ac-aa.com Cross Site Scripting vulnerability OBB-3870290

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2024-21483

Siemens CVE-2024-21483 affects SENTRON 7KM PAC3x20 devices (PAC3120/3220, AC/DC and DC variants) with firmware versions around V3.2.3–before V3.3.0. The root cause is improper read-out protection of internal flash at end of manufacturing, enabling a physically proximate attacker to read data from...

PT-2024-2318 · Tenda · Tenda Ac18

Name of the Vulnerable Software and Affected Versions: Tenda AC18 version 15.03.05.05 Description: A critical issue affects the formexeCommand function of the file /goform/execCommand. The manipulation of the cmdinput argument leads to a stack-based buffer overflow. This issue can be exploited...

PT-2024-2263 · Tenda · Tenda Ac18

Name of the Vulnerable Software and Affected Versions: Tenda AC18 version 15.03.05.05 Description: A critical issue affects the formSetPPTPServer function of the file /goform/SetPptpServerCfg. The manipulation of the startIP argument leads to a stack-based buffer overflow. This issue can be...

PT-2024-2267 · Tenda · Tenda Ac18

Name of the Vulnerable Software and Affected Versions: Tenda AC18 version 15.03.05.05 Description: The issue is related to a stack overflow vulnerability in the page parameter of the fromNatStaticSetting function, which can be exploited by a remote attacker to impact the confidentiality, integrit...

AC Repair and Services System v1.0 - Multiple SQL Injection Vulnerability

Exploit Title: AC Repair and Services System v1.0 - Multiple SQL Injection Exploit Author: Gnanaraj Mauviel @0xm3m Vendor: oretnom23 Vendor Homepage: https://www.sourcecodester.com/php/16513/ac-repair-and-services-system-using-php-and-mysql-source-code-free-download.html Software Link:...

artplumbingandac.com Cross Site Scripting vulnerability OBB-3846619

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

www1.ac-nancy-metz.fr Cross Site Scripting vulnerability OBB-3845277

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2024-20287

CVE-2024-20287 affects Cisco WAP371 Wireless-AC/N Dual Radio Access Point web-based management interface. Affected: versions prior to 1.3.0.8 (per PT-2024-1591). Vulnerability: authenticated, remote command injection due to improper validation of user input in the management web UI; successful ex...

Cisco WAP371 Wireless Access Point Command Injection Vulnerability

A vulnerability in the web-based management interface of the Cisco WAP371 Wireless-AC/N Dual Radio Access Point AP with Single Point Setup could allow an authenticated, remote attacker to perform command injection attacks against an affected device. This vulnerability is due to improper validatio...

PT-2024-1591 · Cisco · Cisco Wap371 Wireless-Ac/N Dual Radio Access Point

Name of the Vulnerable Software and Affected Versions: Cisco WAP371 Wireless-AC/N Dual Radio Access Point AP versions prior to 1.3.0.8 Description: A vulnerability in the web-based management interface of the Cisco WAP371 Wireless-AC/N Dual Radio Access Point could allow an authenticated, remote...

home.iitd.ac.in Cross Site Scripting vulnerability OBB-3827873

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

artplumbingandac.com Cross Site Scripting vulnerability OBB-3827680

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Intel BIOS Firmware CVE-2022-26837 (INTEL-SA-00717)

The version of the Intel BIOS on the remote device is affected by a vulnerability as identified in the INTEL-SA-00717 advisory. - Improper input validation in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

ac-wf.wf Cross Site Scripting vulnerability OBB-3813308

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

opac.nitk.ac.in Cross Site Scripting vulnerability OBB-3804310

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Tenda AC Router RCE (CVE-2020-10987)

The firmware version of the Tenda AC Router is an AC15 AC1900 device with a firmware version of 15.03.05.19 or below. It is, therefore, affected by a remote code execution vulnerability. An unauthenticated, remote attacker can exploit this, via the deviceName POST parameter, to execute arbitrary...

Tenda AC Router Stack Buffer Overflow (CVE-2021-31755)

The firmware version of the Tenda AC Router is an AC11 device with firmware 02.03.01.104CN or below. It is, therefore, affected by a stack buffer overflow vulnerability. An unauthenticated, remote attacker can exploit this, via a crafted POST request, to execute arbitrary code on the system. Note...

Malicious code in grunt-ac-toolkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ee5b34eed1211ec1daf03801aa41a40775a16812380c42cd332d788e4a55d4c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8592 Malicious code in grunt-ac-toolkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ee5b34eed1211ec1daf03801aa41a40775a16812380c42cd332d788e4a55d4c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...