Tenda AC Series Router Buffer Overflow Vulnerability (CNVD-2019-09141)

AC series is a router product launched by Tenda. A buffer overflow vulnerability exists in the web server httpd of Tenda AC Series routers, which can be exploited by an attacker to cause a denial of service...

Buffer overflow

An issue was discovered on Tenda AC7 V15.03.06.44CN, AC9 V15.03.05.196318CN, AC10 V15.03.06.23CN, AC15 V15.03.05.19CN, and AC18 V15.03.05.196318CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the 'deviceList' parameter for a post request,...

blog.ac-versailles.fr XSS vulnerability

Open Bug Bounty ID: OBB-678237 Description| Value ---|--- Affected Website:| blog.ac-versailles.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Code injection

ffjpeg.dll in ffjpeg before 2018-08-22 allows remote attackers to cause a denial of service FPE signal via a progressive JPEG file that lacks an AC Huffman table...

CVE-2018-16781

ffjpeg.dll in ffjpeg before 2018-08-22 allows remote attackers to cause a denial of service FPE signal via a progressive JPEG file that lacks an AC Huffman table...

CVE-2018-16781

CVE-2018-16781 affects the ffjpeg library (ffjpeg.dll). Affected: ffjpeg versions prior to 2018-08-22. Vulnerability: processing a progressive JPEG file that lacks an AC Huffman table can trigger a denial of service (FPE signal). Impact: remote attackers can cause DoS via crafted images. Root cau...

PT-2018-13744 · FFmpeg · Ffjpeg

Name of the Vulnerable Software and Affected Versions: ffjpeg versions prior to 2018-08-22 Description: The issue allows remote attackers to cause a denial of service via a progressive JPEG file that lacks an AC Huffman table, resulting in an FPE signal. Recommendations: For versions prior to...

ac-franchise.com XSS vulnerability

Open Bug Bounty ID: OBB-668400 Description| Value ---|--- Affected Website:| ac-franchise.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-15130

CVE-2018-15130 affects ThinkSAAS up to 2018-07-25. The vulnerability is a Cross-Site Scripting (XSS) flaw exploitable via the parameter groupdesc in the URL path index.php?app=group&ac=create&ts=do, allowing injection of arbitrary web script/HTML into the page. Root cause details beyond XSS are n...

SQL injection vulnerability in ac***.php page of PinYou Movie & TV website builder system

PinYou film and television station building system is a set of add video, with membership system, recharge system, is a set of film and television station can be charged to watch the source code. SQL injection vulnerability exists in the ac.php page of the PinYou Movie & TV website builder system...

PT-2018-3769

Name of the Vulnerable Software and Affected Versions Tenda AC7 versions through V15.03.06.44 CNAC7 Tenda AC9 versions through V15.03.05.196318 CNAC9 Tenda AC10 versions through V15.03.06.23 CNAC10 Description A command injection issue allows attackers to execute arbitrary OS commands via a craft...

moodle.southend-adult.ac.uk Open Redirect vulnerability

Open Bug Bounty ID: OBB-646748 Description| Value ---|--- Affected Website:| moodle.southend-adult.ac.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

VulnCheck KEV: CVE-2017-8877

ASUS RT-AC and RT-N devices with firmware through 3.0.0.4.380.7378 allow JSONP Information Disclosure such as the SSID...

Emerson Liebert IntelliSlot Web Card family delivers enhanced communications and control to Liebert UPS,AC Power and Thermal Management systems Unauthorized access

Emerson Liebert IntelliSlot Web Card family delivers enhanced communications and control to Liebert UPS,AC Power and Thermal Management systems Unauthorized access。Lots of them No authentication required and The Management configuration uses the default password. Liebert:Liebert devices in ZoomEy...

special.lib.gla.ac.uk XSS vulnerability

Open Bug Bounty ID: OBB-629363 Description| Value ---|--- Affected Website:| special.lib.gla.ac.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Intel Dual Band Wireless-AC, Tri-Band Wireless-AC and Wireless-AC Intel wireless driver and related software DLL injection vulnerabilities

Intel Dual Band Wireless-AC, Tri-Band Wireless-AC, and Wireless-AC are wireless NIC products from Intel Corporation.Intel wireless drivers is one of the wireless NIC drivers.Autorun.exe is one of the Autorun.exe is an executable file; Setup.exe is an installation file. A security vulnerability...

Elevation of Privilege vulnerability when installing Intel Wireless Drivers and related Software

Summary: Intel is releasing software updates that mitigate a security vulnerability in executables to install Intel Wireless drivers. Description: DLL injection vulnerability in the installation executables Autorun.exe and Setup.exe for Intel's wireless drivers and related software allows a local...

laptop-ac-adapters.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-609974 Description| Value ---|--- Affected Website:| laptop-ac-adapters.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ac-canova.com XSS vulnerability

Open Bug Bounty ID: OBB-603357 Description| Value ---|--- Affected Website:| ac-canova.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ac-franchise.com XSS vulnerability

Open Bug Bounty ID: OBB-599258 Description| Value ---|--- Affected Website:| ac-franchise.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...