GHSA-HF8C-XR89-VFM5 Command Injection in ungit

The package ungit before 1.5.20 are vulnerable to Remote Code Execution RCE via argument injection. The issue occurs when calling the /api/fetch endpoint. User controlled values remote and ref are passed to the git fetch command. By injecting some git options it was possible to get arbitrary...

Tenda AC9 saveparentcontrolinfo function stack overflow vulnerability

The Tenda AC9 is a wireless router from the Chinese company Tenda. A stack overflow vulnerability exists in the Tenda AC9 saveparentcontrolinfo function, which can be exploited by an attacker to cause arbitrary command execution...

Tenda AC9 Buffer Overflow Vulnerability (CNVD-2022-26246)

Tenda AC9 is a wireless router from Tenda, China.Tenda AC9 version 15.03.2.21 is vulnerable to a buffer overflow vulnerability, which originates when the list parameter in the SetIpMacBind function does not properly validate data boundaries when performing operations on memory, and can be exploit...

CVE-2021-45809: Undefined Security Weakness

GlobalProtect-openconnect versions prior to 1.4.3 are affected by incorrect access control in GPService through DBUS, GUI Application. The way GlobalProtect-Openconnect is set up enables arbitrary users to execute commands as root by submitting the --script=...

Tenda AC6 SetPptpServerCfg Function Stack Overflow Vulnerability

The Tenda AC6 is a wireless router from the Chinese company Tenda. A stack overflow vulnerability exists in the Tenda AC6 SetPptpServerCfg function, which can be exploited by an attacker to cause arbitrary command execution...

Tenda AC6 openSchedWifi Function Stack Overflow Vulnerability

The Tenda AC6 is a wireless router. A stack overflow vulnerability exists in the Tenda AC6 openSchedWifi function, which can be exploited by an attacker to cause arbitrary command execution...

Tenda AC6 openSchedWifi function stack overflow vulnerability (CNVD-2022-23519)

The Tenda AC6 is a wireless router. A buffer overflow vulnerability exists in Tenda AC6 v15.03.05.09multi, which can be exploited by an attacker to cause arbitrary command execution...

Tenda AC9 Formsetqosband Function Stack Overflow Vulnerability

Tenda AC9 is a wireless router from Tenda, a Chinese company. A stack overflow vulnerability exists in the Tenda AC9 Formsetqosband function, which can be exploited by an attacker to cause arbitrary command execution...

Tenda AC9 saveparentcontrolinfo function buffer overflow vulnerability

Tenda AC9 is a wireless router from Tenda, a Chinese company. A buffer overflow vulnerability exists in the Tenda AC9 saveparentcontrolinfo function, which can be exploited by an attacker to cause arbitrary command execution...

Tenda AC9 Buffer Overflow Vulnerability (CNVD-2022-26242)

Tenda AC9 is a wireless router from Tenda, China.Tenda AC9 version 15.03.2.21 is vulnerable to a buffer overflow vulnerability, which stems from the list parameter in the SetVirtualServerCfg function that does not properly validate data boundaries when executing operations on memory, and can be...

Tenda AC9 openSchedWifi Function Stack Overflow Vulnerability

Tenda AC9 is a wireless router from Tenda, a Chinese company. A stack overflow vulnerability exists in the Tenda AC9 openSchedWifi function, which can be exploited by an attacker to cause arbitrary command execution...

Tenda AC9 Buffer Overflow Vulnerability (CNVD-2022-26244)

Tenda AC9 is a wireless router from Tenda, China.Tenda AC9 version 15.03.2.21 is vulnerable to a buffer overflow vulnerability, which stems from the list parameter in the SetStaticRoutecfg function that does not properly validate data boundaries when performing operations on memory, and can be...

Tenda AC9 Buffer Overflow Vulnerability (CNVD-2022-26243)

Tenda AC9 is a wireless router from Tenda, China.Tenda AC9 version 15.03.2.21 is vulnerable to a buffer overflow vulnerability, which stems from the ntpserver parameter in the SetSysTimeCfg function that does not properly validate data boundaries when performing operations on memory, and can be...

Tenda AC9 Buffer Overflow Vulnerability (CNVD-2022-26247)

Tenda AC9 is a wireless router from Tenda, China.Tenda AC9 version 15.03.2.21 is vulnerable to a buffer overflow vulnerability, which stems from the firewallCfg parameter in the SetFirewallCfg function that does not properly validate data boundaries when performing operations on memory, and can b...

Tenda AC6 saveParentControlInfo function stack overflow vulnerability (CNVD-2022-24437)

The Tenda AC6 is a wireless router from the Chinese company Tenda. A stack overflow vulnerability exists in the Tenda AC6 saveParentControlInfo function, which can be exploited by an attacker to cause arbitrary command execution...

Tenda AC9 saveparentcontrolinfo function stack overflow vulnerability (CNVD-2022-25785)

Tenda AC9 is a wireless router from Tenda, China.A stack overflow vulnerability exists in the Tenda AC9 saveparentcontrolinfo function, which can be exploited by attackers to cause arbitrary command execution...

Tenda AC6 SetIpMacBind Function Stack Overflow Vulnerability

The Tenda AC6 is a wireless router from the Chinese company Tenda. A stack overflow vulnerability exists in the Tenda AC6 SetIpMacBind function, which can be exploited by an attacker to cause arbitrary command execution...

Tenda AC6 openSchedWifi function stack overflow vulnerability (CNVD-2022-23520)

The Tenda AC6 is a wireless router. A stack overflow vulnerability exists in the Tenda AC6 openSchedWifi function, which can be exploited by an attacker to cause arbitrary command execution...

Tenda AC6 WifiBasicSet Function Stack Overflow Vulnerability

The Tenda AC6 is a wireless router from the Chinese company Tenda. A stack overflow vulnerability exists in the Tenda AC6 WifiBasicSet function, which can be exploited by an attacker to cause arbitrary command execution...

Tenda AC9 Command Injection Vulnerability (CNVD-2022-26245)

Tenda AC9 is a wireless router from Tenda, China.A command injection vulnerability exists in Tenda AC9 version 15.03.2.21, which stems from the failure of the vlanid parameter in the SetIPTVCfg function to properly filter the special elements of the construction snippet, which can be exploited to...