.3.1 Fixed in 2.3.2 OWASP Top 10 A1: Injection Classification CSV Injection CVE CVE-2022-45370 Patch priority Low CVSS severity Low 6.1 Developer Claim ownership PSID aa57ae50e983 Credits Mika Required privilege...
PHICOMM K2G A1 安全漏洞
The PHICOMM K2G A1 is a dual-band Gigabit wireless WiFi router from PHICOMM China. A security vulnerability exists in the PHICOMM K2G A1 version v22.6.534.263, which originates from an attacker being able to discover the passwords of the root and admin users stored in the plaintext...
PHICOMM K2G A1 安全漏洞
The PHICOMM K2G A1 is a dual-band Gigabit wireless WiFi router from PHICOMM China. A security vulnerability exists in Phicomm K2 version v22.6.534.263, which stems from the fact that an attacker can discover the passwords of the root and admin users stored in the plaintext...
PHICOMM K2G A1 操作系统命令注入漏洞
The PHICOMM K2G A1 is a dual-band Gigabit wireless WiFi router from PHICOMM, China. A security vulnerability exists in the PHICOMM K2G A1 version v22.6.3.20, which stems from the operation of the autoUpTime parameter of its automatic upgrade feature that allows an attacker to implement command...
WordPress Extensive VC Addons for WPBakery page builder Plugin < 1.9.1 is vulnerable to Local File Inclusion
Software Extensive VC Addons for WPBakery page builder Type Plugin Vulnerable versions 1.9.1 Fixed in 1.9.1 OWASP Top 10 A1: Injection Classification Local File Inclusion CVE CVE-2023-0159 Patch priority High CVSS severity High 8.6 Developer Claim ownership PSID 335c3e6ccfa2 Credits dc11 Required...
CVE-2022-46476
CVE-2022-46476 affects the D-Link DIR-859 A1 firmware (1.05). The issue is a command-injection vulnerability in the router’s soapcgi_main function, exploitable via the service= parameter due to inadequate input sanitization in the management interface. This could enable a remote attacker to execu...
WordPress Easy Digital Downloads Plugin <= 3.1.0.3 is vulnerable to SQL Injection
Software Easy Digital Downloads Type Plugin Vulnerable versions = 3.1.0.3 Fixed in 3.1.0.4 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-23489 Patch priority High CVSS severity High 8.2 Developer Claim ownership PSID 8ebed23bcf9a Credits Joshua Martinelle Required privilege...
PT-2022-6327 · D Link · D-Link Dir-859 A1
Name of the Vulnerable Software and Affected Versions: D-Link DIR-859 A1 version 1.05 Description: The issue is related to a command injection vulnerability in the soapcgi main function of the D-Link DIR-859 A1 router's firmware. This vulnerability can be exploited by a remote attacker to execute...
Exploit for Uncontrolled Resource Consumption in Dlink Dir-819_Firmware
CVE-2022-40946 Exploit: Unauthenticated Denial of Service in D...
PT-2022-20735 · D Link · D-Link Dir-1960
Name of the Vulnerable Software and Affected Versions: D-Link DIR-1960 version DIR-1960 A1 1.11 Description: A buffer overflow issue was discovered via srtcat in prog.cgi, allowing attackers to cause a Denial of Service DoS via a crafted HTTP request to the /prog.cgi API endpoint. Recommendations...
CVE-2022-36756
DIR845L A1 v1.00-v1.03 is vulnerable to command injection via /htdocs/upnpinc/gena.php...
CVE-2022-36756
DIR845L A1 v1.00-v1.03 is vulnerable to command injection via /htdocs/upnpinc/gena.php...
CVE-2022-36756
DIR845L A1 v1.00-v1.03 is vulnerable to command injection via /htdocs/upnpinc/gena.php...
CVE-2022-36755
D-Link DIR845L A1 contains a authentication vulnerability via an AUTHORIZEDGROUP=1 value, as demonstrated by a request for getcfg.php...
CVE-2022-36755
D-Link DIR845L A1 contains a authentication vulnerability via an AUTHORIZEDGROUP=1 value, as demonstrated by a request for getcfg.php...
