35235 matches found
CVE-2025-60266
In xckk v9.6, there is a SQL injection vulnerability in which the orderBy parameter in address/list is not securely filtered, resulting in a SQL injection vulnerability...
PT-2025-41414
Name of the Vulnerable Software and Affected Versions Tenda W12 version 3.0.0.63948 Description A flaw exists in the Tenda W12 router firmware that allows for a remote stack-based buffer overflow. The issue is located in the wifiMacFilterSet function within the HTTP Request Handler component,...
CVE-2025-60266: Improper Neutralization of Special Elements used in an SQL Command
In xckk v9.6, there is a SQL injection vulnerability in which the orderBy parameter in address/list is not securely filtered, resulting in a SQL injection vulnerability...
VulnCheck KEV: CVE-2017-18369
The Billion 5200W-T 1.02b.rc5.dt49 router distributed by TrueOnline has a command injection vulnerability in the Remote System Log forwarding function, which is accessible by an unauthenticated user. The vulnerability is in the advremotelog.asp page and can be exploited through the syslogServerAd...
SUSE CVE-2022-50533
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: mlme: fix null-ptr deref on failed assoc If association to an AP without a link 0 fails, then we crash in tracing because it assumes that either apmldaddr or link 0 BSS is valid, since we clear sdata-vif.validlink...
Incorrect Authorization
Overview Affected versions of this package are vulnerable to Incorrect Authorization. An attacker can gain unauthorized access to restricted organization or application editing interfaces by manipulating URLs after authentication. Remediation Upgrade github.com/casdoor/casdoor/authz to version...
CVE-2025-57457
An OS Command Injection vulnerability in the Admin panel in Curo UC300 5.42.1.7.1.63R1 allows local attackers to inject arbitrary OS Commands via the "IP Addr" parameter...
CVE-2025-60313
Sourcecodester Link Status Checker 1.0 is vulnerable to a Cross-Site Scripting XSS in the Enter URLs to check input field. This allows a remote attacker to execute arbitrary code...
CVE-2025-57457
An OS Command Injection vulnerability in the Admin panel in Curo UC300 5.42.1.7.1.63R1 allows local attackers to inject arbitrary OS Commands via the "IP Addr" parameter...
EUVD-2025-33285
An OS Command Injection vulnerability in the Admin panel in Curo UC300 5.42.1.7.1.63R1 allows local attackers to inject arbitrary OS Commands via the "IP Addr" parameter...
Linux Distros Unpatched Vulnerability : CVE-2023-53540
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: cfg80211: reject auth/assoc to AP with our address If the AP uses our own address as its MLD address or BSSID, then clearly something's wrong. Reject such...
Curo UC300 安全漏洞
Curo UC300 is a video phone device from Curo UK. A security vulnerability exists in Curo UC300 version 5.42.1.7.1.63R1, which stems from an unvalidated IP Addr parameter that could lead to an OS command injection attack...
SourceCodester Link Status Checker 安全漏洞
SourceCodester Link Status Checker is an open source link status checker from SourceCodester. A security vulnerability exists in SourceCodester Link Status Checker version 1.0, which stems from the Enter URLs to check input field being vulnerable to a cross-site scripting attack that could lead t...
PT-2025-41302
Name of the Vulnerable Software and Affected Versions Casdoor versions prior to 2.26.0 Description A flaw exists in the permission verification module and organization/application editing interface. This allows remotely authenticated administrators of any organization to circumvent the system's...
PT-2025-41301
Name of the Vulnerable Software and Affected Versions Curo UC300 version 5.42.1.7.1.63R1 Description A flaw exists within the Admin panel that permits local attackers to inject arbitrary OS Commands. The injection occurs through the IP Addr parameter. Recommendations At the moment, there is no...
EUVD-2025-33286
An issue in the permission verification module and organization/application editing interface in Casdoor before 2.26.0 allows remote authenticated administrators of any organization within the system to bypass the system's permission verification mechanism by directly concatenating URLs after log...
CVE-2025-57457
An OS Command Injection vulnerability in the Admin panel in Curo UC300 5.42.1.7.1.63R1 allows local attackers to inject arbitrary OS Commands via the "IP Addr" parameter...
The vulnerability of the formSetWanStatic() function in the /goform/formSetWanStatic file of the microprogramming software for Belkin F9K1015 routers, which allows a hacker to execute arbitrary code.
The vulnerability of the formSetWanStatic function in the /goform/formSetWanStatic file of the Belkin F9K1015 router’s microprogramming software is related to the lack of data cleaning measures at the control level when processing the mwanipaddr parameter. Exploiting this vulnerability could allo...
The vulnerability of the formBSSetSitesurvey() function in the /goform/formBSSetSitesurvey file of the Belkin F9K1015 router’s microprogramming system allows a intruder to execute arbitrary code.
The vulnerability of the formBSSetSitesurvey function in the /goform/formBSSetSitesurvey file of the Belkin F9K1015 router’s microprogramming system is related to the lack of data cleaning measures at the control level when processing the wanipaddr parameter. Exploiting this vulnerability allows ...