Input validation

Improper checking of AP-S lock bit while verifying the secure resource group permissions can lead to non secure read and write access in Snapdragon Connectivity, Snapdragon Mobile...

CVE-2021-35108

CVE-2021-35108 concerns Qualcomm/Qualcomm closed‑source components in Snapdragon Connectivity and Snapdragon Mobile. The root cause is improper checking of the AP-S lock bit when verifying secure resource group permissions, which can permit non‑secure read and write access. The CVSSv3.1 base vect...

Sql injection

A SQL injection vulnerability in the productalloneimg and imageproduct parameters of the ApolloTheme AP PageBuilder component through 2.4.4 for PrestaShop allows unauthenticated attackers to exfiltrate database data...

CVE-2022-22897

A SQL injection vulnerability in the productalloneimg and imageproduct parameters of the ApolloTheme AP PageBuilder component through 2.4.4 for PrestaShop allows unauthenticated attackers to exfiltrate database data...

CVE-2022-22897

CVE-2022-22897 describes a SQL injection in the ApolloTheme AP PageBuilder for PrestaShop up to version 2.4.4, affecting the parameters product_all_one_img and image_product . Unauthenticated attackers could exfiltrate database data by exploiting this vulnerability. The NVD/Nuclei entries confirm...

CVE-2022-36516

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function apversioncheck...

CVE-2022-36496

H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function SetMobileAPInfoById...

PT-2022-23802 · H3C · H3C H200

Name of the Vulnerable Software and Affected Versions: H3C H200 version H200V100R004 Description: A stack overflow issue was discovered via the function SetMobileAPInfoById. This issue affects the H3C H200 device. Recommendations: For H3C H200 version H200V100R004, consider disabling the...

PT-2022-23437 · H3C · H3C Gr-1200W

Name of the Vulnerable Software and Affected Versions: H3C GR-1200W version MiniGRW1A0V100R006 Description: A stack overflow issue was discovered via the function ap version check. Recommendations: For H3C GR-1200W version MiniGRW1A0V100R006, as a temporary workaround, consider disabling the ap...

H3C Magic NX18 Plus 缓冲区错误漏洞

The H3C Magic NX18 Plus is a Gigabit dual-band router from China's Xinhua San H3C. A security vulnerability exists in the H3C Magic NX18 Plus NX18PV100R003 version, which stems from a stack overflow issue in the SetAPInfoById method...

H3C H200 缓冲区错误漏洞

H3C H200 is a kind of full Gigabit Home Intelligent Hub from China's Xinhua San H3C. A security vulnerability exists in the H3C H200 H200V100R004 version that stems from a stack overflow issue in the SetAPWifiorLedInfoById method...

PrestaShop Ap Pagebuilder 2.4.4 SQL Injection Vulnerability

Exploit Title: AP PAGEBUILDER Prestashop module = 2.4.4 'productalloneimg' , 'imageproduct' Blind SQL Injection Exploit Author: Mohamed Ali Hammami Vendor Homepage: https://apollotheme.com/ Software Link : https://apollotheme.com/products/ap-pagebuilder-prestashop-module Version: 2.4.4 Tested on:...

H3C H200 缓冲区错误漏洞

H3C H200 is a kind of full Gigabit Home Intelligent Hub from China's Xinhua San H3C. A security vulnerability exists in the H3C H200 H200V100R004 version, which stems from a stack overflow issue in the SetMobileAPInfoById method...

H3C B5 Mini 缓冲区错误漏洞

The H3C B5 Mini is a full gigabit wireless router from China's Xinhua San H3C. A security vulnerability exists in the H3C B5 Mini B5MiniV100R005 version that stems from a stack overflow in the SetMobileAPInfoById method...

Exposure of password hashes in notrinos/notrinos-erp

The AP officers account is authorized to Backup and Restore the Database, Due to this he/she can download the backup and see the password hash of the System Administrator account, The weak hash MD5 of the password can be easily cracked and get the admin password...

Malicious code in source-ap-loadper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41c64fb7bcacaa0461053677e4841fec7a6863289b2d9b0e98e106d8acfab883 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6219 Malicious code in source-ap-loadper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41c64fb7bcacaa0461053677e4841fec7a6863289b2d9b0e98e106d8acfab883 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Tenda W6 Command Injection Vulnerability

Tenda W6 is a wireless WiFi AP access point router from Tenda, China.A command injection vulnerability exists in Tenda W6 /goform/exeCommand, which can be exploited by attackers to execute arbitrary commands on the system...

Tenda W6 Stack Overflow Vulnerability

Tenda W6 is a wireless WiFi AP access point router from Tenda China.Tenda W6 is vulnerable to a stack overflow vulnerability caused by a stack buffer overflow in the function wifiSSIDget. A remote attacker can exploit this vulnerability to cause a denial of service...

Tenda W6 Stack Overflow Vulnerability (CNVD-2022-75788)

Tenda W6 is a wireless WiFi AP access point router from Tenda China.Tenda W6 is vulnerable to a stack overflow vulnerability caused by a stack buffer overflow in the function wifiSSIDset. A remote attacker can exploit this vulnerability to cause a denial of service...