333 matches found
CVE-2026-31061
UTT Aggressive HiPER 810G v3v1.7.7-171114 was discovered to contain a buffer overflow in the timestart parameter of the ConfigAdvideo function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2026-31066
The UTT Aggressive HiPER 810G router, specifically version v3v1.7.7-171114 , is vulnerable to a buffer overflow within the formTaskEdit() function. The root cause is the copying of buffers without sufficient validation of the input data size , specifically involving the selDateType parameter. An ...
CVE-2026-31065
UTT Aggressive 520W v3v1.7.7-180627 was discovered to contain a buffer overflow in the addCommand parameter of the formConfigCliForEngineerOnly function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
PT-2026-30618
UTT Aggressive HiPER 810G v3v1.7.7-171114 was discovered to contain a buffer overflow in the notes parameter of the formGroupConfig function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
PT-2026-30617
A remote command execution RCE vulnerability in the /goform/formDia component of UTT Aggressive HiPER 520W v3v1.7.7-180627 allows attackers to execute arbitrary commands via a crafted string...
CVE-2026-31067
A remote command execution RCE vulnerability in the /goform/formReleaseConnect component of UTT Aggressive 520W v3v1.7.7-180627 allows attackers to execute arbitrary commands via a crafted string...
CVE-2026-31059
A remote command execution RCE vulnerability in the /goform/formDia component of UTT Aggressive HiPER 520W v3v1.7.7-180627 allows attackers to execute arbitrary commands via a crafted string...
CVE-2026-31058: Buffer Copy without Checking Size of Input
UTT Aggressive HiPER 1200GW v2.5.3-170306 was discovered to contain a buffer overflow in the timeRangeName parameter of the formConfigDnsFilterGlobal function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2026-31061: Buffer Copy without Checking Size of Input
UTT Aggressive HiPER 810G v3v1.7.7-171114 was discovered to contain a buffer overflow in the timestart parameter of the ConfigAdvideo function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2026-31065: Buffer Copy without Checking Size of Input
UTT Aggressive 520W v3v1.7.7-180627 was discovered to contain a buffer overflow in the addCommand parameter of the formConfigCliForEngineerOnly function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2026-31066: Buffer Copy without Checking Size of Input
UTT Aggressive HiPER 810G v3v1.7.7-171114 was discovered to contain a buffer overflow in the selDateType parameter of the formTaskEdit function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2026-31061
UTT Aggressive HiPER 810G v3v1.7.7-171114 was discovered to contain a buffer overflow in the timestart parameter of the ConfigAdvideo function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2026-31065
The UTT Aggressive 520W wireless router (specifically version v3v1.7.7-180627 ) contains a buffer overflow vulnerability within the formConfigCliForEngineerOnly function. The flaw is triggered by the addCommand parameter, which fails to properly check the size of the input before copying it into ...
CVE-2026-31063: Buffer Copy without Checking Size of Input
UTT Aggressive HiPER 1200GW v2.5.3-170306 was discovered to contain a buffer overflow in the pools parameter of the formArpBindConfig function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2026-31067
The UTT Aggressive 520W wireless router (version v3v1.7.7-180627 ) is susceptible to a remote command execution (RCE) vulnerability in the /goform/formReleaseConnect component. This flaw arises from the improper neutralization of special elements used in an OS command, which allows an attacker to...
MiracleLinux 8 : libreswan-4.5-1.el8.1 (AXSA:2023-5324:01)
The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2023-5324:01 advisory. libreswan: Malicious IKEv1 Aggressive Mode packets can crash libreswan CVE-2023-30570 Tenable has extracted the preceding description block directly from the...
MiracleLinux 9 : libreswan-4.6-3.el9.1 (AXSA:2023-5325:02)
The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2023-5325:02 advisory. libreswan: Malicious IKEv1 Aggressive Mode packets can crash libreswan CVE-2023-30570 Tenable has extracted the preceding description block directly from the...
Malicious code in aggressive_tern_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d91d6428fdb326cb48360e55588654ad79558814fc0cf0273149fd7db07cc89f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
